Privacy Policy

01Who we are

Spotlight is operated by Amos Live, Inc. ("Spotlight," "we," "us," or "our"). This Privacy Policy applies to the Spotlight mobile apps for iOS and Android, the website at spotlighttheapp.com, and any related services that link to it (together, the "Service").

It should be read together with our Terms of Service. If you have a question about privacy, email support@amos.live.

The Service is offered only in the United States, only to adults aged 18 and older. If you do not agree with this policy, please do not use the Service.

02Information we collect

Information you give us

• Account information. When you sign in with Apple or Google, we receive a unique account identifier and an email address from that provider. With Sign in with Apple you can choose to share a private relay address instead of your real email. If you choose to share your name, we may receive it too. We never see or store your Apple or Google password.
• Date of birth. We ask for your date of birth to confirm you are 18 or older. We use it to calculate your age, which is shown on your profile only if you leave "Show age" turned on. Your date of birth itself is never shown to anyone.
• Profile information. Your photos (up to 8), display name, and anything you choose to add: city, job, Instagram handle, and an "About" description. Your Instagram handle is something you type; we never ask for, and never collect, your Instagram password, and we do not connect to your Instagram account.
• Messages. The content of messages you send and receive in the app, with the time they were sent and whether they've been read.
• Likes and blocks. Who you like and who likes you, and the people you block.
• Reports. When you report a profile or message, the reason you pick, any details you write, and who and what you reported.
• Support and legal requests. Anything you send us by email, such as support questions, privacy requests, copyright notices or safety reports, and our replies.

Information created when you use Spotlight

• Spotlight activity. When you claim the spotlight, how much you paid, how long you held it, and the stats from your time in it (views, likes, messages and Instagram opens). We keep a record of each time someone holds the spotlight, which we use to run features such as handing the spot back if a later holder leaves.
• Credits and purchases. Your credit balance, credits you've spent, and records of your purchases: the product, the date, and the transaction identifier from Apple or Google. Payments are processed entirely by Apple or Google. We never receive your card number or other payment details.
• Engagement counts. When you view the spotlight or open the holder's Instagram, we add one to that holder's public totals. We store only the totals, not a list of who viewed or tapped.
• Notices. Messages we send you inside the app, such as telling you that someone else took the spotlight, or that it came back to you.

Information collected automatically

• Technical and log information. Like nearly every online service, our servers and hosting providers automatically receive information such as your IP address, device type, operating system and version, app version, request times, and error logs when your device connects to the Service. We use it to run, secure and debug the Service.
• Sign-in tokens. The app stores a session token on your device so you stay signed in.
• Push notification token. If you allow notifications, your device's push token, so we can send them to you.
• On-device settings. A few preferences stay on your device and are never sent to us, such as when the app last showed a rating prompt.

What we don't collect

We do not collect your precise location, your contacts, your browsing history, advertising identifiers, or biometric identifiers, and we do not use facial recognition. The app only accesses your photo library through the system photo picker, which gives us only the photos you choose. If you use "Save image" on a spotlight recap, the app asks for permission to add that one image to your photos; it cannot read your library.

03What other people can see

Spotlight is built around being seen. Please think about this before you add information to your profile or claim the spotlight.

• When you hold the spotlight, your profile is shown to everyone who opens the app, including people who aren't signed in: your photos, display name, age (if "Show age" is on), city, job and About. Your Instagram handle is shown only to signed-in users. The price you paid, how long you've held the spot, and your stats (views, likes plus messages, and Instagram opens) are public while you hold it.
• Outside the spotlight, your profile is visible to people you've messaged or who have messaged you, people who liked you, and people you liked.
• Likes. When you like someone, they can see that you liked them. Like counts on the spotlight are public.
• Messages are visible to you and the person you're talking to. They are not end-to-end encrypted. We can access them when necessary to investigate reports, enforce our rules, keep people safe, or comply with the law.
• Photos are stored at web addresses that are hard to guess but not secret. Anyone who has the link to one of your photos can view it, even outside the app.

Other users can take screenshots, save, or share what they see. We cannot control what other people do with information you make visible, so only share what you're comfortable with everyone seeing.

04How we use your information

We use the information described above to:

• Provide the Service: create and secure your account, show profiles, run the spotlight, process claims and credits, deliver messages, likes and notices, and show your stats and recaps.
• Verify eligibility: confirm that you are at least 18 and located in a place where we offer the Service.
• Keep people safe: review reports, photos and messages; detect and prevent spam, fraud, abuse and illegal content (including child sexual abuse material); and enforce our Terms and Community Guidelines. We may use automated tools to help with this, and people review the results before we take serious action like a ban.
• Process purchases: verify purchases with Apple or Google, add credits, and handle refunds, chargebacks and purchase disputes.
• Communicate with you: answer support requests, and send service messages, safety notices and updates to our terms. We do not send marketing email without your consent.
• Maintain and improve the Service: monitor performance, fix bugs, and understand how features are used in aggregate.
• Meet legal obligations: comply with law, respond to lawful requests, and establish, exercise or defend legal claims.

We do not use your information for targeted advertising, we do not make decisions about you based solely on automated processing that have legal or similarly significant effects, and we do not use your photos or messages to train generative AI models.

