Spot Social ("Spot Social," "we," "us," or "our") is operated by Spiritual Spark Studios, LLC. This Privacy Policy explains what information we collect when you use the Spot Social application and website (collectively, the "Service"), why we collect it, and the choices you have. By using the Service, you agree to this policy.
We collect only the information needed to provide the Service. Here is each category, why we collect it, and how it is stored.
| Category | What | Why |
|---|---|---|
| Identity | Email address, display name | Account creation and sign-in |
| Location | Venue check-ins (latitude/longitude and time) | Check-ins, badges, streaks, mayorships, and nearby-venue discovery |
| Device | Device vendor, operating system, and network hardware address (MAC) | Captive-portal Wi-Fi access and aggregate analytics |
| Usage | Session duration ("dwell time") and bandwidth used | Aggregate business analytics; never tied to you without consent |
| Marketing consent | Your opt-in/opt-out choice per venue | To send push notifications you have explicitly requested |
| Content | Check-ins, tips, and Wi-Fi network submissions | The core of the Service — shared with the community |
| Service | What they see | Purpose |
|---|---|---|
| Stripe, Inc. | Payment method at checkout | Payment processing (we never see full card details) |
| Cloudflare, Inc. | Service traffic and stored data | Hosting, CDN, and security |
| Venue owners (B2B) | Aggregate analytics; individual data only with your explicit per-venue opt-in | Business intelligence and opted-in marketing |
We take reasonable measures to protect your data, including transport-layer encryption (TLS), access controls, and rate limiting. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
The Service uses minimal session tokens to keep you signed in. Our public marketing pages may use basic analytics; analytics are not loaded for authenticated in-app activity.
EEA / UK residents (GDPR): you have the right to access (Art. 15), rectify (Art. 16), erase (Art. 17), restrict processing (Art. 18), data portability (Art. 20), object to processing (Art. 21), and withdraw consent at any time (Art. 7).
California residents (CCPA/CPRA): you have the right to know what we collect, request deletion, correct inaccurate data, opt out of "sale" (we do not sell), and non-discrimination for exercising these rights.
To exercise any right, contact [email protected] or use the in-app export/delete tools.
The Service is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us personal data, contact us and we will delete it.
We are based in the United States and store data on Cloudflare's infrastructure. If you access the Service from outside the US, you consent to the transfer of your data to the US, where data protection laws may differ. We use appropriate safeguards for international transfers.
We may update this policy from time to time. We will post the new policy on this page and update the "Effective date" above. Material changes will be announced through the app or by email.
Spiritual Spark Studios, LLC
3848 N Davis Hwy
Pensacola, FL 32503
Email: [email protected]