Privacy

Privacy Policy

Effective 1 July 2026 · Last updated 21 October 2026

Spontificant is operated by High Wire Development LLC ("High Wire," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Spontificant mobile application, related websites, and services (collectively, the "Service").

Please review this policy carefully. If you do not agree with it, please do not use the Service.

1. Information We Collect

Information you provide

Depending on how you use Spontificant, we may collect:

• Account information, such as your email address when provided through Apple or Google sign-in.
• Reminder content you create, including reminder titles, reminder messages, schedules, active windows, quiet hours, and related settings.
• Support communications, including any information you choose to include when contacting us.

Information collected automatically

We may collect limited technical and operational information, including:

• Authentication and session information needed to keep you signed in.
• Security audit information, such as hashed IP-derived values, sign-in events, provider type, and non-personal diagnostic details.
• Subscription entitlement information, such as whether your account has an active premium subscription, the product identifier, renewal status, and expiration date.
• Device or app information that may be included in session records or support/debugging workflows.

Website analytics and browser storage

When website analytics is enabled as described in Section 9, we collect campaign and visit information, including UTM parameters (utm_source, utm_medium, utm_campaign, utm_term, and utm_content), referring URL, landing-page path, visit timestamp, and traffic channel (such as paid, organic search, or direct). When present in a visit URL, we also collect advertising click identifiers: gclid, gbraid, wbraid, fbclid, msclkid, ttclid, twclid, and li_fat_id. These identifiers can be associated with an advertising click or browser and are not necessarily anonymous.

When website analytics is enabled, we store first-visit attribution in your browser’s localStorage under spontificant-attribution and retain attribution for the current page visit in memory. We remove the listed campaign parameters and click identifiers from the address bar after capture; this does not delete the stored attribution. We do not capture analytics attribution or store it in your browser while analytics is disabled, including before you accept analytics where opt-in consent is required.

When website analytics is enabled, we use Google Analytics 4 (GA4) to measure page views, sections viewed, calls to action clicked, app-download link clicks, and page-performance measurements (Web Vitals). Our analytics integration sends event details, traffic channel, and campaign name to Google. Google’s tag may also collect page, referrer, browser/device, and cookie-based identifier information. GA4 may use first-party cookies to distinguish visitors and sessions. Website analytics also runs on this Privacy Policy page, subject to the choices described in Section 9.

We use the browser-storage key spontificant-consent to remember your analytics choice, including when you reject analytics. This preference storage is used to honor your choice and is separate from optional analytics and attribution storage. Website attribution and analytics storage are separate from the mobile app’s local reminder storage.

Local device data

Spontificant is local-first. Reminder content, schedules, settings, and notification plans are stored on your device by default. For free users, reminder content does not sync to our servers.

If you use premium sync, your reminder content, schedules, settings, and related sync metadata may be stored on our servers so they can be synced across your devices.

Notifications

Spontificant uses local notifications generated on your device. In version 1, we do not send reminder content through Apple Push Notification service or Firebase Cloud Messaging.

2. How We Use Information

We use information to:

• Provide, operate, maintain, and improve Spontificant.
• Create and manage your account.
• Save and sync your reminders and settings if you use premium sync.
• Process and verify subscriptions and entitlements.
• Authenticate users and protect accounts from misuse.
• Provide customer support.
• Debug, secure, and monitor the Service.
• Measure website traffic, understand which campaigns bring visitors to the website, evaluate app-download links and other calls to action, and improve website content and performance.
• Comply with legal obligations and enforce our Terms of Service.

3. Third-Party Services

We use third-party service providers to operate Spontificant. These providers may process information on our behalf, subject to their own terms and privacy practices.

• Apple: Used for Apple sign-in, App Store purchases, and subscription management.
• Google: Used for Google sign-in and Google Play purchases.
• Google Analytics 4: Used on our websites to measure traffic, campaign performance, visitor interactions, and page performance. When analytics is enabled, our website loads Google’s tag from googletagmanager.com and sends analytics information to Google. See Google’s Privacy Policy and how Google uses information from sites that use its services.
• Subscription-billing processor: We use a third-party subscription-billing processor to manage entitlements and purchases. We share an internal account identifier, your email address, and (if provided) your display name with this processor so it can manage subscriptions and support customer requests. We do not share nudge titles or nudge message text with this processor.
• AWS: Used for hosting server-side services.
• Supabase: Used as a managed PostgreSQL database host.

We do not sell your personal information.

