Spill — Privacy Policy

Effective date: 2026-05-23 · Contact: noureddine@genie-works.com

This is the privacy policy for the Spill mobile application ("Spill", "the app", "we"). Spill is a voice-first brain-dump tool for ADHD minds, distributed on Google Play.

We've tried to keep this policy honest and short. If anything is unclear, email us.

What we collect — and what we don't

Data type	Collected?	Stored on our servers?	Shared with third parties?
Voice recordings (audio)	Yes, when you tap record	No — sent once, then discarded	Yes, to a transcription service (see below)
Transcripts and bucket items	Yes, on your device only	No	No
Account information (name, email, login)	No — no account required	—	—
Device identifiers, advertising IDs	No	—	—
Location data	No	—	—
Photos, contacts, calendar, messages	No	—	—
Crash reports or analytics	No	—	—
Payment information	No — the app is free, no in-app purchases	—	—

How your audio is handled

When you tap the record button:

The Spill app records audio from your microphone (you'll have granted the RECORD_AUDIO permission).
When you stop recording, the audio file is sent over HTTPS to our processing service (a Cloudflare Worker we operate, called spill-proxy).
spill-proxy forwards the audio to Google's Gemini AI to generate a transcript and to classify the content into buckets (tasks, thoughts, reminders, emotions).
The transcript and bucket items are returned to your device and stored locally (using Hive on-device storage).
The audio is discarded after processing. We do not keep a copy. Google's data handling for Gemini API requests is governed by their Generative AI Privacy & Terms.

What stays on your device

All transcripts
All sorted bucket items (tasks, thoughts, reminders, emotions)
App preferences (theme, optional reminder time, your name if you set one)

This data lives in the app's private storage on your phone. If you uninstall the app, this data is deleted with it. We do not have access to it and cannot recover it.

Permissions we ask for

Permission	Why
`RECORD_AUDIO`	Required — to capture your voice when you tap the record button
`POST_NOTIFICATIONS`	Optional — to deliver the daily reminder, if you enable it
`SCHEDULE_EXACT_ALARM`	Optional — needed for the reminder to fire at the time you picked

You can revoke any of these at any time in Android Settings → Apps → Spill → Permissions. Revoking RECORD_AUDIO will disable the core feature; revoking the other two only disables reminders.

Third parties

The only third-party services involved in Spill are:

Cloudflare — hosts our spill-proxy Worker (transit only; Cloudflare does not retain your audio)
Google Gemini API — performs the transcription and classification (audio not retained per the integration)

We do not use analytics SDKs, advertising SDKs, attribution SDKs, crash reporters, or any other tracking technology.

Children

Spill is intended for users 18 years and older. We do not knowingly collect any data from children under 13. If you believe a child has used the app, contact us and we will help.

Your rights and how to exercise them

Because we do not store your data on our servers, most data-rights requests resolve on-device:

Right to access — open the app; all your data is visible there
Right to delete — uninstall the app
Right to correct — edit transcripts and bucket items directly in the app
Right to data portability — currently no in-app export feature

If you have a question or want to make a request related to this policy, email us at noureddine@genie-works.com and we will respond within 30 days.

Changes to this policy

If we change this policy, we will update the "Effective date" above and update the policy at this URL. Material changes will be flagged in the app on next open.