Privacy policy.

Spanno ("we", "us", "our") is a fitness app that helps you track walks, build healthy habits, and connect with friends. This Privacy Policy explains what data we collect, why we collect it, how we store and protect it, and your rights regarding that data.

By using Spanno, you agree to the practices described in this policy. If you do not agree, please do not use the app.

1. Information We Collect

a. Account Information

When you create an account, we collect:

• Email address — used for authentication and account recovery
• Name / display name — shown on your profile and in social features

b. Profile Information

During onboarding or in your settings, you may provide:

• Date of birth — used to calculate age-appropriate calorie estimates
• Gender — used for calorie estimation formulas
• Height and weight — used for calorie and distance calculations
• Profile photo — displayed on your profile; stored securely in our cloud storage
• Fitness goals — used to personalize your experience

All profile fields beyond email are optional. You may choose "Prefer not to say" for gender.

c. Health & Fitness Data (Apple HealthKit)

With your explicit permission, Spanno reads and writes data to Apple HealthKit:

Important: HealthKit data is never sent to our servers or shared with any third party. It stays on your device and in Apple's encrypted HealthKit store, in compliance with Apple's HealthKit guidelines.

d. Location Data

With your permission, Spanno collects GPS location data only while you are actively tracking a walk. This includes latitude, longitude, altitude, and timestamp for each point along your route.

• We use background location access so tracking continues if you lock your phone or switch apps during a walk.
• We do not collect location data when you are not tracking a walk.
• Route data is stored on our servers so you can view your walk history.
• If you share a walk to the social feed, your route may be visible to your followers.

e. Activity Data

When you complete a walk, we store:

• Distance, duration, estimated calories burned, step count
• Route coordinates (see Location Data above)
• Activity type (walking, rucking, running)
• Whether a weighted vest was used and its weight
• Any notes you add to the activity
• Timestamps (start and end time)

f. Device Information

• Push notification token — to deliver reminders and updates via Apple Push Notification service
• Timezone — to schedule notifications at appropriate times

g. Usage & Analytics Data

We use Firebase Analytics (provided by Google) to understand how the app is used. This includes:

• Which features are used and how often (e.g., walks started, coaching sessions played)
• Aggregated user properties (age bracket, subscription tier, unit preference)
• App performance metrics

Analytics data is associated with a pseudonymous identifier, not your name or email. You can opt out of analytics collection in the app's settings.

h. Crash & Diagnostic Data

We use Firebase Crashlytics (provided by Google) to detect and fix bugs. Crash reports may include:

• Device model and OS version
• Stack traces and error messages
• Breadcrumb logs leading up to a crash
• A pseudonymous user identifier (to correlate reports from the same user)

i. Subscription & Purchase Data

If you subscribe to Spanno Primo, Apple processes the payment. We receive:

• Transaction identifiers and expiration dates
• Whether you are on a free trial
• Product identifier (monthly or annual)

We do not receive or store your payment method, credit card number, or Apple ID password.

2. How We Use Your Information

• Provide the service — track your walks, calculate stats, save your history, deliver coaching content
• Social features — display your profile to followers, show shared activities in the feed, enable reactions and walk invitations
• Notifications — send walk reminders, weekly summaries, and new content alerts (you control which types you receive)
• Improve the app — analyze usage patterns and crash reports to fix bugs and build better features
• Manage subscriptions — verify subscription status and provide access to premium features

3. How We Share Your Information

We do not sell your personal information to anyone.

We share data only in these limited circumstances:

We may also disclose information if required by law or to protect the safety of our users.

4. Data Storage & Security

• Your data is stored in Supabase's cloud infrastructure with row-level security policies that restrict access to your own data.
• Profile images are stored in secure cloud storage with access controls.
• All network communication uses HTTPS/TLS encryption in transit.
• Passwords are hashed and never stored in plain text.
• HealthKit data remains on-device in Apple's encrypted store and is never transmitted to our servers.

5. Data Retention

• Account and profile data — retained as long as your account is active
• Activity data — retained until you delete individual activities or your account
• Analytics data — retained per Google/Firebase's standard retention policies (typically 14 months)
• Crash reports — retained per Firebase Crashlytics' standard retention policy (typically 90 days)
• Push notification tokens — deactivated on sign-out; deleted on account deletion

6. Your Rights & Choices

Access & Portability

You can view all your data within the app (profile, walk history, stats). To request a full export of your data, contact us at the email below.

Deletion

• You can delete individual walks from your activity history at any time.
• You can delete your profile photo.
• To delete your entire account and all associated data, contact us at the email below. We will process your request within 30 days.

Opt Out of Analytics

You can disable analytics collection in the app's settings. This stops Firebase Analytics and Crashlytics from collecting data from your device.

Location

You can revoke location permission at any time in your device's Settings. Walk tracking will not function without location access.

HealthKit

You can modify which HealthKit data Spanno can access at any time in Settings > Health > Spanno.

Notifications

You can disable push notifications in your device's Settings or customize notification types within the app.

7. Children's Privacy

Spanno is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us.

8. International Data Transfers

Your data may be processed and stored in the United States or other countries where our service providers operate. By using Spanno, you consent to the transfer of your data to these locations.

9. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the "sale" of personal information — we do not sell your data
• Not be discriminated against for exercising your rights

10. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have additional rights including:

• Access, correction, and deletion of your personal data
• Data portability
• Objection to or restriction of processing
• Withdrawal of consent at any time

Our legal basis for processing your data is your consent (for HealthKit, location, and analytics) and legitimate interest (for providing the service and improving it).

11. Third-Party Links & Services

Spanno may integrate with Apple Music for playlist playback during walks. Your use of Apple Music is governed by Apple's terms and privacy policy. We do not access your personal music library.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by other means. The "Effective Date" at the top indicates when the policy was last revised.

13. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or need to report a concern:

• Email: privacy@spanno.fit