05How we share your information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only as follows:

• With other users, as described in What other people can see.
• With service providers who process information on our behalf, under contracts that limit their use of it to providing services to us. These include our cloud database, authentication, file storage and hosting provider (Supabase, with servers in the United States); email and customer-support providers; and content-moderation providers that help us detect prohibited content.
• With Apple and Google, to sign you in and to process in-app purchases, and to deliver push notifications. Their handling of your information is governed by their own privacy policies.
• With Instagram, when you choose. If you tap an Instagram link, the Instagram app or website opens and Instagram's own privacy policy applies.
• For safety and legal reasons. We may preserve and disclose information if we believe in good faith it is necessary to comply with law or legal process; to protect the safety of any person; to report child sexual exploitation to the National Center for Missing & Exploited Children (NCMEC) and law enforcement as the law requires; to detect or address fraud, security or technical issues; or to protect the rights and property of Spotlight, our users or the public.
• In a business transfer. If we're involved in a merger, acquisition, financing, reorganization, bankruptcy or sale of assets, your information may be transferred as part of that deal, subject to this policy.
• With your consent, or at your direction.

We may also share information that has been aggregated or de-identified so that it can no longer reasonably be linked to you.

06How long we keep it

We keep your information for as long as your account is open and as needed to provide the Service. When you delete your account:

• Your profile, photos, likes, blocks, notices, credit balance, purchase records and spotlight history are deleted.
• Messages you've sent are deleted, and so are your conversations, which means the people you talked with lose those conversations as well.
• If you were holding the spotlight, it passes back to the previous holder as described in our Terms.
• Deletion from our live systems happens right away. Copies in our backups are overwritten on their normal schedule, usually within 30 days.

We may keep limited information for longer when we need it for a legitimate reason: to comply with legal obligations (such as tax, accounting or law-enforcement preservation requests); to resolve disputes and enforce our agreements; or to prevent fraud and abuse, including keeping the minimum needed to stop banned people from coming back. Apple and Google keep their own records of your purchases. Server logs are kept for a limited period by our hosting providers.

07How we protect it

We use administrative, technical and physical safeguards designed to protect your information, including encryption in transit (HTTPS/TLS), database access rules that limit each account to the data it is allowed to see, restricted staff access, and reputable infrastructure providers. No method of transmission or storage is completely secure, though, and we cannot guarantee absolute security. If we learn of a security breach affecting your personal information, we will notify you and the authorities as the law requires.

08Your choices

• Edit your profile at any time from the You tab. You can remove photos and optional fields, and hide your age.
• Block anyone from their profile or a conversation, and manage blocked people in Settings.
• Notifications can be turned off in your device settings.
• Photo access can be changed or revoked in your device settings.
• Delete your account from inside the app under You → Settings → Delete account, or see how to delete your account if you no longer have the app.

09Your privacy rights

Depending on the state you live in (including California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia and others with consumer privacy laws), you may have the right to:

• Know and access the personal information we hold about you, and get a copy of it in a portable format;
• Correct inaccurate personal information;
• Delete personal information we hold about you;
• Opt out of the sale of personal information, sharing for cross-context behavioral advertising, targeted advertising, and profiling in furtherance of significant decisions. We don't do any of these;
• Limit the use of sensitive personal information. We only use sensitive information (such as your account login, the contents of your messages, and your age) to provide the Service, keep it safe, and as otherwise permitted by law, so there is nothing additional to limit; and
• Not be discriminated against for exercising any of these rights.

We offer these rights to every user, wherever in the United States you live. Most of them you can exercise yourself in the app. For anything else, email support@amos.live from the email address linked to your account (or tell us which sign-in you use if you signed up with a private relay address). We'll verify your request by matching it to your account, and we'll respond within 45 days, or tell you if we need more time as the law allows. You may use an authorized agent; we may ask the agent for proof of authorization and ask you to confirm your identity directly.

Appeals. If we decline your request, you can appeal by replying to our decision or emailing support@amos.live with "Appeal" in the subject. We'll respond within the time the law requires. If you're unhappy with the outcome, you may contact your state attorney general.

California residents

In the past 12 months we have collected the following categories of personal information, from you, your device, Apple or Google, and other users, for the purposes described in How we use your information: identifiers (such as account IDs, email address, and IP address); personal records (such as your name); characteristics of protected classifications (age); commercial information (credit purchases and spending); internet or electronic network activity (in-app activity and logs); audio or visual information (photos); professional information you choose to share (job); inferences (none are drawn for advertising); and sensitive personal information (account login, the contents of messages, and age). We disclose these categories only to the recipients described in How we share your information, and we keep each category for the periods described in How long we keep it. We have not sold or shared personal information, and we have no actual knowledge of selling or sharing the personal information of anyone under 16.

Under California's "Shine the Light" law, you may ask whether we disclose personal information to third parties for their own direct-marketing purposes. We don't.

Nevada residents

We do not sell covered information as defined by Nevada law.

10Children

Spotlight is only for adults. We do not knowingly collect personal information from anyone under 18, and we turn away anyone who gives a date of birth under 18. If we learn that someone under 18 has an account, we will delete it. If you believe a minor is using Spotlight, report the profile in the app ("Appears to be under 18") or email support@amos.live. See our Child Safety Standards.

11This website and cookies

This website doesn't use cookies, analytics, or tracking pixels, and it doesn't ask you for any information. Our hosting provider receives standard technical information (such as your IP address and browser type) to deliver and protect the site. Fonts are loaded from Google Fonts, which receives your IP address when your browser requests them. Because we don't track you across websites, we don't respond differently to "Do Not Track" signals, but we treat Global Privacy Control signals as a valid opt-out of sale and sharing, which we already don't do.

12Where your information is processed

Spotlight is offered only in the United States, and your information is stored and processed in the United States. If you access the Service from somewhere else, you do so on your own initiative, and you understand your information will be transferred to and processed in the United States.

13Changes to this policy

We may update this policy from time to time. When we do, we'll change the "Last updated" date above. If a change is material, we'll give you notice in the app or by email before it takes effect. Continuing to use the Service after the change takes effect means you accept the updated policy.

14Contact us

Start the subject with "Privacy" so it reaches the right person.

Amos Live, Inc., operator of Spotlight.