Spur — Privacy Policy
Effective date: July 4, 2026 Last updated: August 1, 2026
Spur ("Spur", "we", "us") is operated by Spur Social Corp., a Canadian federal corporation, based in Ontario, Canada. This policy explains what personal information we collect, why, how we use and share it, and your rights. It applies to the Spur mobile app and related services (the "Service").
By using Spur you agree to this policy. If you do not agree, do not use the Service.
1. Who can use Spur
Spur is for people 18 years of age or older. We do not knowingly collect information from anyone under 18. If we learn we have, we will delete it.
2. Information we collect
You give us: - Phone number — for account creation and verification (one-time passcode). - Profile details — your first name, an optional bio, a profile photo, and your activity interests. - Approximate location — see Section 4. We collect a location you provide/permit; we blur it to roughly 1 km before storing it and never store your exact GPS position. - Payment information — when an event requires a deposit, a card is collected. Card numbers are handled entirely by Stripe; we never see or store your full card number. We store a Stripe customer reference and a card fingerprint used only for fraud/abuse prevention. - Identity verification — if you use ID verification, it is processed by Stripe Identity; we receive only a pass/fail result and verification level, not your ID document. - Content you create — events, posts, messages, reviews, reports, and feedback.
We collect automatically: - Usage and device data — app interactions, device type, and a push-notification token (if you enable notifications). - Check-in location — when you check in to an event, your device reports a location used only to confirm you're near the venue.
3. How we use your information
- To create and run your account and the core features (events, RSVPs, host approvals, "It's ON" notifications).
- To verify your phone and, where applicable, your identity, and to keep the community genuine (fraud/abuse prevention, including preventing banned users from returning).
- To process deposits and no-show charges for events that have them.
- To show you relevant nearby plans and venues.
- To send you service notifications you've enabled.
- To keep people safe (reviewing reports, enforcing our rules, blocking/removing users).
- To comply with law.
4. Location — how we protect it
Your exact location is never stored or shown to other users. Coordinates are rounded/blurred to approximately 1 km on our servers before saving, so others only ever see your rough area. Check-in uses your device's reported location solely to confirm proximity to the venue at that moment.
5. How we share information
We do not sell your personal information. We share it only with: - Service providers ("processors") who run parts of Spur for us, under contract: Supabase (database, authentication, storage), Stripe (payments and identity), Twilio (SMS one-time passcodes), Expo (push notifications), and Railway (server hosting). - Other users, only what your profile and posts are meant to show (e.g., first name, photo, reliability score, your public events) — never your phone number, exact location, or payment details. - Legal/safety — if required by law, or to protect the safety of people or the platform. - Business transfers — if Spur is involved in a merger, acquisition, or asset sale, information may transfer as part of that deal.
6. Data retention and account deletion
You can delete your account in-app at any time. When you do, we remove your profile and personal content. For safety reasons, we retain a limited, irreversible "tombstone" record — a one-way hash of your phone number and card fingerprint — so that users who were banned for serious violations cannot simply create a new account. This tombstone does not identify you to others and is not used for marketing.
7. Your rights (including under Canada's PIPEDA)
You may request to access, correct, or delete your personal information, and ask questions about how we handle it. Contact us at hello@spur.surf. We will respond within the timeframes required by applicable law.
8. Security
We use industry-standard measures (encryption in transit, hashed secrets, access controls, provider-side card handling). No system is perfectly secure, but we work to protect your information and fix issues promptly.
9. International processing
Some of our providers process data outside Canada (e.g., the United States). By using Spur you consent to this processing, subject to appropriate safeguards.
10. Changes
We may update this policy. Material changes will be notified in-app or by other reasonable means, and the "Last updated" date will change.
11. Contact
Spur Social Corp. Email: hello@spur.surf Location: Ontario, Canada