Privacy Policy

Last updated: July 2026

1. Who we are

SpiteCash is a consumer-friction research project. We collect user-submitted evidence about digital subscriptions, free trials, cancellation flows, refund delays, and unexpected charges. Friction Alpha uses anonymized and aggregated data to create subscription-friction insights.

2. What data we collect

When you submit a case, we may collect:

• Your email address for contact and bounty communication.
• Your country.
• The app or merchant name and website.
• Charge amount, currency, and charge date.
• Information about reminders, cancellation, refunds, and switching intent.
• Files you upload as evidence, such as screenshots or PDFs.

3. What not to upload

Do not upload full card numbers, passwords, identity documents, full bank account details, or other sensitive banking information. If we detect sensitive data, we may reject or delete the file.

4. Why we process this data

We process submitted data to:

• Review and validate consumer-friction events.
• Calculate a preliminary SpiteScore.
• Contact you about your submission or bounty eligibility.
• Create anonymized and aggregated research reports.
• Improve our fraud prevention and evidence review workflow.

5. Legal basis

We rely on your consent for processing your submission for research purposes. We may also process limited operational data where necessary to run the service, prevent abuse, and maintain records of bounty approvals.

6. How we use anonymized data

We may use aggregated, anonymized information in reports, dashboards, or research outputs. We do not sell your personal identity, email address, payment details, or raw uploaded evidence.

7. Data retention

We keep submitted data only as long as needed for validation, fraud prevention, bounty records, and aggregated research. Test submissions and rejected files may be deleted earlier.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, or request portability of your personal data. You may also withdraw consent where processing is based on consent.

9. Contact

To request access, correction, or deletion of your data, contact us at: [email protected]

This is an MVP privacy notice and should be reviewed before public launch.