Privacy Policy
Last updated: January 15, 2026
Spiral Matrix, LLC ("Company," "we," "us," or "our") operates the SPIRAL mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this Privacy Policy carefully. By using the Service, you consent to the practices described in this policy.
1. Information We Collect
1.1 Information You Provide
When you use our Service, you may provide us with the following information:
Account Information: If you create an account directly with us, we collect your username and password (stored securely using encryption). If you sign in using Apple or Google, we receive limited information from these providers, such as your name, email address, and a unique identifier. We do not receive or store your Apple or Google password.
User Content: Stories, text, characters, and other creative content you create using the Service.
AI Prompts and Inputs: Text prompts and inputs you provide when using our AI-powered features for story and image generation.
Photos: If you choose to upload a reference photo from your device's photo library to guide AI image generation, we process that image to generate your requested content.
1.2 Information Collected Automatically
When you access the Service, we may automatically collect certain information:
Session Data: Information about your session when you are logged in to maintain your authenticated state.
Firebase Analytics: We use Google Firebase Analytics to collect basic, anonymized usage data to help us understand how users interact with the Service. This may include information such as app opens, feature usage, and general engagement metrics. We have configured Firebase to collect only essential information and do not use it for advertising purposes.
Push Notification Data: If you enable push notifications, Firebase Cloud Messaging may store device tokens on our behalf to deliver notifications to your device. These tokens are managed by Firebase and are used solely to send you notifications about your account, content, or Service updates.
Server Logs: When you use the Service, our servers may automatically record information such as your IP address, access times, and actions taken. This information is used for security, fraud prevention, and legal compliance purposes.
Cookies: We use essential cookies to keep you logged in and remember your preferences. These cookies are necessary for the Service to function properly.
1.3 Information from Third Parties
We may receive information from third-party services:
Sign-In Providers: If you choose to sign in with Apple or Google, we receive your name, email address, and a unique account identifier from these services.
Apple App Store: When you make purchases or subscribe through the App Store, Apple sends us transaction notifications containing transaction IDs, product identifiers, and subscription status information. We do not receive or store your payment card details—all payment processing is handled by Apple.
2. How We Use Your Information
We use the information we collect for the following purposes:
Provide and Maintain the Service: To create and manage your account, authenticate your identity, and deliver the features you request.
Process AI Features: To send your prompts and inputs to our AI service providers (Google) to generate text and images as part of the Service's functionality.
Manage Subscriptions: To process and track your subscription status and provide access to premium features.
Send Notifications: To send you push notifications related to your account, content, or Service updates (you can disable these in your device settings).
Improve the Service: To analyze usage patterns and improve our features, content, and user experience.
Ensure Security: To protect against unauthorized access, fraud, and other malicious activity.
Enforce Our Policies: To investigate and take action on violations of our Terms of Service, including maintaining records of content moderation decisions.
Comply with Legal Obligations: To comply with applicable laws, regulations, and legal processes.
3. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
3.1 Service Providers
We share information with third-party service providers who perform services on our behalf:
Google Firebase: For database hosting, authentication, and analytics. Your user content and account data are stored on Firebase servers.
Google AI Services: Your text prompts and inputs are sent to Google's AI services to generate content. Please review Google's Generative AI Use Policy at https://policies.google.com/terms/generative-ai/use-policy for information about how Google handles this data.
Apple: For payment processing and subscription management through the App Store.
3.2 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), or if we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
3.3 Business Transfers
If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Service of any change in ownership or uses of your personal information.
4. Data Storage and Security
Your information is stored on secure servers provided by Google Firebase, which are located in the United States. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with the Service. We retain your user content (stories, characters, etc.) until you delete it or request account deletion. Subscription transaction records are retained for accounting and legal compliance purposes. If you request deletion of your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, accounting, or fraud prevention purposes.
6. Your Rights and Choices
6.1 Account and Content
You may access, update, or delete your account information and user content through the Service at any time.
6.2 Account Deletion
You may delete your account directly within the app through the account settings menu, or by contacting us at spiral.matrix.com@gmail.com. Account deletion requires that any active subscription be cancelled first. Upon confirmation, your account and personal information will be permanently deleted immediately. Note that certain content may be retained separately where required for legal compliance, safety, or enforcement purposes as described in our Terms of Service.
6.3 Push Notifications
You can opt out of push notifications by adjusting your device settings.
6.4 Cookies
You can manage cookie preferences through your browser settings. Note that disabling essential cookies may affect the functionality of the Service.
7. Rights for Users in the European Economic Area (GDPR)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
Right to Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You have the right to request correction of inaccurate personal data.
Right to Erasure: You have the right to request deletion of your personal data.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format.
Right to Object: You have the right to object to processing of your personal data in certain circumstances.
Right to Restrict Processing: You have the right to request restriction of processing in certain circumstances.
Right to Withdraw Consent: Where we rely on consent, you have the right to withdraw it at any time.
To exercise these rights, please contact us at spiral.matrix.com@gmail.com. We will respond to your request within 30 days. You also have the right to lodge a complaint with a supervisory authority in your country of residence.
8. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you.
Right to Delete: You have the right to request deletion of your personal information.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
We do not sell personal information. To exercise your California privacy rights, please contact us at spiral.matrix.com@gmail.com.
9. Children's Privacy
The Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child under 16 has provided us with personal information, please contact us at spiral.matrix.com@gmail.com. If we become aware that we have collected personal information from a child under 16 without verification of parental consent, we will take steps to delete that information promptly.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and service providers are located. These countries may have data protection laws that are different from the laws of your country. By using the Service, you consent to the transfer of your information to the United States and other countries. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.
11. Third-Party Links
The Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services. We encourage you to review the privacy policies of any third-party websites you visit.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on the Service and updating the "Last Updated" date at the top. We may also notify you by email or through the Service. Your continued use of the Service after any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically.
13. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us at:
← Back to About