Privacy Policy

Account information: your email address, a password (stored only as a cryptographic hash — we cannot see it), and your date of birth (used to verify you are 18+ and to derive the age shown on your profile — your date of birth itself is never shown to anyone).

Profile information:your display name, gender, orientation, what you're looking for, bio, interests you select from our list, and your ZIP code. Your ZIP code is converted to an approximate area center point to power distance features; see Section 5 for exactly what other members can and cannot see.

Photos and captions:the photos you upload and any captions you add. Photos are shown to other members obscured (“blurred”) and become clearer only as you and another member interact.

Question answers:your answers to compatibility questions, which answers you'd accept from a match, how important each question is to you, any “dealbreaker” flags, and any free-text notes you attach. Some questions concern sensitive topics — see Section 2.

Messages and interactions:messages you send and receive, “interested” signals you send and receive, guesses in the interest-guessing game, blocks, and reports/flags you file (including a snapshot of the flagged content).

Usage information: days you were active, activity streaks, and when you last used the Service — used for features (like streaks), for service analytics (like daily active counts), and to decide whether to send you a notification email.

Technical information: IP address and basic request data, used for security, abuse prevention, and rate limiting. We use a session cookie to keep you signed in. We do not use third-party advertising cookies or trackers.

Referral information: your referral code, who referred you (if anyone), and referrals credited to you.

Because Sprig matches on personality and values, some compatibility questions relate to religion and spirituality, political views, and intimacy and sexual preferences, and your profile includes your sexual orientation. Answering any question is optional — you choose which questions to answer, and by answering you consent to our processing that answer as described in this policy, including showing it to members you share the question with (Section 5). If you don't want a topic processed or shown, don't answer that question.

• Matching: computing compatibility scores, pillar sub-scores, distance, Daily Picks, and discovery ranking.
• The reveal system:computing per-pair “clarity” (from shared answers, exchanged messages, game guesses, and mutual interest) to determine how clearly your photos appear to a specific other member.
• Operating the Service: accounts, messaging, notifications, streaks, referrals, and support.
• Safety and integrity: reviewing flagged content, enforcing our Terms and Community Guidelines, preventing spam and abuse (including rate limiting), and protecting members.
• Communications: transactional emails (account, security, safety) and notification emails you can opt out of.
• Service analytics: aggregate metrics (signups, activity, engagement) to run and improve the Service.

We do not sell your personal information, and we do not use it for third-party advertising.

Your messages are visible only to you and the person you're talking to. We do not read them, except: (a) when a message is flagged by the member who received it, a snapshot of that message is preserved and reviewed by our safety team; and (b) where we believe in good faith that access is required by law or necessary to prevent imminent harm.

Members you appear to can see:your display name, age, city label (e.g. “Seattle, WA”), an approximate, bandeddistance (e.g. “~6 mi away” — floored at “< 2 mi” so very close distances are never precise), your bio, your interests (some shown, some hidden behind the guessing game), your photos at the blur level your mutual clarity has earned, photo captions once that photo is substantially revealed, your compatibility score with them, and — for questions you have both answered — your answer, acceptable answers, importance, and any note, side by side with theirs.

No member ever sees:your email address, your date of birth, your ZIP code, your exact location or coordinates, your password, your private messages with others, who you've blocked or reported, or your answers to questions they haven't answered themselves (they must commit their own answer first).

• Service providers: vendors who process data on our behalf under contract — currently email delivery (our email system and its underlying provider) and infrastructure hosting. They may use your information only to provide services to us.
• Legal and safety: when we believe in good faith that disclosure is required by law (e.g. subpoena) or necessary to protect the rights, property, or safety of our members, the public, or Sprig — including reporting child sexual abuse material to NCMEC/authorities as required.
• Business transfers: in a merger, acquisition, or sale of assets, your information may transfer to the successor, which must honor this policy or notify you of changes.

We never sell personal information and never share it with third parties for their own marketing.

We keep your information while your account is active. You can delete your account at any time in the Safety Center; deletion removes your profile, photos, answers, interests, messages, and matches from the Service.

We retain a limited set of records after deletion:

• Safety records— snapshots of content that was flagged, and moderation/enforcement records (warnings, suspensions, bans) — kept so that reports remain reviewable and banned users can't simply return;
• Email delivery logs held by our email provider (recipient, subject, delivery status);
• Backups, which age out on a rolling basis [BACKUP RETENTION WINDOW]; and
• records we must keep to comply with law or resolve disputes.

You can edit your profile, photos, answers, and preferences in the app; delete your account in the Safety Center; and opt out of notification emails via the unsubscribe link in any such email (account, security, and safety emails are always sent). You may also request a copy of your data, correction, or deletion by emailing support@sprig.love; we will verify the request comes from the account owner and respond within the time required by applicable law.

State privacy rights (including California): depending on where you live, you may have rights to know/access, correct, delete, and port your personal information, and the right not to be discriminated against for exercising them. We do not sell or “share” personal information as those terms are defined in the California Consumer Privacy Act, and we do not use or disclose sensitive personal information for purposes other than providing the Service. Submit requests via the email above; you may use an authorized agent where the law allows. [ATTORNEY: confirm state-specific disclosures — CA, WA, TX, IL, NY — against launch markets.]

We use technical and organizational safeguards appropriate to a service of this kind: passwords stored only as strong one-way hashes, session cookies inaccessible to scripts, origin verification on state-changing requests, rate limiting on sensitive endpoints, and role-restricted access to moderation tools. No system is perfectly secure — please use a unique password and contact us immediately at support@sprig.love if you suspect unauthorized access.

The Service is for adults 18 and older. We verify age by date of birth at signup and do not knowingly collect information from anyone under 18. If we learn a member is under 18, we terminate the account and delete its information. If you believe a member is under 18, report the profile or email us.

Sprig is operated from the United States and currently intended for members in the United States. If you use the Service from elsewhere, your information will be processed in the U.S. [ATTORNEY: add GDPR/UK/EEA provisions before any non-U.S. availability.]

We may update this policy as the Service evolves. If a change is material — for example, a new category of data or a new kind of sharing — we will notify you (by email or in-app notice) before it takes effect. The “Last updated” date above always reflects the current version.

[COMPANY LEGAL NAME]
[BUSINESS ADDRESS]
support@sprig.love