Spur Privacy Policy

Last updated: July 20, 2026

This Privacy Policy explains how Shotz App LLC, doing business as Spur ("Spur," "we," "us," or "our"), collects, uses, shares, and protects personal information when you use the Spur mobile application, website, and related services (collectively, the "Service").

Spur is a personal action app that helps users choose a direction, set goals, receive practical action recommendations, complete check-ins, and review progress. Depending on how you use the Service, this may involve information about your goals, routines, current circumstances, available time and energy, completed actions, and reflections.

If you do not agree with this Privacy Policy, do not use the Service. If you have questions, contact us at simon@takeactionwithspur.com.

We collect information you provide directly, information collected automatically when you use the Service, and limited information from third parties.

Depending on the features you use, we may collect:

• Account information, such as your email address, password, authentication details, and account identifier.
• Onboarding and profile information, such as your life stage, areas you want to improve, goals, current situation, obstacles, motivation, confidence, preferred support style, available time, energy, setting, and other preferences.
• Planning and progress information, such as your selected 90-day direction, goals, milestones, action recommendations, completed wins, check-ins, streaks, badges, and optional reflections.
• Information you choose to provide about areas such as career, education, health, money, relationships, business, creativity, home, or personal growth.
• Reminder and notification preferences.
• Support and communication information you provide when you contact us.
• Social login information if you choose to sign in with Apple or another supported provider.

Some information you choose to provide may be sensitive or reveal sensitive details about your life. Please do not provide information that you do not want processed as described in this Policy.

If you purchase a subscription, payment processing is handled by Apple through the App Store. We do not store your full payment card number or security code. Apple and our subscription-management provider, RevenueCat, may provide us with subscription-related information such as product identifiers, subscription status, trial status, transaction identifiers, renewal or expiration data, and purchase or restore events.

Apple's privacy policy is available at https://www.apple.com/legal/privacy/en-ww/.

We may collect information needed to operate, secure, and improve the Service, including:

• Device, app, operating system, language, region, and network information.
• Log, diagnostic, crash, error, and performance information.
• App activity related to account access, onboarding, feature usage, recommendations, check-ins, completed actions, paywall presentation, purchases, restores, and error handling.
• Reminder and notification settings you choose, and whether notification permission has been granted or denied on your device.
• IP address, app version, usage timestamps, and related technical information.

You can manage notification permission in your device settings.

Our website host may process standard technical information needed to deliver and secure the website, such as IP address, browser or device information, requested pages, timestamps, and diagnostic logs. If we add analytics or advertising tools in the future, we will update this Policy and provide any choices required by law.

We may receive limited information from third parties, including:

• Apple or another supported identity provider when you use its sign-in service.
• Apple and RevenueCat for subscriptions, billing status, purchase validation, and restore events.
• Service providers that help us operate authentication, cloud infrastructure, storage, security, or AI-assisted features.

The information we receive depends on the third party, the feature you use, and your settings with that provider.

We use personal information to:

• Create, authenticate, maintain, and secure your account.
• Save and sync your onboarding answers, goals, settings, recommendations, check-ins, completed actions, and progress.
• Generate, size, explain, and improve action recommendations.
• Provide reminders, subscriptions, account controls, and support.
• Process entitlement checks, purchases, trials, renewals, and restores.
• Personalize the Service based on information you have provided and choices you have made.
• Analyze product performance, reliability, safety, and aggregate usage trends.
• Detect abuse, prevent fraud, troubleshoot problems, and protect users and the Service.
• Send service-related notices, updates, and policy changes.
• Comply with law and enforce our legal terms.

We do not sell your personal information for money.

Spur may use AI-assisted features to synthesize onboarding information or help word a recommendation. When the app asks for your permission and you allow AI personalization, limited goal details and current context needed for the feature may be processed by OpenAI, a third-party AI provider.

AI sharing is optional where presented as optional. If you decline, Spur may use deterministic features and wording instead. You can change the available AI-sharing preference in the app.

Do not submit information you do not want processed by an AI provider. AI outputs may be incomplete or inaccurate and should not be treated as professional advice.

