Privacy Policy
Last updated: April 12, 2026
Spudy respects your privacy. This policy explains how we handle your information.
1. Information We Access
1.1 App Settings (Stored Locally)
Your preferences — including focus timer settings, habit goals, gem balance, streaks, daily snapshots, and character data — are stored locally on your device and never leave it.
1.2 Screen Time
Spudy uses Apple's Screen Time framework (FamilyControls and ManagedSettings) to block selected apps until you complete your goals. Apple processes this entirely on-device and Spudy cannot access the content of your blocked apps.
1.3 Camera (Photo Quests)
Spudy may request camera access for Photo Quests, which use on-device Vision processing (e.g., smile detection, pushup counting). No images or video are uploaded, transmitted, or stored beyond the current session.
1.4 Face Data
Some Photo Quests (such as "Smile to Unlock" and "Hang Out with Someone") use on-device face detection to verify challenge completion. Here is how Spudy handles face data:
- What we collect: Spudy uses Google MediaPipe Face Landmarker (running entirely on-device) to detect face presence and compute two numerical smile scores (left and right, each a value between 0 and 1). For multi-person quests, Spudy also counts the number of faces visible. No facial recognition or identification is performed.
- How it is used: The smile scores are compared against a threshold to verify that the user is smiling. The face count is used to confirm multiple people are present. These values are used solely for real-time quest verification.
- Storage and retention: Face data (smile scores and face counts) exists only in temporary memory during the active camera session. It is never written to disk, saved to any database, or persisted in any form. Once the camera session ends, all face data is immediately discarded.
- Third-party sharing: Face data is never shared with any third party. All processing happens on-device using MediaPipe (which runs locally with no network communication) and Apple's Vision framework.
- No biometric identification: Spudy does not identify, recognize, or authenticate individuals. It detects only whether a face is present and whether the person is smiling. No facial templates, embeddings, or biometric identifiers are created or stored.
1.5 Photo Library
With your permission, Spudy can save focus session summaries to your Photo Library. No photos are read or accessed from your library.
2. Information We Do Not Collect
- Name, email, or contact information
- Location or GPS data
- Device identifiers for tracking purposes
- Health or fitness data
- Contacts, calendar, or browsing history
3. Third-Party Services
3.1 RevenueCat
Spudy uses RevenueCat to manage subscriptions. RevenueCat may collect subscription status, purchase history, device type, and OS version. RevenueCat does not receive personal information, habit data, or focus session data. See RevenueCat's Privacy Policy.
3.2 PostHog (Analytics)
Spudy uses PostHog to collect anonymous usage analytics (feature usage, app settings) to improve the App. Data is processed on EU servers. No personal information, habit data, or focus session data is collected. See PostHog's Privacy Policy.
3.3 Apple Services
Spudy integrates with Apple FamilyControls (app blocking), governed by Apple's Privacy Policy.
4. Data Storage
All your data — habits, focus sessions, gems, streaks, and settings — is stored locally on your device. No cloud sync or account creation is required. Spudy does not operate any backend servers for user data.
5. Data Deletion
Uninstalling the app removes all app data from your device. You can manage Screen Time permissions in iOS Settings under Screen Time, and camera permissions under Settings > Privacy & Security.
6. Children's Privacy
Spudy is rated 4+ on the App Store. We do not knowingly collect personal information from children under 13. The app requires no account or personal data to function.
7. Your Rights
All Users
- Access all your data directly within the app.
- Delete all data by uninstalling the app.
EU Users (GDPR)
- Rights to access, rectification, erasure, and data portability apply.
- Since all data is stored locally on your device, you have full control.
California Users (CCPA)
- We do not sell personal information.
- Right to know and delete applies via app controls.
8. Changes to This Policy
We may update this policy from time to time. Changes will be indicated by updating the "Last Updated" date. Significant changes will be communicated within the app.
9. Contact
If you have questions about this policy, contact us at support@spudyapp.com.
© 2025 Spudy. All rights reserved.