Privacy Policy for Spontaneity
Last Updated: July 2, 2025
Who We Are
Spontaneity is developed by Henry Doce (“we,” “us,” or “our”). We help ADHD adults maintain authentic relationships through thoughtful reminder notifications.
Contact Information:
- Account Information: Email address, name
- Relationship Data: Names and relationship types (family, friend, partner) you choose to add
- Notes: Optional notes you write about your connections
- Communication Records: When you mark reminders as complete
- Device Information: Device type, operating system version, device tokens
- Push Notification Data: Device tokens, delivery status, notification preferences
- App Usage: How you interact with the app, which features you use, navigation patterns
- App Performance: Crash reports, response times, error logs
- Local Storage: App preferences, cached data stored on your device
- Technical Data: App crashes, performance metrics
We use your information to:
- Provide the Service: Send you relationship reminders at random intervals
- Improve the App: Understand how features are used and fix bugs
- Communicate with You: Send important updates about the service
- Ensure Security: Protect against fraud and abuse
Legal Basis (GDPR): We process your data based on:
- Contract performance (providing the service you signed up for)
- Legitimate interests (improving our service and ensuring security)
- Your consent (for marketing communications)
We DO NOT sell your personal information.
We may share your information with:
- Service Providers: Supabase (database hosting), Apple (app distribution), Expo (push notifications)
- Legal Requirements: If required by law or to protect our rights
- Business Transfer: If we’re acquired (users will be notified)
Your Privacy Rights
For All Users:
- Access: Request a copy of your data
- Correction: Update incorrect information
- Deletion: Delete your account and data
- Data Portability: Export your data
For EU Users (GDPR):
- Withdraw Consent: Opt out of marketing emails anytime
- Object to Processing: Limit how we use your data
- Restrict Processing: Temporarily limit data use
For California Users (CCPA):
- Know: What personal information we collect and share
- Delete: Request deletion of your personal information
- Opt-Out: We don’t sell data, but you can opt out of sharing
- Non-Discrimination: We won’t discriminate for exercising rights
To Exercise Your Rights: Email us at hello@tryspontaneity.app
Data Security
We protect your information using:
- Encryption: Data encrypted in transit and at rest
- Access Controls: Limited access to personal data
- Regular Security Reviews: Ongoing security assessments
- Secure Infrastructure: Hosted on SOC 2 compliant servers
Data Retention
- Account Data: Kept while your account is active
- Relationship Data: Deleted within 30 days of account deletion
- Push Tokens: Deleted immediately upon app uninstall or logout
- Notification History: Deleted after 90 days
- Technical Logs: Deleted after 12 months
- Marketing Data: Kept until you unsubscribe
International Data Transfers
Your data may be processed in the United States. For EU users, we ensure adequate protection through:
- Appropriate data transfer mechanisms as required by GDPR
- Additional technical and organizational safeguards
- Compliance with applicable data protection requirements
Children’s Privacy
Spontaneity is not intended for users under 13. We don’t knowingly collect information from children under 13. If we discover we have, we’ll delete it immediately.
Cookies and Tracking
We use minimal tracking:
- Essential Data: Required for the app to function (push tokens, preferences)
- Performance Analytics: App crashes, response times (anonymized)
- Usage Analytics: Feature usage, navigation patterns (anonymized)
- No Advertising Tracking: We don’t show ads or track for marketing purposes
Changes to This Policy
We may update this policy occasionally. Changes will be:
- Posted prominently in the app
- Emailed to registered users (for significant changes)
- Effective 30 days after posting
State-Specific Rights
California Residents:
Under the CCPA, you have additional rights listed above. We don’t sell personal information.
Virginia Residents:
Under the VCDPA, you have similar rights to EU users regarding access, correction, deletion, and data portability.
Other State Laws:
We comply with applicable state privacy laws. Contact us for specific questions.
Privacy Questions: hello@tryspontaneity.app General Support: hello@tryspontaneity.app
Data Protection Officer: Henry Doce (for EU inquiries)
Response Time: We’ll respond to privacy requests within 45 days (30 days for EU requests).
Quick Summary
What we collect: Your email, relationship names, usage data How we use it: To send reminders and improve the app Who we share with: Our service providers (Supabase, Apple) Your rights: Access, correct, delete, or export your data anytime How to contact us: hello@tryspontaneity.app
This policy complies with GDPR, CCPA/CPRA, COPPA, and other applicable privacy laws as of July 2025.