← Back to Spurth

Privacy Policy

Last updated: September 27, 2026

1. Information We Collect

When you use Spurth, we collect information you provide directly, including:

• Account details — username, email address, phone number (for host verification), and a password (not required if you sign in with Google — see Section 3)
• Profile information — full name, birth date, gender, bio, location text, interests, and a profile photo you upload
• Activity content — activities you create or join, posts, photos and videos, comments, and poll votes
• Communications — messages you send through the app's chat features
• Safety reports — if you report a post, activity, or user, we record who reported it, the reason, and any details you provide; if you block someone, we record that too

We also collect certain information automatically:

• Device location (only with your permission), used to show activities near you
• Push notification token — if you allow notifications, an identifier for your device that lets us send them; deleted when you sign out
• Basic usage data, to help us maintain and improve the Service
• Error reports — when the app or website hits a problem, technical details about it (the device, browser or operating system, app version, and what the app was doing), tied to your internal account ID but not your name or email address

2. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Show you activities near you, ranked in part by the interests you've selected
• Verify your email address, and your phone number if you host an activity
• Deliver push notifications about activities and messages you've opted into
• Communicate with you about your account or activities
• Review reports and enforce our Terms — including blocking, removing content, or suspending accounts
• Detect and prevent fraud or abuse

3. Signing In With Google

If you choose "Sign in with Google," Google shares your email address, name, and profile picture with us as part of that sign-in. We only use and store your email address — to create your Spurth account (or match you to an existing one) and to mark your email as verified, since Google has already verified it. We do not store the name or profile picture Google provides; any name or photo shown on your Spurth profile comes only from what you enter directly in the app.

We request only the basic sign-in scopes needed to identify you (your Google account ID, email address, and basic profile info) — nothing more. We do not request, access, or store your Gmail, Google Drive, Google Contacts, Calendar, or any other Google service data, and we never use Google account data for advertising.

Spurth's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. How We Share Information

We don't sell your personal information. We share information only:

• With other users, as part of normal app functionality (e.g. your profile and posts are visible to other users, and activity hosts can see who's joined)
• With the service providers listed below, who help us operate Spurth
• When required by law, or to protect the rights and safety of our users

The service providers we currently use, and what each handles:

• Google — Google Sign-In (see Section 3), Firebase (phone number verification, chat message storage, and push notifications), and Google Maps to show locations
• Cloudinary — storing and delivering photos and videos, with automated image moderation performed through Amazon Rekognition
• Microsoft Azure and Supabase — hosting our servers and database
• Zoho — sending verification and account emails
• GitHub — hosting this website
• Sentry — receiving the error reports described in Section 1

Each of these providers can only use your information to perform services for us, under their own privacy and security terms — not for their own independent purposes.

5. How We Store and Protect Your Data

• Passwords are never stored in plain text — they're stored as one-way cryptographic hashes we can't reverse. Accounts created via Google Sign-In have no password at all.
• All traffic between the app and our servers is encrypted in transit (HTTPS/TLS).
• Account and activity data is stored in a Postgres database (via Supabase); photos and videos are stored via Cloudinary; chat messages are stored in Google Firestore, secured by rules that only let the actual participants of an activity read or write its messages.
• Access to production systems is limited to the people who operate Spurth.

No method of transmission or storage is 100% secure, and we can't guarantee absolute security — but we don't store more than we need, and we work to keep what we do store safe.

6. Data Retention and Deletion

We retain your information for as long as your account is active, or as needed to provide the Service (for example, safety reports may be kept after account action to maintain a record of enforcement decisions).

You have two ways to stop us holding your data, both self-service, in the app under Settings:

• Deactivate Account — hides your account and logs you out. Your data is retained so you can ask us to reactivate it later.
• Delete Account Permanently — immediately and permanently deletes your account and the data tied to it (profile, activities, posts, messages, and reports you filed). This cannot be undone.

You can also request deletion by emailing us at the address in Section 9 — we'll act on it within a reasonable time and confirm once it's done.

7. Your Rights

You can access, update, or delete your profile information directly within the app. For account deletion or other data requests, use the in-app option above or contact us at the email below.

8. Children's Privacy

Spurth is not intended for children under 13. We do not knowingly collect personal information from children under 13.

9. Contact Us

Questions about this Privacy Policy, or a request about your data (including deletion)? Reach out at support@spurth.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of material changes by updating the date at the top of this page.