If you are in the EEA, UK, or Switzerland, we process personal information where we have a valid legal basis, including:

• Your consent.
• Performance of a contract with you.
• Our legitimate interests, such as operating, securing, and improving the Service.
• Compliance with legal obligations.
• Protection of vital interests where applicable.

If you are in Canada, we may process information with your express or implied consent, or where otherwise permitted by law.

We may share personal information:

• With service providers that help us operate, host, secure, support, or improve the Service.
• With Apple, RevenueCat, or an identity provider when needed for login, subscription processing, purchase validation, restores, or platform compliance.
• With OpenAI when you use an AI-assisted feature and the applicable permission or other lawful basis is present.
• If required by law, subpoena, court order, or similar legal process.
• To protect the rights, safety, security, or integrity of Spur, our users, or others.
• In connection with a merger, financing, acquisition, reorganization, or sale of assets.

We require service providers to process personal information only for authorized purposes and to protect it appropriately.

Our providers may include:

• Supabase for authentication, database, backend infrastructure, and cloud services.
• Apple for Sign in with Apple, App Store billing, subscription processing, and related account events.
• RevenueCat for subscription management and entitlement status.
• OpenAI for optional AI-assisted features.
• Website hosting and infrastructure providers.

We and our service providers may process information in the United States and other countries where we or our providers operate. Those countries may not provide the same level of legal protection as your home jurisdiction. Where required, we use appropriate safeguards, such as contractual protections.

We keep personal information for as long as reasonably necessary to provide the Service, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, and protect the Service.

In general:

• Account and app data may be retained while your account remains active.
• Subscription and transaction records may be retained for accounting, fraud prevention, legal compliance, and audit purposes.
• Operational logs and backups may remain for a limited period after account deletion.
• De-identified or anonymized information may be retained where permitted by law.

When information is no longer needed, we will delete, anonymize, or securely isolate it unless retention is required by law.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no system is completely secure, and we cannot guarantee absolute security.

You should protect your device and login credentials and use available device-level security protections.

Spur is not intended for children under 18, and we do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take reasonable steps to delete it. If you believe a child has provided information to us, contact us at simon@takeactionwithspur.com.

Depending on where you live, you may have rights to:

• Access personal information we hold about you.
• Correct inaccurate personal information.
• Delete personal information.
• Obtain a copy of your personal information.
• Restrict or object to certain processing.
• Withdraw consent where processing is based on consent.
• Appeal certain decisions about privacy requests.
• Opt out of certain uses, sharing, or targeted advertising where required by law.
• Lodge a complaint with a data protection authority.

We do not sell personal information for money.

To exercise privacy rights, use available account controls or contact us at simon@takeactionwithspur.com. We may need to verify your identity before completing a request. You may designate an authorized agent where permitted by law.

If you are a resident of a US state with applicable privacy laws, you may have rights to know, access, correct, delete, or obtain a copy of personal information and to exercise other rights provided by state law.

Categories of personal information we may collect include:

• Identifiers, such as email address, account identifiers, and IP address.
• Customer record and profile information you provide.
• Commercial information related to subscriptions and transactions.
• Internet or network activity information.
• Inferences and preferences used to personalize recommendations.
• Sensitive personal information you choose to provide, including account login information or details related to health, finances, relationships, education, or other life circumstances.

We use sensitive personal information only for permitted purposes or with consent where required. We do not use it to infer characteristics for advertising.

The Service may link to or rely on third-party services. Their handling of your information is governed by their own privacy policies, not this Policy.

Some browsers offer a "Do Not Track" setting. Because there is no universally accepted standard for responding to these signals, we do not currently respond to them.

We may update this Privacy Policy from time to time. If we make material changes, we may notify you by updating the date above, posting a notice in the app or on the website, or using other appropriate means.

If you have questions or requests about this Privacy Policy, contact us at:

Shotz App LLC 1040 Spring Street Apt D Madison, WI 53715 United States Email: simon@takeactionwithspur.com

You may review or update some account information inside the app. You may also request access, correction, or deletion by emailing simon@takeactionwithspur.com.

We may retain certain information where required or permitted by law, including for fraud prevention, legal compliance, accounting, dispute resolution, and enforcement of our agreements.