Privacy Policy

Last updated: October 11, 2026

Nothing is recorded or stored after your conversation ends.

Shpitz ("Shpitz", "we", "us") makes a push-to-talk app for iPhone, Apple Watch, Android, web and desktop. This policy explains what we collect, why, how long we keep it, and the choices you have. It applies to the Shpitz apps and to shpitz.app.

1. Live voice is never recorded

When you hold the talk button, your voice is streamed live to the other people in the conversation and played as it arrives. We do not record, save, transcribe or analyze your voice. Once audio has been delivered, it is gone.

2. Conversation content is wiped when a conversation closes

Under the talk button you can send text messages, photos and a one-time location pin (shared as a Google Maps link). This content exists only for the current conversation. A conversation closes at whichever of these happens first:

• you tap Close;
• the app is fully closed; or
• 12 hours pass with no activity.

When a conversation closes, its text, photos and location pins are permanently deleted from our servers by an automatic server-side process. Photos are additionally stored with a hard 12-hour expiry. Your contact (the friend or group) stays in your list; only the conversation content is wiped.

3. What we collect

• Account information: your email address, and — depending on how you sign in — the name and identifier provided by Google or Apple. If you sign in with email, we store your password only as a secure hash.
• Profile: the username and profile photo you choose. Other users see you only by username and photo, never by phone number or email.
• Phone number: only if you choose to add one.
• Contacts and groups: the friends and groups you add in Shpitz, so your channels follow you to a new phone when you sign in.
• Age confirmation: that you confirmed you are 17 or older.
• Device and notification data: push-notification tokens and basic device information needed to deliver calls and notifications.
• Subscription status: which plan you are on and your minutes used. Payment card details are handled by Apple, Google or Stripe — we never see or store your full card number.
• Usage analytics (with your consent): see section 5.

4. How we use it

• To create and secure your account and let you sign in on any device.
• To connect you to friends and groups and deliver live voice, text, photos and location pins.
• To send notifications and account emails such as password resets.
• To apply your plan's limits, process subscriptions and prevent abuse.
• To act on reports and blocks and keep Shpitz safe.

We do not sell your personal information and we do not use your conversations for advertising.

5. Analytics

On first launch we ask whether you agree to usage analytics. If you agree, we record usage events (for example, "talk started" or "plan upgraded") keyed only to a random, faceless ID. That ID is not your name, email, phone number or username, and no table anywhere links it back to your identity once your account is deleted. You can change your choice at any time in Settings.

6. Service providers (processors)

We use the following providers to run Shpitz. They process data on our behalf and only for the purposes described here:

• Supabase — account sign-in, database, and temporary photo storage.
• LiveKit — real-time delivery of live voice (streamed, not recorded).
• Firebase (Google) — push notifications on Android; Apple Push Notification service is used on Apple devices.
• Resend — account emails such as password resets.
• RevenueCat — managing in-app subscriptions purchased through Apple or Google.
• Stripe — payments for Teams plans purchased on shpitz.app.

If you sign in with Google or Apple, their own privacy policies also apply to that sign-in. Our website is hosted by Netlify.

7. How long we keep data

• Live voice: never stored.
• Text, photos, location pins: until the conversation closes (at most 12 hours of inactivity).
• Account and profile: until you delete your account.
• Analytics events: kept keyed only to a faceless ID, as described above.
• Billing records: as long as required by tax and accounting law, held by the payment provider.

8. Deleting your account

You can delete your account at any time in the app under Settings. Deletion erases your email, phone number, name and photo from our live systems and removes your username and contacts. Any remaining usage events are tied only to a faceless ID with no link back to you. Subscriptions bought through Apple or Google must also be cancelled in your store account settings.

9. Age requirement

Shpitz is for people aged 17 and older. You must confirm you are 17+ when you sign up. We do not knowingly collect information from anyone under 17. If you believe a younger person is using Shpitz, contact us and we will remove the account.

10. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to withdraw consent, and to object to certain processing. Most of this you can do in the app. For anything else, email us and we will respond within 30 days.

11. Security

Data is encrypted in transit. Access to our systems is restricted and logged. No service is perfectly secure, but we keep as little data as possible, for as short a time as possible.

12. Changes

If we change this policy in a meaningful way, we will notify you in the app before the change takes effect.

13. Contact

Questions or requests: privacy@shpitz.app