4. Subscriptions and Purchases

Purchases and subscriptions are processed by Apple or Google, depending on your device and store. We do not receive or store your full payment card details. We may receive subscription status and entitlement information from the app stores, our subscription-billing processor, or both.

Deleting your Spontificant account does not automatically cancel an active App Store or Google Play subscription. You must cancel subscriptions through the applicable app store account settings.

5. Data Retention

We keep information only as long as reasonably necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law.

Current retention practices include:

• Short-lived authentication challenges are deleted after expiration.
• Expired or revoked sessions are retained for a limited period and then deleted.
• Security audit logs are retained for up to 90 days.
• Deleted sync records and sync deduplication records are retained temporarily to support reliable syncing and then deleted.
• Account data is deleted when you complete account deletion, except limited non-personal security audit records that may remain temporarily.

Local data stored on your device may remain until you delete it in the app, delete your account where applicable, clear app data, or uninstall the app.

Website first-visit attribution and any saved analytics preference in localStorage have no automatic expiration. They remain until you clear this website’s browser storage or the browser removes them. Clearing site storage also removes your saved analytics choice, so the regional defaults described in Section 9 apply again. In the EU/EEA and UK, analytics remains disabled until you accept it again. Elsewhere, analytics may resume unless a recognized GPC or Do Not Track signal is enabled or you opt out again. Deleting your app account does not clear website browser storage or Google Analytics cookies.

Google Analytics cookies have their own expiration settings, separate from localStorage. Analytics data held by Google is subject to our GA4 property settings and Google’s retention practices; it is not governed by the server-data retention periods listed above. See Google’s cookie documentation and Google’s data-retention documentation.

6. Account Deletion

You may request account deletion from within the app. When your account is deleted, we delete your account record and associated server-side data, including synced reminders, synced messages, synced settings, sessions, identity links, and subscription entitlement snapshots, subject to limited retention for security audit records.

Account deletion may also trigger best-effort deletion or revocation steps with Apple and our subscription-billing processor where applicable. These steps do not cancel store subscriptions.

For more information, see our Account Deletion and Support page.

7. Security

We use administrative, technical, and organizational safeguards designed to protect information. For example, authentication tokens are stored securely, refresh tokens are stored as hashes where applicable, Apple refresh tokens are encrypted, and reminder sync requires authenticated access.

No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

8. Children

Spontificant is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us so we can take appropriate action.

9. Your Choices

You may:

• Use Spontificant without premium sync, in which case reminder content remains local to your device.
• Edit or delete reminders in the app.
• Disable notifications through your device settings or app settings.
• Delete your account in the app.
• Cancel subscriptions through Apple App Store or Google Play account settings.
• Contact us with privacy questions or requests.

Website analytics choices

For visitors in the European Union, European Economic Area (EU/EEA), and United Kingdom (UK), optional analytics is off by default. We display a consent banner that lets you accept or reject analytics. Until you accept, we do not load Google Analytics, set analytics cookies, capture campaign attribution, or send analytics events to Google.

For visitors outside the EU/EEA and UK, analytics is enabled by default unless you opt out or your browser sends a recognized GPC or Do Not Track signal. You can opt out at any time using the website’s “Privacy choices” control. This control is available to all visitors, including California residents. Rejecting analytics or opting out does not prevent you from using the website.

You can change your choice, opt out, or withdraw consent at any time through the website’s “Privacy choices” control. Opting out or withdrawing consent stops further analytics event collection and transmission and further attribution capture and storage. Your choice is saved for the browser you are using; you may need to choose separately on other browsers or devices. If your browser blocks preference storage, your choice may not persist between visits and the regional defaults may apply again.

We also treat Global Privacy Control (GPC) and recognized Do Not Track signals (a value of “1” or “yes”) as a request to disable optional analytics, even if you previously accepted it. You can additionally block Google Analytics through browser privacy controls or the Google Analytics opt-out browser add-on, where supported.

Rejecting analytics, opting out, or withdrawing consent does not by itself erase attribution or cookies already stored, or data already sent to Google. You can remove existing attribution, saved preferences, and cookies through your browser’s controls for this website’s data. Contact us with requests concerning information already collected.

10. International Users

High Wire Development LLC is based in the United States. If you use the Service from outside the United States, your information may be processed in the United States and other locations where our service providers operate.

Website analytics information is sent to Google and may be processed in the United States and other locations where Google operates.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as required by law, such as by updating the effective date, posting notice in the app, or using other reasonable means.

12. Contact Us

High Wire Development LLC
Email: admin@spontificant.com