Spoons
Privacy Policy

Last Updated: Sept 26

Spoons ("we," "us," "our") is built and operated by 93 Creations LLC. This policy explains what data we collect, why, and what we don't collect.

Summary

- Free tier: nothing leaves your device. Your tasks live in local storage on your device. We don't have an account for you, and we don't have your data.

- Premium tier: we store your email address, your tasks/projects/tags/logs, and your subscription state on our servers so you can sync across devices and recover after reinstall.

- We collect minimal, anonymous usage analytics (app opens, task activity, and basic engagement patterns) tied to an anonymous device ID — never your name, email, or task content — so we can tell whether Spoons is actually helping people. Premium subscriptions are also processed through RevenueCat, which sees your purchase/subscription state. No advertising. No third-party data sharing beyond what's needed for sync, subscriptions, and this basic analytics.

What we collect

Free tier

Nothing. The app stores all data locally using SQLite on your device. We have no record of your existence.

Premium tier

When you upgrade to Premium and create an account, we collect and store:

- Email address — to identify your account and send password-reset emails.

- Password (hashed) — handled by Supabase Auth. We never see your plaintext password.

- Your task data — task titles, notes, spoon values, priorities, due dates, projects, tags, completion history, and daily spoon logs.

- Subscription state — managed by RevenueCat. We know whether you have an active "premium" entitlement.

We do not collect location, contacts, camera, microphone, photos, health data, or biometric data. We do collect an anonymous device/install ID and basic usage events (app opens, daily check-ins, task creation/completion) for both free and premium users — this data is never linked to your name or email unless you upgrade to Premium, at which point it's linked to your account so we can understand usage across your account rather than per-device.

Usage analytics

We track a small set of basic usage events — when you open the app, complete your daily check-in, and create/complete tasks — tied to an anonymous device ID generated on your device (not an advertising ID, not shared with ad networks). This tells us whether people keep using Spoons after downloading it, and where they drop off, so we can make the app better. This data stays in our own database — we don't use any third-party analytics SDK (no Google Analytics, Firebase, Amplitude, etc.), and we never sell or share it.

Third parties

We use the following services. Each has its own privacy policy.

- Supabase — database and authentication for premium sync, and for the basic anonymous usage analytics described above. https://supabase.com/privacy

- RevenueCat — subscription and entitlement management; RevenueCat processes your purchase history and subscription status (product purchased, price, renewal dates) to manage your entitlement. https://www.revenuecat.com/privacy

- App marketplace — payment processing for subscriptions.

We do not use any third-party analytics, attribution, crash-reporting, or advertising SDKs — our usage analytics is first-party, stored only in our own Supabase project.

How we use your data

- Sync your tasks and settings between your devices.

- Authenticate you when you sign in.

- Manage your subscription state.

- Send infrequent service emails (e.g. password reset).

We do not sell, rent, or share your data with marketers. We don't have any.

Data retention and deletion

- Free users: nothing to retain. Uninstalling the app deletes everything from your device.

- Premium users: your data is retained for as long as your account exists. You can request deletion by emailing owner@93creations.com. We will delete your account and associated task data within 30 days. Your anonymous usage analytics history is retained in de-identified form after account deletion (no longer linked to your email or account) so we can keep accurate aggregate statistics — it's never re-identifiable to you once your account is deleted.

Children

Spoons is not directed at children under 13 and we do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will remove it.

Your rights

If you are in the EU/UK (GDPR) or California (CCPA), you have the right to:

- Access the personal data we hold about you.

- Request correction or deletion.

- Object to or restrict processing.

- Receive a portable copy of your data.

Email owner@93creations.com to exercise any of these rights. We will respond within 30 days.

Security

Premium data is transmitted over HTTPS and stored encrypted at rest by Supabase. We make reasonable efforts to protect your data, but no system is 100% secure. If we ever experience a breach affecting your data, we will notify you and the relevant authorities as required by law.

Changes to this policy

We may update this policy occasionally. The "Last updated" date at the top reflects the current version. Material changes will be announced in the app and via email to premium users.

Contact

Questions, requests, or concerns: owner@93creations.com