Privacy policy

Draft, pending legal review. It will name the company that runs Spoe once that company is registered.

Who we are

Spoe runs the Spoe app and its challenges (“Spoe”, “we”). This policy says what personal information Spoe collects, why, who sees it and how long it is kept. Questions go to support@spoe.app.

What we collect

Your account. When you sign in with Apple, Google or an email code: your email address (an Apple relay address if you chose to hide yours), the name Apple or Google shares with us, and an account ID. You also pick a username, which stays the same for good.

Your challenge days. Spoe uses Apple’s Screen Time on your phone. It can’t see what you do inside an app, and the app you pick and Apple’s usage figures stay on your phone. For each day of a challenge you’re in, your phone sends us the day’s result (held, broken or not watched), the minutes you spent in the challenge’s app (on your whole phone, for a whole-phone challenge) and a count of readings it ignored as implausible. We also keep which app the challenge measures and your phone’s time zone. For a solo goal we keep its rule, the names of the apps it covers and its time zone, and its days the same way.

Your phone. A key from Apple’s App Attest, which proves results come from Spoe on a real iPhone, and, if you allow notifications, the token Apple gives us to send them.

Money. Your confirmation that you’re 18 or older, given when you sign up; the birthday you enter stays on your phone. Then the amounts you pay, win and cash out, and your Wallet balance. You enter your card into Stripe’s form and it goes to Stripe: we never see or store your card number. From your card’s billing ZIP code we work out which US state it is billed in and keep that state with the payment, to check Spoe is offered there. If you told us the state you live in when you joined a challenge, we keep that too. For cash-outs, Stripe collects the identity and bank details US law requires on its own pages; we keep only the link to your Stripe account and whether it is ready.

Your photo. If you add a profile photo, the square copy your phone makes of it, with its location and other details removed. Before we keep it, Microsoft checks it for sexual, violent, hateful and self-harm images, and keeps no copy. A photo that fails is deleted.

What you send us. Emails to support, and a Screen Time recording if we ask you for proof of a day.

If you join the waitlist

On spoe.app you can leave your email address to hear when you can get Spoe. We keep that email address, when you joined, and the tag in the link you came from, which names the creator or video that sent you there. Joining doesn’t create an account.

To stop the form being flooded, we also keep a scrambled code made from your connection’s internet address. We use it only to count sign-up attempts, and delete codes once they are a day old.

We use your email address only to tell you when you can get Spoe. To be taken off the list, write to support@spoe.app.

What we don’t do

No ads, no tracking you across other companies’ apps or websites, and no selling or renting your information. Spoe has no analytics or advertising tools of its own.

How we use it

To run challenges: record your days, decide who finishes, split prize pools, and pay winnings, refunds and cash-outs.

To keep challenges fair: check that results come from a real phone, look into unusual results (we may ask you for proof), and stop fraud and abuse.

To tell you things: notifications about your challenges, which you can turn off, and an email when something needs you and a notification can’t reach you.

To answer you when you contact support, and to meet legal duties such as keeping payment records.

Who sees it

Other people on Spoe see only your username and, if you add one, your photo beside it: never your minutes, your days’ results, your name or your email. Your photo isn’t shown to someone who blocked you or reported it. Once an open challenge has started, anyone signed in to Spoe can see the usernames of the people still in it, until a week after it ends. People in the same challenge as you can see them for as long as the challenge exists. How many joined, how many are still in and the prize pool are shown to everyone.

Spoe’s administrators see your account, runs and money records, to run challenges, review results and help you.

Companies that help run Spoe

Supabase stores our data and runs sign-in and our servers. Stripe takes payments, makes refunds and pays out cash-outs; Stripe’s code in the app also collects information about your device and how you use its payment form, to prevent fraud. Apple provides Sign in with Apple, notifications, App Attest and Screen Time. Google provides Sign in with Google and may use your IP address to estimate your general location, to prevent fraud. Microsoft Azure AI Content Safety checks profile photos before we keep them. Resend sends our emails. Cloudflare hosts our website.

These companies keep technical logs, such as IP addresses, for security and troubleshooting, and each handles your information under its own privacy policy to provide its service to us.

We may also share information when the law requires it, or to protect Spoe, the people who use it or the public, for example from fraud.

How long we keep it

We keep your information while your account is open. Sent notifications are deleted after 30 days, a photo is deleted when you change or remove it or an administrator removes it, signing out removes your phone’s notification token, and a recording you send as proof is kept until the review and any dispute about it are settled.

You can delete your account in the app: Account, then Delete account. Your account, name, username, photo and notification tokens go at once, and if you signed in with Apple we revoke Spoe’s access to your Apple ID. Challenges and solo goals still running are forfeited, and a solo goal you paid for by card that never started is refunded to the card. The part of your Wallet balance that can be cashed out is cashed out to you, and money still waiting out a cash-out hold is lost, as the Official Rules say.

Some records stay after you delete your account, because they are part of other people’s results and payouts and because payment and tax law requires them: your challenge runs and their days (minutes included), the money you paid and received, your state and age confirmation, the link to your Stripe account, and your email address. We keep them only as long as those reasons last.

Your choices

You can turn off notifications, or take away Spoe’s Screen Time access, in your iPhone’s Settings. Without Screen Time access your phone can’t measure your days, so they can’t count as held.

To get a copy of your information, correct it, or ask anything about this policy, write to support@spoe.app. Depending on where you live, you may have other rights over your information, and we honour them as the law requires.

Who Spoe is for

Spoe is for people 18 and older who live in the United States. We don’t knowingly collect information from children under 13, and we delete it if we learn we have.

Keeping it safe

Your session is encrypted on your phone, results must be signed by your phone’s App Attest key, and account records are open only to administrators who sign in with a second factor. No system is perfectly secure, so write to support@spoe.app if you think something is wrong.

Changes

If this policy changes, we update this page and its date, and tell you in the app before a change that matters takes effect.

Last updated October 24, 2026.