Privacy Policy
Spin It! · Last updated April 2026
This policy explains what information we collect when you use the app, how we use it, and your rights over it. We will never sell your personal data.
Information We Collect
We collect a small amount of information to keep the app running and improving:
- Analytics events. We use PostHog to collect anonymized usage events, for example when you spin a wheel, create a wheel, or open the app. These events help us understand how the app is used so we can improve it. PostHog is configured to anonymize data and does not build advertising profiles.
- Push notification token. If you grant notification permission, Apple provides a device token we store to send you reminders you explicitly set up. You can revoke permission in iOS Settings at any time.
- Purchase records. If you purchase the Pro subscription, the transaction is processed entirely by Apple. We receive a receipt confirmation from Apple's StoreKit framework to unlock features. We do not see or store your payment information.
- App preferences. Settings like your preferred wheel colors, sound settings, and reminder preferences are stored locally on your device using iOS UserDefaults. These never leave your device.
- Shared wheels. If you use the share feature to share a wheel with others, we store the wheel's name and items on our server to generate a shareable link. Shared wheels contain only the content you explicitly choose to share.
We do not collect your name, email address, location, health data, contacts, or any other personal information.
How We Use Your Information
- To provide and improve the app's features
- To send optional reminders you have configured (via push notifications)
- To confirm Pro subscription purchases and unlock features
- To serve shared wheels when someone opens a link you generated
- To analyze aggregate usage patterns and fix bugs
Data Sharing and Third Parties
We share data with the following third parties only to the extent needed to operate the app:
- PostHog (analytics platform). Receives anonymized usage events. PostHog's privacy policy is at posthog.com/privacy.
- Apple StoreKit processes all in-app purchases. We never see your payment details. Apple's privacy policy is at apple.com/legal/privacy.
- Apple Push Notification Service (APNs) routes push notifications to your device. Apple's privacy policy applies.
We do not share data with advertising networks, data brokers, or any other third parties.
Data Retention
Analytics events are retained by PostHog for up to 1 year and then automatically deleted. Shared wheel data is retained as long as the link is active; you can delete a shared wheel from within the app. Push tokens are removed from our servers if they become invalid (e.g., you reinstall the app or revoke permission). Preferences stored locally on your device persist until you delete the app.
Your Rights
You have the right to request deletion of any data we hold about your device. Because we do not require account creation or collect identifying information, data is associated only with an anonymous device identifier. To request deletion, email us at support@getspinthewheel.com and we will remove any server-side data (shared wheels, push tokens) associated with your device.
To stop analytics collection, you can opt out of analytics in the app's Settings screen.
Children's Privacy
Spin It! is rated for general audiences on the App Store and is not directed to children under 13. We do not knowingly collect data from children under 13. We have no age gate because we do not require an account or collect personally identifying information — there is nothing to attach to a child even if one used the app. Parents who want to prevent installation can use Apple's Screen Time and Family Sharing controls. If a child has used the app and you want their device-ID data deleted, email support@getspinthewheel.com with the device identifier (found in the app's Settings screen) and we will remove the analytics entries and any shared-wheel rows tied to it.
California (CCPA / CPRA) Notice
If you are a California resident, the CCPA / CPRA gives you the right to know what personal information we collect, the right to delete it, the right to correct it, and the right not to be discriminated against for exercising those rights.
Mapped to the CCPA's enumerated categories, what we collect is: Identifiers (the anonymous device ID and the APNs push token), Commercial information (Pro subscription receipts processed by Apple StoreKit), Internet or other electronic network activity information (anonymized analytics events), and User-generated content (the items and titles of any wheel you choose to share via the share-link feature). We do not collect any other category — no geolocation, no biometrics, no professional or sensory information.
We do not sell or share personal information as those terms are defined under the CCPA / CPRA, and we have not done so in the preceding twelve months. To exercise any CCPA right, email support@getspinthewheel.com with your anonymous device identifier (you can find it in the app's Settings screen).
EU / UK (GDPR) Notice
If you are in the EU or UK, the GDPR gives you rights of access, rectification, deletion, restriction, portability, and objection regarding personal data we process about you.
Lawful basis (per processing activity): we rely on your consent for analytics events (which you can withdraw at any time via the in-app Settings toggle); on our legitimate interest in delivering the share-link feature you requested; on performance of a contract for Pro subscription purchases; and on Apple's separate iCloud and Push Notification Service agreements with you for any data processed by Apple on your behalf.
International transfers: PostHog is a US-based processor. Transfers from the EU and UK rely on the Standard Contractual Clauses incorporated into PostHog's Data Processing Agreement. Apple's role for StoreKit and APNs is governed by Apple's own iCloud and App Store terms.
To exercise any GDPR right, email support@getspinthewheel.com with your anonymous device identifier. We respond to data-rights requests within 30 days (GDPR) or 45 days (CCPA), whichever applies and whichever is shorter.
Changes to This Policy
We may update this policy as the app evolves. Material changes will be noted in the app's release notes, and the "last updated" date at the top of this page will be revised. Continued use of the app after changes constitutes acceptance of the updated policy.
Questions? Reach us at support@getspinthewheel.com.