1. Who we are
Spotin is operated by Koala Tech AI Inc. ("we," "us"). This policy covers the Spotin iOS app. Contact: info@heykoala.app.
2. What we collect
- Account: your Apple or Google sign-in identifier, name and email address.
- Profile: photos, first name, bio, home city, the sports you are open to with your level and usual availability, optional Instagram or LinkedIn link, and your confirmation that you are 18 or older.
- Activity: invites, connections, messages, reactions, blocks and reports.
- Meet: your conversations with Meet and the details it remembers to find you good matches.
- Membership: your free-access dates, subscription status and purchases (plan, price and date). Apple handles payments; we never receive your card details.
- Device and usage: app events, crash reports, device type and app version, IP address, how you installed the app, a push notification token and, if you allow tracking, your advertising identifier.
Spotin does not use your device's GPS location. Your home city is the city you choose; we store its approximate coordinates to find members near you. Earlier versions of Spotin offered venue check-ins that used your location only when you checked in.
3. How we use it
To run Spotin: review accounts and photos, show your card to other members, suggest introductions, deliver invites, messages and notifications, provide free access and membership, keep the community safe, understand how the app is used, measure our ads, fix problems and meet legal obligations.
4. What other members see
Approved members can see your approved photos, first name, bio, city, sports, level, availability and any Instagram or LinkedIn link you add. Messages are visible only to the people in the conversation. Meet may suggest your profile to other members.
5. Meet and AI providers
Meet sends your Meet messages, recent conversation context and the matching details it has learned (such as your area, sports, goals and availability) to third-party AI providers, currently OpenAI, Groq and Cloudflare Workers AI, only to generate replies and suggestions. Meet does not send your email address, your sign-in identifiers or your direct messages with other members. Meet asks for your permission before you first use it. You can delete what Meet remembers at any time in Meet.
6. Who we share it with
We share data only with service providers that run Spotin for us and, if you allow tracking, Meta. Each must protect it at least as well as this policy does:
- Supabase: database, sign-in and photo storage;
- Apple and Google: sign-in; Apple also for payments and push notifications;
- Google Firebase: app analytics and crash reports;
- Adjust: measuring how people find, install and use Spotin;
- OpenAI, Groq and Cloudflare: Meet, as described above.
If you allow tracking, we share with Meta, through Adjust, your advertising identifier, IP address and basic device information, that you installed or returned to Spotin, and app events such as completing sign-up. Meta uses this, with information from other apps, to measure, target and deliver ads. You can turn tracking off anytime in iOS Settings > Privacy & Security > Tracking.
We may also share information when the law requires it, to protect people's safety, or as part of a merger or sale of our business.
7. How long we keep it
We keep your information while your account is open. When you delete your account, your profile disappears from Spotin right away and your data is deleted from our systems, including backups, within 30 days. We may keep limited records longer where needed for safety (for example, records of accounts removed for abuse), to resolve disputes, or to comply with the law. What Meet remembers is deleted when you delete it in Meet or delete your account. If you report a Meet reply, we keep that reply for up to 180 days to review it.
8. Your choices
You can edit your profile, remove your social links, block members, delete what Meet remembers, turn off notifications or tracking in iOS Settings, and delete your account in Profile > Account & support > Delete Account. You can also email us to make a request.
9. US state privacy rights, including California
Depending on where you live, you may have the right to know and access the personal information we hold about you, to correct or delete it, to receive a copy, and to opt out of its sale or sharing (we do not sell it; to stop the Meta sharing, turn off tracking). We will not treat you differently for using these rights. Email info@heykoala.app; we will verify your request, and you may use an authorized agent.
10. Children
Spotin is only for adults 18 and over. If we learn that an account belongs to someone under 18, we delete it. Please tell us if you believe a minor is using Spotin.
11. Security and changes
We use reasonable safeguards to protect your information, but no system is perfectly secure. If we change this policy, we will update the date above and let you know in the app when the change is material.
12. Contact
Privacy questions and requests: info@heykoala.app.