Privacy Policy

Last updated: July 8, 2026

Spot (“we”, “us”) is a specialty-coffee discovery app and website (spothq.app) operated from the United Arab Emirates. This policy explains what data we collect, why, and what your choices are. The short version: we collect the minimum needed to run Spot, we don’t show ads, and we never sell your data.

What we collect

• Account details — email address, name, phone number and optional profile photo, when you create an account (with Apple, Google or an email code). Browsing Spot requires no account at all.
• Content you create — community notes, photos attached to notes, saved places, and job applications you submit.
• Tickets and payments — the event tickets you reserve or buy. Card payments are processed by Stripe; your card number never touches our servers.
• Push token — if you enable notifications, a device token so we can deliver them.

What we don’t collect

• Location — your GPS position is used on your device to center the map and sort places by distance. It is not sent to or stored on our servers.
• No advertising or tracking — no ad networks, no cross-app tracking, no data brokers.

Where your data lives

Data is stored with Supabase (our database and storage provider), encrypted in transit and at rest. We share data only with the service providers that make Spot work: Supabase (data), Stripe (payments), Resend (transactional email) and Expo (push delivery). When you book an event, the organizer sees your name for check-in.

Your choices

• Delete your account — in the app: Profile → Settings → Delete account. This permanently removes your account, notes, photos, saved places and tickets.
• Ask us anything — email partners@spothq.appto access, correct or delete your data, and we’ll handle it.

Children

Spot is not directed at children under 13, and we don’t knowingly collect their data.

Changes

If this policy changes materially, we’ll update this page and the date above.