1. What We Collect
We collect only what's needed to make SpoVote work: your email address, display name, avatar, the sessions you create, your votes, messages you send, and any flyer photos and listing text you choose to send to our AI features. That's it.
Public profiles & leaderboards.SpoVote is a social app, so some of your activity is visible to other players. Your display name and avatar appear on public profiles, and the MVP votes you cast, the sessions where you're voted MVP, the skill endorsements you receive, and your voting-accuracy (“clout”) score are shown on in-app leaderboards that other users can see. When you cast an MVP vote it is uploaded to our servers and contributes to these public rankings.
If you join our area waitlist on the website, we collect only the email address and the city or area you enter — solely so we can notify you when SpoVote becomes active near you. We don't collect your precise location, and you can ask us to remove you at any time by emailing support@spovote.com.
Contacts.If you choose to invite friends, the SpoVote app reads your device's address book on your device only — to show you a list of people you can invite. Your contacts are never uploaded to our servers, never stored, and never shared with anyone. Granting contacts access is entirely optional; the rest of the app works without it.
2. Why We Collect It
Solely to provide the service. Your email is for authentication, your display name and avatar let friends find you, and session/vote/message data powers the core features you use.
3. What We Don't Do
We never sell your data to anyone. We never share it with advertisers. We don't do cross-app tracking. We never upload, store, or sell your contacts. Your data is yours — period.
4. Data Storage
Your data is stored securely on Supabase (PostgreSQL database and file storage). Video and livestreams also use a cloud infrastructure provider: livestreams run there, and livestream recordings and some older video files are stored on and delivered from it. All data in transit is encrypted using TLS. We follow industry-standard security practices to keep your information safe.
5. Your Rights
You can view and delete your data in the app at any time. To get a copy of your data, email support@spovote.comand we'll send it to you within 30 days. Account deletion removes everything — your profile, sessions, votes, messages, friendships, and the photos and videos you uploaded. For step-by-step instructions on deleting your account, see spovote.com/delete-account.
6. Third-Party Services
We use Supabase for backend infrastructure (database, authentication, and storage), and Apple and Google for app distribution and in-app purchases. To keep the app stable, we also use Google Firebase Crashlytics and Sentry to collect crash reports and diagnostic data — such as error logs and a device identifier — when something goes wrong. These providers process that data only on our behalf, solely to help us fix bugs and improve reliability; they don't use it for their own purposes. Each service has its own privacy policy. We don't sell your data, share it with advertisers, or share it with any third parties beyond the service providers described in this section.
Other services that help run SpoVote. A few more providers process data on our behalf, each under its own privacy policy and only for the purpose listed here:
Cloud infrastructure for video and livestreams. Our livestreams, livestream recordings and some older video files are run and stored by a cloud infrastructure provider.
Email delivery.The emails we send you — notifications and announcements — go out through an email delivery service.
Maps.When you open a map in the app, the map tiles for the area you're viewing are fetched from the map service built into your platform (Google Maps on Android, Apple Maps on iOS), so the area you're looking at — which may include your approximate location — is sent to that map provider while the map is open.
Weather.A weather data service shows the forecast for a session's venue. It receives only the venue's coordinates — never your device location.
Website hosting and forms.Our website (spovote.com) is served by a hosting provider that also supplies its cookieless, aggregate visitor analytics, and what you type into the site's contact and waitlist forms is delivered to our inbox by a form-handling service.
Stripe. Processes purchases made on the web (rather than through the App Store or Google Play). Your card details go directly to Stripe; we never see or store your card number.
AI processing.Two optional features send content to a third-party AI service, and only when you trigger them: “Autofill from flyer” sends the flyer photo you pick, and “Enhance with AI” sends your session's title, notes and the photos you attached to it. The app asks for your permission before the first upload. Feedback you submit through “Send Feedback” (the message text — not your screenshots) is also summarised by an AI service so we can sort it. The content is sent without your name, email or account details; the provider processes it transiently under its API terms and does not use it to train its models. The details extracted for your listing are stored in your session like anything else you write there, and listings written this way carry an “AI-assisted listing” label so other players can tell.
7. Cookies & Analytics
On our website, we use privacy-friendly, aggregate analytics to understand traffic — we don't use cookies to track you across other sites, and we never sell analytics data. In the SpoVote app, we don't use advertising trackers, advertising IDs, or cross-app tracking, and we've disabled Firebase Analytics' automatic data collection; the only data collected beyond what runs the app is the crash reports and diagnostics described above, used solely to keep the app stable and fix bugs.
8. Data Retention
Your data is kept as long as your account is active. When you delete your account, your data is removed from our live database and storage immediately. Encrypted backups that we keep for disaster recovery rotate out automatically within about 7 days, and we never restore deleted accounts from them.
9. Children
SpoVote is not intended for users under 13 years of age. We don't knowingly collect data from children. If you believe a child is using SpoVote, please contact us.
10. Changes & Contact
If we update this policy, we'll notify you through the app. For any privacy-related questions, reach out to us at support@spovote.com.