Privacy
Last updated 22 October 2026
Spora is a record-keeping app for mushroom growers. This page explains what personal data it handles, why, who helps us run it, how long we keep it, and your rights.
- Your records live on your phone first. With an account, they are also kept in our cloud database so they sync between your devices.
- We do not sell your data, show ads, or track you across other apps or websites.
- Anonymous usage statistics help us improve the app. You can switch them off in Settings.
- You can export everything and delete your account from inside the app at any time.
Who is responsible
The data controller is Hubert Burton, Oslo, Norway. Email: hello@getspora.app.
The EU General Data Protection Regulation (GDPR) applies, as it does in Norway through the Personal Data Act (personopplysningsloven).
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Account: email address, password (stored only as a secure hash), optional display name. Or your Apple or Google sign-in if you choose it. | To create your account, sign you in and keep your records apart from everyone else's. | Contract |
| Your records: strains, cultures, batches, checks, harvests, recipes, stock, plans, tasks, notes, rooms and shelves, customers and orders, costs and prices you enter. | To store, sync and show them. | Contract |
| Photos you attach to a record, only when you choose to. | To show them with the record on all your devices. | Contract |
| Usage statistics: which screens and features are used, app version, platform, a random session ID and your account ID. | To see which features are used and where people get stuck. | Legitimate interest. Switch off in Settings → Share anonymous usage data. |
Stays on your phone and is never sent to us: the app lock PIN, the daily automatic backups, files you export, camera images used to scan labels, and the Bluetooth connection to your label printer.
We do not collect your location, contacts, health data, advertising identifiers or browsing history. Some Android versions call the Bluetooth permission a "location" permission; Spora uses it only to find your printer.
Spora is not meant for children under 13, and we do not knowingly collect their data.
Who helps us run it
| Provider | What they do | Where |
|---|---|---|
| Supabase, Inc. | Cloud database, sign-in and photo storage | Our database is in the EU (Ireland). |
| PostHog, Inc. | Usage statistics | If data leaves the EEA, it is covered by the EU Standard Contractual Clauses. |
They may use your data only to provide their service to us. Apple and Google have their own privacy policies for downloads and for "Sign in with Apple" or "Sign in with Google". We use no advertising networks or data brokers.
Payments
Spora is free during early access. If paid plans come later, purchases will go through Apple or Google, and we will never see your card details. We will update this page before that happens.
Who can see your data
- You, and anyone you give access to your farm.
- Us, only when needed to run the service, fix a problem you report, or when the law requires it.
- Photos are stored at long, random web addresses that cannot be guessed or listed, but anyone who has the exact address can open the image. Please don't attach photos you consider secret.
How long we keep it
- Account and records: until you delete them or your account. Deleted records stay in the app's Trash until you empty it.
- Usage statistics: up to 24 months.
- Backups on your phone: the last 7 days. They are removed when you delete the app.
Your rights
You can ask to see, correct, delete or move your data, object to usage statistics, or ask us to pause processing. Most of this you can do yourself: Settings → Data exports everything to Excel or a full backup file, and Settings → Delete account removes your account. For anything else, email us. We answer within one month.
You can also complain to the Norwegian Data Protection Authority, Datatilsynet, or the authority where you live.
Deleting your account
See Delete your account for what is removed and how to ask if you can't open the app.
Security
All traffic between the app and our servers is encrypted. Each farm's records are kept apart by access rules in the database, and you can lock the app with a PIN. If a breach affects your data, we will tell you and Datatilsynet as the law requires.
Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect.
Spora is made in Oslo by Hubert Burton. Questions: hello@getspora.app