Spiteful Get the app

Privacy

Privacy Policy

Last updated

Spiteful handles a few specific things about you: your email address, your wallet address, one number from Apple Health each day, and the name and email address of the person you name as your recipient.

This page says exactly what those things are, where they go, and what we can and cannot delete. No sections about practices we don't have.

What we collect

Everything below is collected because a specific part of the app cannot run without it. We do not collect anything for advertising, and we do not sell or rent your data to anyone.

Your account

  • Your email address. Used to sign you in, and to tie your commitments and settlements together in our records.
  • Your wallet address. We store the address of the self-custodial wallet created for you at sign-in, so we know where funds are held and returned.

Your commitment

For each week you commit to, we store:

  • The days you picked as workout days, and the week's start and end dates.
  • Your daily target for active energy burned.
  • The amount you staked, and the identifier of the on-chain escrow holding it.
  • The name and email address of the person who receives funds on a missed day.

Your results

For each workout day we store a settlement record: the date, the total active energy you burned that day, the target you were aiming at, whether that counted as met or missed, the amount moved, the outcome of the transfer, and the transaction identifier.

Diagnostics

The app and our server send crash reports and error logs to our error-reporting provider so we can find out when something breaks. Those logs can include identifiers such as your email address, your wallet address or a commitment identifier, because that is how a failure gets traced back to a real account. They do not include a copy of your Health data. There is no session recording, no behavioural analytics, no advertising identifier and no tracking across other apps or websites.

Apple Health data

Spiteful asks for permission to read three things from Apple Health: active energy burned, workouts, and daily activity summaries. You grant that permission in iOS, and you can withdraw it at any time in the Health app under Sharing, or in Settings under Privacy & Security.

The specifics Apple asks every app to state plainly:

  • Read-only. Spiteful never writes anything to HealthKit. The app requests no write or share permission at all.
  • Never used for advertising or marketing. Health data is not used for advertising, marketing, targeting, profiling or any similar purpose, and it is never shared with data brokers or advertisers.
  • Never stored in iCloud. Spiteful has no iCloud or CloudKit integration. Your Health data is not written to iCloud by this app.
  • Used for one thing only. Health data is used solely to work out whether you hit your daily target on a workout day, and to show you your progress during the day.

Far less leaves your phone than the app can read. Only one Health figure is ever sent to our server: the total active energy you burned on a completed workout day, along with the date and the escrow identifier. No individual Health samples, no workout details, no heart rate, no location and no route data.

The person you name

Read this part carefully — it is about someone else's data, not yours.

When you set up a week, you give us the name and email address of another person: whoever receives the funds if you miss a day. You are giving us a third party's personal information, so please only name someone who would be fine hearing from us.

We email them. As soon as your commitment is registered, we send that person an email telling them they have been named to receive your funds. That email contains their name, your email address, the days of the week you committed to, and the amount you staked.

We email them again after every workout day. Once a day has settled, they get a second email telling them whether funds were sent to them or not.

They can see how you did. If they use Spiteful themselves, each settlement record they are party to shows them the date, your active energy burned that day and the target you were aiming at, whether you met it, your email address, the amount, and the transaction. In short: the person you name can see your daily calorie numbers against your goal.

Nobody can read a settlement record unless they are one of the two people in it.

If someone has named you as their recipient and you would rather not be involved, email support@spiteful.app and we will deal with it.

What stays on your phone

The app keeps a local copy of your commitments and your daily activity totals on the device, along with your sign-in token.

Deleting the app removes that local copy. It does not remove the records held on our server, and it cannot remove anything already written to the public ledger. To have the server-side records dealt with, see Access and deletion.

Who else handles your data

We use a small number of third-party providers to run the service. Each receives only what it needs to do its job, is not permitted to use your data for its own purposes, and none of them receive your Apple Health data beyond the single daily figure described above.

  • Sign-in and wallet infrastructure — operates the email sign-in, creates and holds the keys for your self-custodial wallet, and signs the instructions that move funds. Receives your email address and your wallet address.
  • Cloud hosting and database storage — runs our server and this website, and stores your commitments, your settlement records and the recipient details you entered.
  • Transactional email — sends the messages described above. Receives your email address, the recipient's name and email address, and the contents of those messages. We do not send marketing email.
  • Error reporting — receives crash reports and error logs from the app and our server, as described under Diagnostics.

Our servers are located in the United States, so your data is processed there regardless of where you live.

We describe these by category rather than by name because providers get replaced from time to time and we would rather this page stay accurate than go stale. If you want to know exactly which providers we use today, email support@spiteful.app and we will tell you.

The public ledger

Your stake is held in on-chain escrow, and every daily settlement is recorded as a transaction on a public, permanent ledger.

That means wallet addresses, USDC amounts, timestamps and transaction hashes are visible to anyone who looks, forever. Your name and email are not written to the ledger, but a wallet address is a persistent identifier: anyone who learns that a particular address is yours can then see every transaction it has ever been part of.

This data cannot be deleted or changed by anyone, including us. There is no request we can make, and no request you can make of us, that removes it. If that is not acceptable to you, do not commit funds.

How long we keep it

We keep your account details, commitments and settlement records for as long as your account exists, and after that for as long as we need them to resolve anything still outstanding — an unsettled day, a failed transfer, a dispute about where money went. Once you ask us to delete your data and nothing is outstanding, we delete it.

Diagnostic logs are held on a rolling basis by our error-reporting provider and age out on their own; they are not kept indefinitely.

We have not set a fixed number of months for each category, because the honest answer is that a settlement record has to outlive the money it describes. If you want to know what we currently hold about you, ask.

Access and deletion

Email support@spiteful.app from the address you signed in with. Say which you want:

  • A copy of your data. We will send you what we hold: your account details, your commitments and your settlement records.
  • A correction. Tell us what is wrong and we will fix it, unless it is a record of something that already happened.
  • Deletion. We will delete your account and the records described on this page, and tell you when it is done.

We will reply within 2 business days. We may ask you to confirm the request from your registered email address before we act on it — that is the only way we can tell it is you.

Two honest limits on deletion:

  • We cannot delete anything from the public ledger. Transactions recorded there are permanent and outside anyone's control, ours included. Deleting your account removes our records; it does not and cannot remove the on-chain history.
  • We cannot un-send an email. If we have already emailed the person you named, that message is in their inbox and it is theirs.

If you have an open commitment when you ask for deletion, tell us — we will sort out where the money goes before we remove the records that explain it.

Children

Spiteful is not for children. It requires a financial commitment and is intended for people aged 18 or over. We do not knowingly collect data from anyone under 18. If you believe a child has used Spiteful, email support@spiteful.app and we will delete the account and its data.

Changes to this policy

If we change how we handle your data, we will update this page and change the date at the top. If the change is significant — a new provider receiving your data, a new category of data collected, or a change to what the person you named can see — we will email you at your registered address before it takes effect. Continuing to use Spiteful after a change means the updated policy applies to you.

Contact

Everything on this page — questions, copies of your data, corrections, deletion, complaints, or the person who named you as their recipient wanting out — goes to one address:

support@spiteful.app

For anything that isn't about your data, the support page is the better starting point.