Privacy Policy

Spiros tracks desktop activity to power its features. By default, we collect:

• Active application names and usage duration
• Click and scroll counts (not content)
• Keystroke counts (not what you type)
• Activity categorization (coding, browsing, gaming, etc.)

The following are opt-in only and disabled by default:

• Window titles (document names, web page titles)
• Browser domain extraction
• Cloud sync of keystroke statistics
• Cloud sync of detailed activity entries
• Detailed stat sharing with friends

We never collect passwords, file contents, keylogged text, screenshots, or clipboard data.

Locally: Activity data is stored as JSON files in your system's app data folder. Session tokens are encrypted using your operating system's secure storage (Windows DPAPI / macOS Keychain).

Cloud (optional): If you create an account and enable cloud sync, activity summaries are stored in a Supabase-hosted PostgreSQL database. Data in transit is encrypted via TLS. Data at rest is encrypted by the hosting provider.

You can configure a data retention period (30 to 365 days, or keep forever) in Settings. Expired data is automatically deleted on app startup.

Spiros gives you granular control over your data in Settings > Privacy:

• Toggle window title tracking on/off
• Toggle keystroke count tracking on/off
• Toggle browser domain tracking on/off
• Control what gets synced to the cloud
• Control what friends can see
• Set automatic data retention periods

All privacy-sensitive features default to off. You opt in to more data sharing, never out.

When you compare stats with friends, they only see:

• Total active time
• Time per category (coding, gaming, etc.)
• Active days count

Friends cannot see your app names, window titles, keystroke counts, or browsing domains. This data is stripped server-side before it reaches their device.

You can export all your data as JSON at any time via Settings > Data Management > Export.

You can delete all local activity history via Settings > Clear History.

You can permanently delete your account and all associated cloud data via Settings > Account > Delete Account. This removes all activity records, friend connections, and profile data from our servers.

By default, Spiros automatically checks for and downloads updates from GitHub Releases. This involves a periodic HTTPS request to github.com to check for new versions. No personal data is sent during this process.

When an update is downloaded, it is installed automatically the next time you close the app. You can disable automatic updates at any time in Settings > Updates > Auto-download updates. Manual update checks remain available even when auto-update is off.

We use the following third-party services:

• Supabase — database hosting and authentication (PostgreSQL, hosted in AWS us-east-1)
• GitHub — source code hosting and release distribution for app updates
• Vercel — website hosting for this marketing site

We do not sell, rent, or share your data with advertisers, data brokers, or any other third parties. We do not use analytics or tracking pixels on the desktop app.

For privacy questions or data requests, contact us at: privacy@spiros.app