Privacy

What we collect

• Your email, from Stripe checkout, and the password you choose for your SPOTTR account. We store only a scrambled (hashed) version of the password, never the password itself.
• Your onboarding answers: household type, first names and mobile numbers of you and your partner (the numbers your assistants text), first names of any children, pets, your usual schedules, what you want off your mind, the things you keep reminding yourself about in your own words, which connections would help, what your assistant may do without asking, what you share with your partner's assistant, quiet hours, and how you like to be talked to.
• Your generated setup, the plain-language instructions we build from those answers, and the Instinct invite code assigned to each adult.
• Sign-in records: how many times your account has signed in, when it last did, and failed attempts (used for the 15-minute lockout).
• Payment references from Stripe: the checkout session, payment and customer identifiers and the amount paid. Stripe holds your card details; we never see them.
• Basic technical logs from our hosting provider, such as request times and errors.

What we never collect

• Card numbers. Payments are handled entirely by Stripe.
• Passwords or logins for any other service. Connections your assistant uses are made through Instinct's own secure flow, not through SPOTTR.
• Your Instinct account details.

Why we use it

• To build your setup and assign your invite code.
• To show your setup to your assistant when it signs in with the SPOTTR login you give it through Instinct's Vault.
• To keep your account secure and let you reset your password.
• To email you your private setup link after payment and a reset link when you ask for one. We don't send marketing email.
• To take your payment and keep the record Stripe needs.

Product analytics

If analytics are switched on, we record product events such as “onboarding started” or “setup copied”. These events never include your answers, your setup or your identity.

Who can see it

• Your assistant. Your private SPOTTR page is visible only to someone signed in with your SPOTTR email and password. When you enter that login into Instinct's Vault, Instinct signs in and reads your setup. What Instinct then does with it is governed by Instinct's privacy policy, not ours.
• Your partner in a couple or family setup gets their own account and their own page. Your setup mentions the household details you chose to share; nothing marked private is included on their page.
• Providers that run SPOTTR: Stripe (payments), Supabase (database), Resend (email) and Vercel (hosting). They process data only to provide those services.

We don't sell your data and we don't share it with advertisers.

Cookies and storage on your device

• One session cookie after you sign in. It's signed, can't be read by scripts, lasts 30 days, and is invalidated when you change your password.
• The “try the first three questions” section on our homepage keeps your practice answers in your own browser only, until you start onboarding, so they can carry over. Nothing is sent to us until you pay and continue.

How we protect it

• Passwords are stored as scrypt hashes only.
• Sessions are signed and end when a password changes. Ten failed sign-ins lock an account for 15 minutes.
• Setup pages are private, marked not to be indexed by search engines, and never cached.
• Data travels over encrypted connections.

Your choices

• Change your password anytime with the reset link on the sign-in page. Remember to update it in your assistant's Vault too.
• Sign out from your SPOTTR page.
• Ask us to delete your account and setup: reply to your Stripe receipt email. We keep your data while your account exists and delete it when you ask, except records Stripe requires us to keep for payments.

Children

SPOTTR is for adults. Parents may give a child's first name and age so their assistant understands the family's schedule; that's the only information about children we hold.

Changes

If we change this policy, the new version will live at this page with the date above.

Contact

Privacy questions: reply to your Stripe receipt email.