Privacy Policy

Spalyn Privacy Policy

Effective Date: September 2, 2026

This Privacy Policy explains how the Spalyn Team (“Spalyn,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the Spalyn mobile application and related services (collectively, the “Service”).

By using Spalyn, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

A. Information You Provide

We may collect information that you provide directly when you create an account, use Spalyn, participate in shared spaces, communicate with other users, or contact us.

This may include:

• Account information, such as your email address, display name, public user ID, profile image, and profile information;

• Authentication information, such as your password, which is stored using security measures such as hashing rather than in plain text;

• Space information, including space names, covers, types, access settings, and membership information;

• Floor plans and layout information, including areas, walls, doors, windows, and other layout-related data;

• Item information, including item names, images, types, locations, status, and shared notes;

• Personal item settings and private notes associated with your account;

• Messages and communication content sent through supported messaging features;

• Space invitations, invite codes, QR-related invitation information, and membership actions;

• Social information, including follows, following relationships, and interactions with user profiles;

• Images or other content you choose to upload;

• Support requests, feedback, and other communications you send to us;

• Information relating to subscription or virtual currency selections you choose to purchase.

B. Information Collected Automatically

When you use Spalyn, we may automatically collect certain technical and usage information needed to operate, secure, maintain, and improve the Service.

This may include:

• Device type;

• Operating system and version;

• App version;

• Language and regional settings;

• Time zone;

• Device or app identifiers used for security and session management;

• Login and authentication activity;

• API request and service interaction information;

• Crash, error, diagnostic, and performance information;

• Feature usage and activity information, such as recently accessed spaces, items, or actions performed within a space.

We may also collect limited analytics or attribution information where permitted by applicable law and your device settings.

2. Information From Apple and Other Service Providers

Spalyn may receive limited information from Apple or other service providers in order to provide specific features.

This may include:

App Store Purchases

When you purchase a subscription, virtual currency, or other eligible in-app content through Apple, we may receive purchase receipts, transaction identifiers, product information, and entitlement verification results.

We do not receive your full payment card information. Payments are processed by Apple.

Push Notifications

If you enable notifications, we may receive and store a device push notification token in order to deliver supported notifications.

Analytics and Attribution

Spalyn may use analytics or attribution services, such as Adjust or similar service providers, to understand app installation, performance, and campaign attribution.

Where Apple's App Tracking Transparency framework or applicable law requires your permission, tracking-related information will only be accessed or used after you provide authorization through the iOS system prompt.

If you do not authorize tracking, we will respect that choice.

3. Device Permissions

Depending on the features you choose to use, Spalyn may request access to certain device permissions.

Camera

Camera access may be used for features such as:

• Scanning supported QR codes;

• Capturing profile images;

• Adding space covers;

• Adding item images.

Photos

Photo library access may be used when you choose to upload or select images for profiles, spaces, or items.

Microphone

Microphone access may be requested if you use a feature that requires audio input, such as supported voice communication features.

Notifications

Notification permission may be used to provide alerts related to messages, invitations, shared-space activity, account information, or other Service events.

Tracking

Tracking permission may be requested through Apple's App Tracking Transparency framework where attribution or analytics functionality requires it.

You can deny or revoke device permissions at any time through iOS Settings. Some Spalyn features may not function correctly without the permissions they require.

4. How We Use Information

We may use information collected through Spalyn to:

• Create and manage user accounts;

• Authenticate users and maintain login sessions;

• Provide and synchronize spaces, floor plans, areas, items, status, and notes;

• Provide shared-space collaboration features;

• Maintain personal item settings and private notes associated with your account;

• Display information to members of shared spaces according to applicable permissions;

• Provide invitations, QR joining, and membership functionality;

• Provide user search, profiles, following relationships, and social features;

• Enable communication between eligible users;

• Maintain and display relevant space activity;

• Process, verify, restore, and manage subscriptions, virtual currency, and in-app entitlements;

• Deliver push notifications when enabled;

• Provide customer support and respond to requests;

• Detect fraud, unauthorized access, abuse, or security incidents;

• Maintain the reliability, security, and performance of the Service;

• Diagnose technical issues and improve user experience;

• Analyze app usage and attribution where permitted;

• Enforce our User Agreement and other policies;

• Comply with legal obligations and lawful requests.

We do not sell your personal information.

5. Shared Spaces and Information Visible to Other Users

Some information you provide through Spalyn is intended to be shared with other users.

For example, members of a shared space may be able to see information such as:

• Space names and covers;

• Areas and layouts;

• Shared items;

• Item locations;

• Item status;

• Shared notes;

• Space members;

• Relevant activity within the shared space.

Your public profile information may also be visible to other Spalyn users through profile, search, follow, or related social features.

Messages you send are visible to the recipient or recipients supported by the applicable messaging feature.

You should consider what information you choose to share through collaborative or social features.

6. Personal Settings and Private Notes

Spalyn may allow you to maintain personal settings, preferences, or notes associated with a shared item.

Information specifically designated as private personal information is not intended to be visible to other members of the shared space.

We may still process this information as reasonably necessary to:

• Store and synchronize it for your account;

• Provide the relevant feature;

• Maintain security and reliability;

• Prevent fraud or abuse;

• Comply with applicable law.

You should avoid storing unnecessary highly sensitive personal information in private notes or other Spalyn fields.

7. How We Share Information

We may share information in the following circumstances.

