Spill Privacy Policy

Document Version: 1.0
Effective Date: June 17, 2026

This Privacy Policy explains how Spill App, Inc., a Delaware corporation ("Spill," "we," "us," or "our"), collects, uses, and shares information in connection with the Spill mobile app, thespillapp.com, and related services (collectively, the "Services"). It applies to everyone who uses Spill.

1. Information We Collect

Information you provide. When you create an account and use Spill, we collect:

• Phone number — used to create and secure your account and to sign you in.
• Date of birth — used to confirm you are 18 or older. We verify age by self-attested date of birth; we do not require government ID.
• Profile details — any display name, username, or other information you choose to add.
• Your content — the answers you post, reactions, vibe tags, and anything else you submit through the Services. You may post answers anonymously or publicly; in either case the content is stored by us.
• Communications — messages you send us, such as support or privacy requests.

Information collected automatically. When you use the Services, we and our service providers may collect:

• Usage data — the questions you view and answer, features you use, interactions such as reactions, and the time and date of your activity.
• Device and technical data — device type and model, operating system, app version, language, IP address, and unique device or installation identifiers.
• Diagnostics — crash logs and performance data that help us keep the app working.

Referrals and invites. If you choose to share an invite or referral link, we process information needed to recognize and attribute that invite.

2. How We Use Information

We use information to:

• Operate and provide the Services — create your account, deliver each day's question, unlock and display the feed, and enable answers, reactions, and tags;
• Verify that you are 18 or older;
• Maintain safety and integrity — detect, prevent, and respond to abuse, harassment, spam, fraud, and violations of our Terms, and review reported content;
• Improve and develop the Services — understand how people use Spill, fix bugs, and build new features;
• Communicate with you about your account, security, and the Services, and respond to your requests; and
• Comply with legal obligations and enforce our Terms.

3. Anonymity and Your Answers

When you post an answer anonymously, your name is not shown to other users next to that answer. Please understand two things:

• Anonymous to other users is not anonymous to us. We still associate content with your account internally so we can operate the Services, enforce our Terms, keep users safe, and meet legal obligations.
• Anonymous is not private. Other users can see, screenshot, or reshare what you post, including anonymously posted answers. Do not post anything you would not want seen, saved, or reshared.

4. How We Share Information

We do not sell your personal information. We may share information with:

• Service providers that help us run the Services under appropriate confidentiality and data-protection terms — for example, cloud hosting and database providers (such as Supabase), analytics and crash-reporting providers, and messaging/communications providers;
• Other users, limited to the content you choose to post (shown anonymously or publicly, as you select);
• App stores and platforms as needed to distribute and operate the app (for example, the Apple App Store and Google Play);
• Authorities or others when we believe it is reasonably necessary to comply with law, enforce our Terms, or protect the rights, safety, and security of users, the public, or Spill; and
• A successor in connection with a merger, acquisition, financing, or sale of assets.

5. Cookies and Similar Technologies

On thespillapp.com and within the app, we and our providers use cookies, local storage, mobile SDKs, and similar technologies to keep you signed in, remember your preferences, and measure usage. You can control cookies through your browser or device settings.

6. Data Retention

We keep personal information for as long as your account is active and as needed to provide the Services, and afterward for legitimate business or legal purposes (such as safety, dispute resolution, and legal compliance), after which we delete or de-identify it. Content you have shared may persist where others have screenshotted or reshared it, or where it remains in backups.

7. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information. No system is perfectly secure, and we cannot guarantee absolute security.

8. Your Choices and Rights

• Access and update. You can review and update your profile information in the app.
• Delete your account. You can delete your account at any time in the app or by emailing hello@thespillapp.com. When you delete your account, we remove or de-identify your information as described in Data Retention and stop displaying your deleted content in the active Services, though copies others have saved or reshared may remain.
• Device permissions and notifications. You can control push notifications, contacts access, and other permissions through your device settings.
• Additional rights. Depending on where you live, you may have rights to access, correct, delete, port, or limit certain uses of your personal information. To make a request, email hello@thespillapp.com; we will verify your request before responding.

California residents. If you are a California resident, you may have rights under the California Consumer Privacy Act (as amended), including the rights to know what personal information we collect and how we use and disclose it, to access or delete your personal information, to correct inaccurate personal information, and to not be discriminated against for exercising these rights. We do not sell your personal information or share it for cross-context behavioral advertising.

9. Age Requirement

Spill is intended for adults 18 and older. The Services are not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us personal information, contact us at hello@thespillapp.com and we will delete it.

10. International Users

We operate in the United States and process and store information there. If you use the Services from outside the United States, you understand that your information will be transferred to and processed in the United States.

11. Changes to This Policy

We may update this Privacy Policy. We will post the updated version with a new effective date and, where required, provide additional notice. Your continued use of the Services after the effective date means you accept the updated policy.

12. Contact Us

Questions or requests: hello@thespillapp.com. Spill App, Inc.