Spur — Privacy Policy
Effective date: July 4, 2026 Last updated: September 27, 2026
Spur ("Spur", "we", "us") is operated by Spur Social Corp., a Canadian federal corporation, based in Ontario, Canada. This policy explains what personal information we collect, why, how we use and share it, and your rights. It applies to the Spur mobile app and related services (the "Service").
By using Spur you agree to this policy. If you do not agree, do not use the Service.
1. Who can use Spur
Spur is for people 18 years of age or older. We do not knowingly collect information from anyone under 18. If we learn we have, we will delete it.
2. Information we collect
You give us: - Phone number — for account creation and verification (one-time passcode). - Profile details — your first name, an optional bio, a profile photo, and your activity interests. - Approximate location — see Section 4. We collect a location you provide/permit; we blur it to roughly 1 km before storing it and never store your exact GPS position. - Payment information — when an event requires a deposit, a card is collected. Card numbers are handled entirely by Stripe; we never see or store your full card number. We store a Stripe customer reference and a card fingerprint used only for fraud/abuse prevention. - Identity verification — if you use ID verification, it is processed by Stripe Identity; we receive only a pass/fail result and verification level, not your ID document. - Email address — if you sign in with Apple or Google, or add an email to your account, for sign-in and verification. - Contacts (optional) — only if you choose to find friends from your contacts. Phone numbers are turned into one-way codes on your device and only those codes are sent. We use them to show which contacts are already on Spur and do not store them. - Content you create — events, posts, messages, reviews, reports, and feedback.
We collect automatically: - Usage and device data — app interactions, device type, and a push-notification token (if you enable notifications). - Check-in location — when you check in to an event, your device reports a location used only to confirm you're near the venue. - Crash and diagnostic data — when the app or website runs into an error: the error details, the screen it happened on, the app version, and your device type and operating system. Used only to find and fix problems, never for advertising.
3. How we use your information
- To create and run your account and the core features (events, RSVPs, host approvals, "It's ON" notifications).
- To verify your phone and, where applicable, your identity, and to keep the community genuine (fraud/abuse prevention, including preventing banned users from returning).
- To process deposits and no-show charges for events that have them.
- To show you relevant nearby plans and venues.
- To send you service notifications you've enabled.
- To keep people safe (reviewing reports, enforcing our rules, blocking/removing users), including automatically screening uploaded photos for prohibited content.
- To find and fix bugs and crashes.
- To comply with law.
4. Location — how we protect it
Your exact location is never stored or shown to other users. Coordinates are rounded/blurred to approximately 1 km on our servers before saving, so others only ever see your rough area. Check-in uses your device's reported location solely to confirm proximity to the venue at that moment.
5. How we share information
We do not sell your personal information. We share it only with: - Service providers ("processors") who run parts of Spur for us, under contract: Supabase (database, authentication, storage), Stripe (payments and identity), Twilio (SMS one-time passcodes), Expo (push notifications), Railway (server hosting), Resend (email verification codes), Amazon Web Services (automated photo moderation), Microsoft PhotoDNA (detecting known child sexual abuse imagery in uploaded photos), and Sentry (crash reporting). - Apple and Google, only if you choose to sign in with them. They confirm your identity to us under their own privacy policies. Every service provider is bound by contract to protect your information with the same or equal protection as described in this policy, and to use it only to provide its service to Spur. - Other users, only what your profile and posts are meant to show (e.g., first name, photo, reliability score, your public events) — never your phone number, exact location, or payment details. - Legal/safety — if required by law, or to protect the safety of people or the platform. - Business transfers — if Spur is involved in a merger, acquisition, or asset sale, information may transfer as part of that deal.
6. Data retention and account deletion
You can delete your account in-app at any time. When you do, we remove your profile and personal content. For safety reasons, we retain a limited, irreversible "tombstone" record — a one-way hash of your phone number and card fingerprint — so that users who were banned for serious violations cannot simply create a new account. This tombstone does not identify you to others and is not used for marketing.
7. Your rights (including under Canada's PIPEDA)
You may request to access, correct, or delete your personal information, and ask questions about how we handle it. Contact us at hello@spur.surf. We will respond within the timeframes required by applicable law.
Withdrawing consent: you can withdraw consent at any time. Turn off location, contacts, photos, camera or notifications for Spur in your device settings; turn off crash reports in Spur under Settings, Privacy; or delete your account in the app (Profile, then Delete account) to stop all collection. Withdrawing consent may limit features that need that data, such as showing plans near you.
8. Security
We use industry-standard measures (encryption in transit, hashed secrets, access controls, provider-side card handling). No system is perfectly secure, but we work to protect your information and fix issues promptly.
9. International processing
Some of our providers process data outside Canada (e.g., the United States). By using Spur you consent to this processing, subject to appropriate safeguards.
10. Changes
We may update this policy. Material changes will be notified in-app or by other reasonable means, and the "Last updated" date will change.
11. Contact
Spur Social Corp. Email: hello@spur.surf Location: Ontario, Canada