← getspammy.com

Privacy Policy

Spammy — AI-Powered Spam Mail Cancellation
Last updated: March 29, 2026

What We Collect

When you use Spammy, we collect and process:

• Account information: Your Apple ID email address and display name (provided via Apple Sign-In)
• Mailing address: Provided by you so we can identify your records with mail senders
• Mail images: Photos of junk mail you submit for processing
• Extracted data: Text extracted from mail images via OCR, including sender names, addresses, and opt-out information
• Processing logs: Timestamps and status of opt-out actions taken on your behalf

How We Use Your Data

Your data is used solely to:

• Process opt-out requests on your behalf — we send your name and mailing address to mail senders to request removal from their mailing lists
• Identify senders — we analyze mail images to determine who sent the mail and how to opt out
• Improve our service — we use aggregated, anonymized data to improve sender matching accuracy

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Third-Party Services

We use the following third-party services to process your data:

Service	Purpose	Data Shared
Supabase	Authentication, database, image storage	Account info, mail images, processing data
Google Cloud Vision	Optical character recognition (OCR)	Mail images (processed, not stored)
Anthropic (Claude)	Text analysis and extraction	OCR text (processed, not stored)
Resend	Sending opt-out emails on your behalf	Your name, mailing address, sender info
Browserbase	Automated web form submission	Your name, mailing address, sender info
Retell AI	Automated phone opt-out calls	Your name, mailing address, sender info

Each service processes data according to their own privacy policies. Images and text sent to Google Cloud Vision and Anthropic are processed in real-time and not retained by those services.

Data Retention

• Mail images: Stored until you delete your account
• Processing data: Stored until you delete your account
• Account information: Stored until you delete your account

Your Rights

You have the right to:

• Access your data at any time through the app
• Delete your account and all associated data through Settings > Delete Account & Data
• Opt out of the service at any time by deleting your account

Account deletion permanently removes your profile, mailing address, all submitted mail images, and all processing records.

California Residents (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information.

EU/EEA Residents (GDPR)

If you are in the EU/EEA, our legal basis for processing is your consent (provided when you submit mail for processing) and legitimate interest (improving the service). You may withdraw consent at any time by deleting your account.

Data Security

We use industry-standard security measures:

• All data transmitted over HTTPS/TLS
• Authentication tokens stored in iOS Keychain
• Database access controlled via row-level security policies
• API keys and secrets managed via environment variables, never committed to source code

Children's Privacy

Spammy is not intended for use by children under 13. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the app.

Contact

For privacy questions or data requests, contact: privacy@getspammy.com