S
SpawnOS

Privacy Policy

Last updated: June 2, 2026

SpawnOS is operated by Blackwater Aquatics Canada, a Canadian business. This policy applies to spawnos.app and all SpawnOS services. We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

1. What We Collect

  • Account data: Email address, display name, and password hash (via Supabase Auth) when you create an account.
  • Profile data: Username, bio, location, and social links if you choose to add them.
  • Usage data: Fish registry entries, pair records, spawn logs, and water parameter readings you enter into the dashboard.
  • Billing data: Payment method and subscription details are processed and stored by Stripe — we never receive or store full card numbers. We store your Stripe customer ID for subscription management.
  • AI chat history: Messages sent to the SpawnOS AI assistant are sent to OpenAI for processing. We do not persistently store conversation history. See OpenAI's privacy policy for their data practices.
  • Log data: Standard server logs including IP addresses, browser type, and pages visited. Retained for up to 90 days.
  • Newsletter: If you subscribe via /signup, your email is sent to our configured newsletter provider. You can unsubscribe at any time via the link in any email.

2. How We Use Your Data

  • To provide and maintain the SpawnOS platform and dashboard features.
  • To process subscription payments and manage your billing through Stripe.
  • To send transactional emails (account confirmation, password reset, subscription receipts).
  • To send newsletter emails if you have subscribed — only to addresses that have explicitly opted in.
  • To improve the platform based on aggregate, anonymised usage patterns.
  • We do not sell your personal data to third parties.
  • We do not use your data to train AI models.

3. Data Storage and Security

  • Account data and dashboard content are stored in Supabase (PostgreSQL), hosted on servers in the United States. Supabase is SOC 2 Type II certified.
  • All data in transit is encrypted via TLS 1.3 or higher.
  • All database connections use encrypted connections. Row Level Security (RLS) is enforced on all user-owned tables — your data is isolated from other users at the database level.
  • Billing data is stored by Stripe and governed by Stripe's security and compliance programme (PCI DSS Level 1).

4. Third-Party Services

5. Your Rights

  • Access: You can request a copy of your personal data by contacting us at privacy@spawnos.app.
  • Correction: Update your profile and account details at any time via the dashboard settings.
  • Deletion: Request account deletion via dashboard settings or by emailing privacy@spawnos.app. We will delete your personal data within 30 days.
  • Data portability: Pro and Breeder subscribers can export their fish, spawn, and parameter data as CSV from dashboard settings.
  • Opt-out: Unsubscribe from marketing emails at any time via the unsubscribe link in any email.
  • Canadian residents have additional rights under PIPEDA, including the right to file a complaint with the Office of the Privacy Commissioner of Canada.

6. Cookies

  • SpawnOS uses session cookies for authentication (managed by Supabase Auth). These are strictly necessary for the platform to function and cannot be disabled.
  • We do not use advertising cookies or third-party tracking pixels.
  • No consent banner is required as we do not use optional tracking cookies.

7. Children

  • SpawnOS is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@spawnos.app.

8. Changes to This Policy

  • We may update this policy as our practices change. We will notify users of material changes via email (for registered users) and by updating the "Last updated" date above. Continued use of SpawnOS after changes are posted constitutes acceptance.

9. Contact