Spike AI ("we," "our," or "the app") is a productivity and focus application for iPhone. This Privacy Policy explains what information we collect, how we use it, how we store and protect it, and the choices you have. By using Spike AI, you agree to the practices described in this policy.
1. Information We Collect
We collect the minimum information necessary to provide the service:
- Account information: Email address and user ID, created when you sign up via email magic link, Apple Sign-In, or Google Sign-In. If you use Apple Sign-In, your first and last name may be provided by Apple on first authentication.
- Profile information: Display name (first name, last name) and avatar color preference, which you may optionally provide or update.
- App data: Tasks, goals, focus mode selections, daily focus session records, progress metrics, streak history, screen time usage statistics, daily quote tracking, and reminder configurations you create within the app.
- Device tokens: Apple-provided opaque tokens from the FamilyControls framework that represent your app and category selections for focus modes. These tokens do not reveal the names or identifiers of specific apps on your device to us.
We do not collect your physical location, contacts, browsing history, health data, or any biometric identifiers.
2. How We Use Your Information
We use the information we collect to:
- Authenticate your account and sync your data across sessions.
- Provide focus mode functionality, including app blocking, confirmation prompts, and movement-based unlocking.
- Store and display your tasks, goals, progress, and streaks.
- Deliver scheduled reminders, daily quote notifications, and goal deadline alerts.
- Generate AI-powered weekly progress summaries based on your task completion, focus sessions, and streak data.
- Display real-time progress on your Lock Screen via Live Activities.
- Maintain service reliability and protect against misuse.
We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes. We do not serve ads in the app.
3. Camera Usage (Sweat Mode)
Sweat Mode uses your device's camera and Apple's Vision framework to perform real-time body pose detection for push-up and stand-up tracking. This feature:
- Processes all video frames entirely on your device using Apple's on-device machine learning.
- Does not record, store, upload, or transmit any video, images, or biometric data.
- Does not use facial recognition or identify individuals.
- Only analyzes body joint positions to count exercise repetitions.
- Can be disabled at any time by switching to a different focus mode.
Camera access is requested only when you activate Sweat Mode and can be revoked in iOS Settings at any time.
4. Screen Time and Family Controls
Focus Mode, Lock-In Mode, and Sweat Mode use Apple's Screen Time APIs (FamilyControls, ManagedSettings, and DeviceActivity frameworks) to manage app access on your device. Spike AI stores the opaque tokens Apple provides to represent your selections. We cannot read the names or bundle identifiers of the apps you select. These tokens are used solely to apply and remove app restrictions as you configure them. We do not use Screen Time data for advertising, profiling, or any purpose other than providing the focus mode functionality you configure.
5. AI-Generated Summaries
When you generate a weekly progress summary, your recent task completion data, goal statuses, focus session records, streak information, and screen time metrics are sent to our backend server to produce a personalized productivity narrative. The summary is stored in your account for your reference. We do not use this data for advertising. Avoid entering sensitive personal information (such as financial, medical, or confidential details) into task names or goal descriptions, as these may be processed to generate your summary.
6. Notifications
Spike AI uses the iOS notification permission to deliver task reminders, daily motivational quotes, goal deadline alerts, and focus mode nudges that you configure. All notification scheduling is handled locally on your device. You can manage or revoke notification permissions at any time in iOS Settings.
7. Data Storage and Security
Remote storage: Your account and app data are stored securely on Supabase, an open-source backend platform that uses PostgreSQL with TLS encryption for data in transit. Authentication tokens are managed using the PKCE (Proof Key for Code Exchange) flow for added security.
Local storage: For offline functionality, Spike AI caches your tasks, goals, profile, and preferences on your device using iOS-encrypted storage (UserDefaults and Keychain). Authentication credentials are stored in the iOS Keychain, which is protected by your device's hardware encryption. If an operation fails while offline, it is queued locally and synced when connectivity is restored. Queued operations older than 7 days are automatically discarded.
Data retention: Daily task history is retained for 90 days for progress tracking purposes and then automatically removed from local storage. All other data is retained as long as your account is active.
8. Third-Party Services
Spike AI uses the following third-party service:
- Supabase (backend infrastructure): Provides user authentication, database storage, and serverless functions for progress summary generation. Supabase processes data on our behalf and does not use your data for its own purposes. For more information, see the Supabase Privacy Policy.
We do not use any analytics SDKs, crash reporting services, advertising networks, or third-party tracking tools. Our app's privacy manifest (PrivacyInfo.xcprivacy) declares that tracking is disabled.
9. Data Sharing
We do not share your personal information with third parties except in the following limited circumstances:
- With Supabase, our infrastructure provider, solely to operate the service as described above.
- If required by law, regulation, legal process, or enforceable governmental request.
- To protect the rights, property, or safety of Spike AI, our users, or the public.
10. Children's Privacy
Spike AI is a general-audience productivity app. We do not knowingly collect personal information from children under the age of 13 (or the applicable age of digital consent in your jurisdiction). If you are a parent or guardian and believe your child has provided us with personal information, please contact us at spikeaihelp@gmail.com and we will promptly delete the information.
11. Your Rights and Choices
You have the following rights regarding your data:
- Access and update: View and edit your profile information at any time within the app.
- Delete your account: Permanently delete your account and all associated data from the Profile tab in the app. This removes your authentication account, tasks, goals, focus records, progress summaries, profile, and all synced data from our servers.
- Revoke permissions: Disable camera, notification, or Screen Time permissions at any time in iOS Settings.
- Change preferences: Update your language, focus mode, reminder schedule, or Live Activity settings within the app.
- Contact us: Request information about your data or ask questions by emailing spikeaihelp@gmail.com.
If you are located in the European Economic Area (EEA), United Kingdom, or California, you may have additional rights under applicable data protection laws (such as GDPR or CCPA), including the right to request access to, correction of, or deletion of your personal data. To exercise these rights, contact us at the email address below.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The "Last updated" date at the top of this page indicates the most recent revision. We encourage you to review this policy periodically. Continued use of Spike AI after changes are posted constitutes your acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy, your data, or wish to request account deletion, please contact us:
Email: spikeaihelp@gmail.com