Privacy Policy

1. Introduction

Spray ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App") and website ("Website"). By using our services, you consent to the practices described in this policy.

2. Information We Collect

Information You Provide

• Account information: Phone number, display name, username, and optional profile photo when you create an account.
• Linked accounts: If you choose to link Google or Apple accounts, we receive your email address and name from those providers.
• Content: Artwork, posts, descriptions, and other content you create and share through the App.
• Communications: Feedback, feature requests, and support inquiries you submit through our website or App.
• Location: Your home base city (provided during onboarding) and current location (used for AR anchoring and nearby art discovery).

Information Collected Automatically

• Device information: Device type, operating system version, and unique device identifiers.
• Usage data: Screen views, feature usage, session duration, and interaction patterns collected through Firebase Analytics.
• Location data: Approximate location updated periodically (throttled to once per hour) to enable nearby content discovery and dynamic pricing.
• AR data: Camera data is processed on-device for AR functionality and is not stored or transmitted to our servers.

3. How We Use Your Information

• To provide and maintain the App's functionality, including AR features, content creation, and social interactions.
• To process subscriptions and manage your credit balance.
• To display anchored artwork at the correct physical locations.
• To calculate dynamic anchor pricing based on location data.
• To personalize your experience and show relevant nearby content.
• To analyze usage patterns and improve the App (via Firebase Analytics).
• To communicate with you about updates, features, and support.
• To detect and prevent fraud, abuse, and violations of our Terms of Service.

4. How We Share Your Information

We do not sell your personal information. We may share information with:

• Other users: Your public profile (username, display name, profile photo) and public posts are visible to other Spray users.
• Service providers: We use Firebase (Google) for authentication, data storage, and analytics; RevenueCat for subscription management; Replicate for AI generation; and Mapbox for location services. These providers process data on our behalf under their own privacy policies.
• Legal requirements: We may disclose information if required by law, regulation, or legal process.

5. Data Storage and Security

Your data is stored in Firebase (Google Cloud) servers. We implement appropriate technical and organizational measures to protect your information, including encryption in transit (HTTPS/TLS) and at rest. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account data for as long as your account is active. When you delete your account through the App's settings, we delete your profile, posts, and associated data from our systems. Some data may persist in backups for a limited period. Anonymous, aggregated analytics data may be retained indefinitely.

7. Your Rights and Choices

• Access and update: You can view and edit your profile information at any time through the App.
• Delete your account: You can permanently delete your account and all associated data from Settings in the App.
• Location permissions: You can revoke location access through your device settings. Some features (AR anchoring, nearby discovery) will be limited.
• Notifications: You can disable push notifications through your device settings.
• Analytics opt-out: You can limit analytics collection through your device's privacy settings.

8. Children's Privacy

Spray is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly.

9. Third-Party Services

Our App integrates with the following third-party services, each with their own privacy policies:

• Firebase (Google): Authentication, Firestore database, Cloud Storage, Analytics
• RevenueCat: Subscription and in-app purchase management
• Replicate: AI image generation (prompts and images are sent for processing)
• Mapbox: Map display and geocoding
• GeoNames: Population data for anchor pricing
• Google ARCore: Cloud anchor hosting for AR art placement

10. International Users

If you are accessing the App from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. By using the App, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the App or by posting the updated policy on our Website. The "Last updated" date at the top indicates when the policy was last revised.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected]