The document
Spurly Privacy Policy
Spurly is a habit tracker that sends you pointed daily notifications. This policy describes exactly what the app collects, why, and what happens to it. There is nothing buried here: no ads, no tracking, no sale of data.
What we collect
| Data | Why |
|---|---|
| Account email (the one you sign up with, or the email Apple provides — including Apple’s private relay address if you chose Hide My Email) | Account identity and sign-in |
| Name — first and last name, user-entered or from Apple; the display name built from them | Personalizing notification copy |
| Username | Your profile |
| Birthday | Age verification — Spurly is for people 13 and up |
| Referral source (your optional answer to “how’d you hear about us?”) | Knowing how you found us |
| Habit data — habit names, daily completions, streak counts, freeze counts, abstinence session start/end times and outcomes | The core product: tracking your habits and streaks |
| Notification tone preference (e.g. coach, bully, adult mode flag) | Choosing the voice of your notifications |
| Apple Push Notification (APNs) device tokens | Delivering notifications and Live Activity updates to your device |
IANA timezone (e.g. America/Detroit) | Computing your local “day” so streaks and send windows behave correctly across travel and DST |
| Coarse, city-level location — derived from your IP address when the app opens | Used only to flavor your reminders with local weather. Never GPS, never tracked in the background |
All of this is stored in Google Firebase (Firestore + Firebase
Authentication), keyed to your account, in the spurly-58727 project.
AI-generated notification copy
Spurly’s notification text is generated by a large language model. To do this, our server sends your first name, your habit names, your selected tone (including a short tone note), and streak/completion context to the Anthropic API (the company behind Claude). That is the full extent of what leaves Firebase: no email, no device tokens, no identifiers beyond the name you entered.
Anthropic processes this data to generate the text and, per their API terms, does not use API inputs to train their models.
What we don’t do
- No advertising. There are no ads and no ad SDKs in the app.
- No tracking. We do not track you across other apps or websites, and we do not use third-party analytics.
- No sale of data. Your data is never sold or shared for marketing.
Data retention and deletion
Your data is retained while your account exists.
You can delete your account inside the app: Settings → Danger → Delete account. This removes your habit data, generated notification copy, and scheduling records from Firestore, then deletes the authentication account itself. If you signed in with Apple, Spurly also revokes its Sign in with Apple token. Deletion is immediate and irreversible.
If in-app deletion fails for any reason, email dchaliha@umich.edu from your account email and we will delete everything manually.
Children
Spurly is not directed at children under 13 and does not knowingly collect data from them.
Changes
If this policy changes materially, the effective date above changes and the new version ships with the app update that changes the behavior.
Questions
dchaliha@umich.edu