With Other Users

Information may be shared with other users when required by the features you choose to use.

Examples include:

• Shared-space content visible to space members;

• Public profile information;

• Following relationships;

• Messages sent to another user;

• Space invitations and related information.

With Service Providers

We may use third-party service providers that help us operate Spalyn, including providers of:

• Cloud hosting;

• Database and storage infrastructure;

• Analytics;

• Attribution;

• Security;

• App performance and diagnostics;

• Other technical services.

These providers may process information on our behalf only as necessary to perform the services they provide to us.

With Apple

Information may be exchanged with Apple where necessary for:

• App Store purchases;

• Subscription and entitlement management;

• Push notifications;

• Apple platform functionality;

• Compliance with App Store requirements.

For Legal or Safety Reasons

We may disclose information where reasonably necessary to:

• Comply with applicable law, regulation, legal process, or lawful government request;

• Protect the rights, safety, security, or property of users, Spalyn, or others;

• Detect or prevent fraud, misuse, or security incidents;

• Enforce our User Agreement.

Business Changes

If Spalyn or its assets are involved in a merger, acquisition, restructuring, financing, or transfer, information may be transferred as part of that transaction where permitted by law.

8. Data Retention

We retain personal information for as long as reasonably necessary to provide Spalyn and fulfill the purposes described in this Privacy Policy.

The length of retention may depend on:

• Whether your account remains active;

• The type of information;

• Whether the information is part of a shared space;

• Security or fraud-prevention requirements;

• Legal and regulatory obligations;

• Accounting or transaction requirements;

• Dispute resolution or enforcement needs.

Some purchase and entitlement records may be retained where necessary for transaction verification, accounting, security, or fraud prevention.

Backup copies may remain for a limited period after information is deleted from active systems.

9. Account and Data Deletion

You may request deletion of your Spalyn account through the account settings available within the Service.

Account deletion may permanently remove information associated only with your account.

However, certain information may be retained when reasonably necessary for legal, security, fraud-prevention, transaction, dispute-resolution, or enforcement purposes.

Information that forms part of a shared space may not always be deleted together with your account if retaining it is necessary to preserve shared-space information or the experience of other members.

Where appropriate, account-identifying information may instead be removed or disconnected from retained shared content.

If you are unable to access the in-app account deletion feature, you may contact us using the support information listed below.

10. Your Choices and Rights

Depending on your country or region, you may have rights relating to your personal information, including rights to:

• Access certain personal information;

• Correct inaccurate information;

• Request deletion;

• Request a copy or export where applicable;

• Object to or restrict certain processing;

• Withdraw consent where processing is based on consent.

Within Spalyn, you may also be able to:

• Edit your profile information;

• Manage shared-space membership;

• Leave shared spaces;

• Remove certain content you control;

• Follow or unfollow users;

• Manage subscriptions through Apple;

• Request account deletion.

You can manage camera, photo, microphone, notification, and tracking permissions through iOS Settings.

We may need to verify your identity before completing certain privacy-related requests.

11. Subscriptions and Virtual Currency

Purchases made in the Spalyn iOS application are processed by Apple.

We may receive information such as:

• Purchased product identifiers;

• Transaction identifiers;

• Purchase status;

• Subscription entitlement information;

• Subscription expiration or renewal status;

• Virtual currency purchase verification information.

We do not receive your full payment card or other complete payment credentials.

Subscription management, cancellation, billing, and refunds are handled according to Apple's applicable policies.

12. Security

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, disclosure, alteration, misuse, or loss.

These measures may include:

• Protected authentication systems;

• Password hashing;

• Secure network transmission;

• Access controls;

• Security monitoring;

• Restricted access to systems and data.

However, no method of electronic transmission or data storage is completely secure, and we cannot guarantee absolute security.

You are responsible for keeping your account credentials secure.

13. International Data Processing

Spalyn may use infrastructure or service providers located in countries or regions different from where you live.

As a result, your information may be transferred to or processed in other jurisdictions whose data protection laws may differ from those in your country or region.

Where required by applicable law, we take reasonable steps designed to protect personal information when it is transferred internationally.

14. Children and Age Requirements

Spalyn is intended only for users who are at least 16 years old.

We do not knowingly permit children under 16 to create accounts or use the Service.

If the laws of a user's country or region require a higher minimum age to use a service such as Spalyn, that higher minimum age applies.

If we learn that we have collected personal information from someone who is not eligible to use Spalyn, we may take appropriate steps to remove the information and terminate the associated account.

If you believe that an ineligible minor has provided personal information to Spalyn, please contact us.

15. Third-Party Services

Spalyn may contain or rely on third-party services that are governed by their own privacy practices.

These may include Apple platform services, infrastructure providers, analytics tools, attribution providers, and other technical services.

This Privacy Policy does not control the independent privacy practices of third parties that process information outside our direction or control.

We encourage you to review the privacy policies of relevant third-party services where appropriate.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to Spalyn, our practices, legal requirements, or technical services.

When we make changes, we will update the Effective Date shown at the top of this Privacy Policy.

For material changes, we may provide additional notice through Spalyn or another appropriate method where required.

Your continued use of the Service after an updated Privacy Policy becomes effective means that you acknowledge the updated policy, except where additional consent is required by applicable law.

17. Contact Us

If you have questions about this Privacy Policy, your personal information, or a privacy-related request, please contact:

Spalyn Team

Email: spalynsupport@outlook.com