Last updated: July 6, 2026
Welcome to Spiryted. Spiryted is a private nightly-reflection app: each night you answer a few short questions, tag what you worked on to a life area, optionally write a longer journal entry, build a streak, and get a weekly review of your progress. Spiryted is operated by Abdullah Shabbir, an individual based in Pakistan, who acts as the data controller responsible for your personal data. This policy explains what we collect, how we use and share it, and how to delete it. You can reach the data controller at support@spiryted.com.
Your reflections, journal entries, life areas, streak, and weekly review are visible only to you. They are never shown to anyone else, they never appear on any public page or feed, and Spiryted has no friends, followers, boards, messaging, or other social features that would expose them.
The one exception to “only you can see it” is our operational and legal access: our staff may access stored data where strictly necessary to run, debug, secure, or provide the service, or where required by law.
We process your data only to operate the service: authenticating you, storing and showing your reflections and areas back to you, computing your streak and weekly review, sending the reminders and nudges you’ve opted into, and managing subscriptions (performance of contract); verifying that you meet our minimum age and complying with our legal obligations regarding children, using your date of birth (legal obligation and legitimate interests); securing the service and preventing abuse (legitimate interests); and sending push notifications (consent, withdrawable in Settings). We do not sell your personal data, we do not show advertising, and we do not use your content (your reflections or journal entries) to train AI models.
Your account, profile, and reflection data are stored with our database provider, Supabase. We rely on Vercel for application hosting and privacy-friendly, cookieless analytics, and on Lemon Squeezy for payment processing of Spiryted Pro subscriptions. Our web fonts are served via Google Fonts. International transfers:these providers operate servers that may be located outside your country, including in the United States, so your data may be transferred to and processed in other countries. Where required by law, these transfers are covered by the providers’ Standard Contractual Clauses or equivalent safeguards.
We retain your data for as long as your account is active. Free accounts can view their most recent 90 days of reflections in the app; Spiryted Pro unlocks your full reflection history — in both cases your data remains stored until you delete it or your account. We may delete accounts that have been inactive for 24 consecutive months, after attempting to notify the account email.
Account deletion is available instantly from the Settings page. It permanently removes your profile, your nightly reflections, journal entries and life areas, your push subscriptions, your settings, and your login credentials. Residual copies in encrypted backups are removed within 30 days.
If you are an EU/UK resident, you have the right to access, rectify, or erase your personal data, to restrict or object to its processing, and to data portability; you can exercise the main ones directly in the app — deletion from Settings (above), and a full machine-readable export. The Exportbutton on the Settings page downloads a JSON file containing your account info, profile, settings, nightly reflections and journal entries, life areas, and push subscriptions — it is free for every account, whether or not you subscribe to Pro. We do not carry out automated decision-making that produces legal effects about you. You also have the right to lodge a complaint with your local data protection supervisory authority. For anything you can’t do in-app, email support@spiryted.com and we will respond within 30 days.
Spiryted is for users aged 16 and over. We collect a date of birth at sign-up to confirm eligibility (see Section 2). No one under 13 may use Spiryted, and we do not knowingly collect personal data from anyone under 13. If we learn that an account belongs to someone under 13, we terminate it and delete the associated data; we likewise terminate accounts of users we find to be under our minimum age of 16. If you believe a child under 13 has provided us personal data, contact us at support@spiryted.com and we will delete it.
Your data is protected with Row-Level Security (RLS) in our PostgreSQL database, so your reflections are only readable by you (and by us as described in Section 3). All traffic is encrypted in transit (HTTPS). No system is 100% secure, and we cannot guarantee absolute security; if a breach affecting your personal data occurs, we will notify affected users and authorities as required by law.
We may update this policy as the service evolves. For material changes we will give notice in the app or by email before the changes take effect. The “Last updated” date above always reflects the current version.
If you have any questions about this Privacy Policy, please contact us at: support@spiryted.com