Privacy Policy

Updated: October 7, 2026

SpotPal is a local-first research tool for iPhone and iPad. No SpotPal account is required. You choose whether to use iCloud, maps, media capture and system sharing. This policy explains data handling in the app and on this website.

1. Information stored on your device

The local database stores observation subjects, traffic events, timestamps and pause intervals, direction and audience attributes, coordinates and addresses, candidate premises, rent and other financial inputs, contacts and phone numbers, notes, tags, calculations and business-mix surveys. Photos and audio files stay on your device; their references and descriptions may be part of structured records. Basic recording and calculation do not require sending this research content to a server operated by the developer.

You may choose a username and avatar using the system photo picker. These profile settings are stored locally, are not an account and do not sync through iCloud. The avatar is a re-encoded thumbnail without the original location metadata. You can edit the username or restore the default avatar. Reports show your avatar and username by default; the personal-signature privacy option hides them. If you share a signed report, recipients can see this information. Clearing research data does not clear these profile settings.

2. iCloud synchronization

You can enable iCloud sync in Settings; changing the setting takes effect after restarting the app. When enabled and supported by your Apple Account, network, storage and system settings, structured records are stored through Apple CloudKit in your private database and synchronized across devices using the same Apple Account. Photos and audio are not uploaded as cloud media attachments. Another device may have a media reference without the actual file. The developer does not access your private cloud records through the app.

Turning sync off does not automatically remove content previously synchronized to iCloud. Sync is not a complete backup and does not guarantee recovery of deleted data. Network delays, insufficient storage, device failure, uninstalling the app or deleting data may affect availability.

3. System permissions and services

• Location: Requested while using the app to record an observation or premises location, show accuracy and look up an address. You can enter a location manually or adjust the map if permission is denied. The app does not request always-on location tracking.
• Maps: Apple processes system maps and address lookups. If you choose navigation in another map app or website, coordinates and place names may be passed to that service, such as Amap or Baidu, under its privacy rules.
• Camera and photos: Used when you choose to take or select observation/premises photos, set an avatar or save an exported image. These actions are optional and use system permissions where applicable.
• Microphone: Used only when you record an audio note. Files remain local. The app does not continuously listen in the background or send audio to an external transcription service.
• Face ID: Optional app lock uses Apple local authentication. The app receives an authentication result, not your facial template.
• Dynamic Island and Lock Screen: Live Activities display observation progress using your selected display mode. Choose the privacy mode appropriate for your environment.

Manage permissions in iOS Settings → SpotPal. Denying a permission limits the related feature, while unrelated recording and calculations remain available.

4. Purchases and local allowances

Apple StoreKit and the App Store process purchases. The app reads verified product, transaction and entitlement information, including the validity of previous purchases, to determine Pro access, restore purchases and display pricing. It does not receive your bank-card details. Apple handles purchases under its account, payment and privacy rules.

Feature authorizations, usage, task/content fingerprints and generated analysis, comparisons, report snapshots and export files are stored on the device, separately from CloudKit. This supports repeated viewing, prevents charging the same content twice and helps recovery from failures. A random local device identifier distinguishes ownership of observation tasks; it is not an advertising identifier.

5. Deletion, retention and sharing

You can delete source records in the app. Associated local attachments are handled when records are deleted; report copies already exported outside the app remain. Settings → Clear All Data removes app research data, media and private content/fingerprints from usage records. Consumed lifetime allowance totals may remain to prevent repeatedly obtaining a fresh trial by clearing data. Clearing data does not refund or cancel Apple purchases.

With sync enabled, structured-record deletions may propagate to other devices, subject to CloudKit conditions. Clearing a device does not mean all copies in your Apple Account, system backups or exported files are immediately removed. Sharing, exporting, calling, navigation and contacting support require your action. Recipients or selected services process the shared content. Check report privacy options before sharing; the app cannot retract files already sent.

6. Advertising, tracking and this website

The current app source and dependencies do not include advertising SDKs, third-party behavioral analytics or cross-app advertising tracking. The privacy manifest declares no tracking. We do not sell research data. Apple system services can process information outside the device as described above.

This static website includes a demonstration whose counter data exists only in the current page's memory and is not saved as research records. Appearance and language preferences are stored in browser local storage. There are no advertising trackers or analytics cookies. Cloudflare Pages processes technical request information, such as IP address, request time, browser and path, for page delivery and security under the Cloudflare Privacy Policy. This website has no form for uploading research data.

7. Contact and updates

Contact knbot@icloud.com for privacy, permission or deletion questions. The email address, explanation and attachments you choose to send are used to handle your inquiry. Avoid unnecessary contact details, financial information or sensitive parts of receipts. Relevant correspondence is retained as needed to handle the inquiry.

This policy reflects the current implementation. Material changes to features or data processing will be reflected in the policy and its date. Read it alongside your installed app version.