← Back to Home

Privacy Policy

Last Updated: December 2024

1. Introduction

Spicyup ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App"). Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the App.

2. Information We Collect

2.1 Personal Information

When you use Spicyup, we may collect the following types of information:

• Account Information: If you create an account via Firebase Authentication, we collect your email address and authentication credentials
• Device Information: Device type, operating system, unique device identifiers, and mobile network information
• Usage Data: App interactions, features used, time spent in the App, and crash reports

2.2 Automatically Collected Information

• Log Data: IP address, browser type, pages visited, time and date of visits
• Analytics Data: App performance, user engagement metrics, feature usage statistics (via Firebase Analytics)
• Crash Reports: Technical information about App crashes to improve stability

2.3 Purchase Information

• Transaction Data: Purchase history, coin balance, and transaction IDs (processed through Apple App Store or Google Play)
• Payment Information: We do NOT store credit card or payment details - all payments are handled by Apple or Google

2.4 Information We Do NOT Collect

We want to be clear about what we DON'T collect:

• We do NOT track which specific challenges you view or complete
• We do NOT record your challenge choices or preferences
• We do NOT collect photos, videos, or any media from your device
• We do NOT access your contacts, calendar, or other personal apps
• We do NOT share your usage patterns with advertising networks

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide Services: To operate and maintain the App, process purchases, and sync your coin balance
• Improve User Experience: To understand how users interact with the App and improve features
• Technical Support: To respond to support requests and troubleshoot issues
• Security: To detect, prevent, and address fraud, security breaches, or technical issues
• Analytics: To analyze App usage patterns and performance metrics
• Communications: To send important updates, security alerts, and support messages (we do NOT send marketing emails)

4. Data Storage and Security

4.1 Firebase Services

We use Google Firebase for backend services:

• Firebase Authentication: Securely manages user accounts
• Firebase Realtime Database: Stores coin balances and purchase history
• Firebase Remote Config: Manages app configuration and demo mode
• Firebase Analytics: Collects anonymized usage statistics

Firebase data is encrypted in transit and at rest. Learn more at Firebase Privacy & Security.

4.2 Security Measures

We implement industry-standard security measures including:

• SSL/TLS encryption for all data transmission
• Secure authentication protocols
• Regular security audits and updates
• Restricted access to personal data
• Automatic logout after inactivity

4.3 Data Retention

• Account Data: Retained while your account is active
• Purchase History: Retained indefinitely for transaction records and restoration purposes
• Analytics Data: Retained for up to 14 months in anonymized form
• Crash Reports: Retained for 90 days

5. Sharing Your Information

We do NOT sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

5.1 Service Providers

• Google Firebase: For backend infrastructure and analytics
• Apple / Google: For payment processing (App Store / Play Store)

These providers are contractually obligated to protect your data and use it only for providing services to us.

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to:

• Comply with legal obligations
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Protect users' safety

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to this Privacy Policy.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

6.1 General Rights

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing of your personal data

6.2 GDPR Rights (EU Users)

If you are in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority
• Right to restrict processing

6.3 LGPD Rights (Brazil Users)

If you are in Brazil, you have rights under LGPD (Lei Geral de Proteção de Dados):

• Confirmation of data processing
• Access to your data
• Correction of incomplete or inaccurate data
• Anonymization, blocking, or deletion
• Data portability
• Information about public/private entities with whom data is shared

6.4 CCPA Rights (California Users)

California residents have the right to:

• Know what personal information is collected
• Know if personal information is sold or disclosed
• Opt-out of the sale of personal information (we do NOT sell data)
• Request deletion of personal information
• Non-discrimination for exercising privacy rights

6.5 How to Exercise Your Rights

To exercise any of these rights, contact us at support@spicyup.app. We will respond within 30 days.

7. Children's Privacy

Spicyup is not intended for users under 17 years of age. We do not knowingly collect personal information from children. If we discover that a child under 17 has provided us with personal information, we will delete it immediately. If you believe we have collected information from a child, please contact us.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the App, you consent to such transfers. We ensure appropriate safeguards are in place for international transfers, including:

• EU Standard Contractual Clauses
• Privacy Shield (where applicable)
• Firebase's global security infrastructure

9. Cookies and Tracking Technologies

Spicyup uses cookies and similar tracking technologies to:

• Maintain your session and preferences
• Analyze App usage and performance
• Improve user experience

You can manage cookie preferences through your device settings, but disabling cookies may limit some functionality.

10. Third-Party Links

The App may contain links to third-party websites or services (e.g., social media, support resources). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

11. Do Not Track Signals

Some browsers support "Do Not Track" signals. Spicyup does not currently respond to Do Not Track signals as there is no industry standard for handling them.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes through:

• In-app notifications
• Email (if you have an account)
• Prominent notice on our website

Your continued use of the App after changes indicates acceptance of the updated Privacy Policy. The "Last Updated" date at the top shows when the policy was last modified.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@spicyup.app
• Website: https://spicyup.app
• Response Time: We aim to respond within 48 hours

14. Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer at dpo@spicyup.app.

By using Spicyup, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein.