SpotDrop Privacy Policy
Effective date: November 14, 2026
Developer: Scashfor Labs LLC (“we”, “us”)
Contact: Scott@scashforlabs.com
SpotDrop helps you save places you want to visit and see them on a map. This policy explains what information the app uses and where it goes.
The short version
- You don’t need an account. SpotDrop has no sign-up, no ads, no analytics, and no tracking.
- Your saved places live in your own iCloud account, which we cannot read.
- Your location is used on your phone to show you on the map and to remind you about nearby spots. We never receive it.
- When you share a link into SpotDrop, its caption text is sent to our server and then to an AI service so the app can work out the place name. That is the one thing that leaves your device through us. It is not linked to who you are.
- We don’t sell your information, and we don’t use it for advertising.
What stays on your device and in your iCloud
Everything you save in SpotDrop, including place names, addresses, coordinates, notes, categories, ratings, and collections, is stored on your device and in your own iCloud (CloudKit) account, so it syncs between your devices. This data is held by Apple, tied to your Apple Account. We can’t see, read, or recover it.
Photos you attach to a spot are stored on your device in the app’s storage. SpotDrop does not upload them to us. They may be included in your device’s own iCloud or computer backups, depending on your Apple settings.
Shared collections. If you share a collection, or join one, the people in it can see the spots in it, including names, locations, and notes, and your iCloud display name, shown as who added each spot. Sharing runs through Apple’s iCloud; we don’t receive this information. You can leave a shared collection at any time.
Location
SpotDrop asks for your location only while you are using the app, to show where you are on the map. If you turn on reminders, your phone uses your saved spots and your location on the device to tell you when you’re near one. These reminders are local notifications created on your phone. We never receive your location. You can turn location or notifications off at any time in iOS Settings.
When you share a link into SpotDrop
This is the part that involves other companies, so here is exactly what happens:
- Your phone reads the link. To find the caption, SpotDrop’s share extension contacts the site the link came from, such as Instagram (through Meta’s public embed service), TikTok, Yelp, AllTrails, Apple Maps, or Google Maps. That site sees a normal request from your device, just like opening the link in a browser. Those companies’ own privacy policies apply to that request.
- The text goes to our server and then to an AI service. For some links, especially Instagram and TikTok posts, the caption and page text are sent to a small server we run on Cloudflare and then on to the Anthropic API, which returns the place name. For a few links we also send the place name alone to suggest a category.
- A random install code goes with it. Each installation creates a random code (not your name, email, Apple Account, advertising ID, or device identifier). We use it only to limit how many AI requests one installation can make. A fresh install creates a new one.
- How long it’s kept. The server remembers the result for a given piece of text for up to 30 days, so the same post doesn’t have to be analysed twice. The request counters tied to the install code expire automatically, after 2 days for daily counts and about 2 months for monthly counts. We do not store your saved places on this server.
- Not linked to you. We don’t connect this text or the install code to your name, email, location, or iCloud account, and we don’t use them for tracking or advertising. Under Anthropic’s commercial terms, Anthropic does not train its models on this content. According to Anthropic, text sent through its API is normally deleted from its systems within 30 days, with exceptions for safety enforcement and legal obligations. Anthropic handles the text under its own terms and privacy policy: https://www.anthropic.com/legal/privacy
Because Cloudflare hosts our server, it may process basic technical connection data, such as an IP address, when your phone contacts us. Our own code does not store your IP address, and we don’t use it for anything.
If the AI step isn’t available, or you’ve reached the limit, SpotDrop still saves the spot and you can type the name yourself.
Purchases
SpotDrop offers optional SpotDrop Plus (monthly, yearly, or lifetime). Purchases are handled entirely by Apple. We never see your payment details. The app asks Apple on your device whether you own SpotDrop Plus so it can unlock unlimited spots. We receive sales reports from Apple that don’t identify you. Apple’s terms and privacy policy apply to purchases. You manage or cancel subscriptions in your Apple Account settings.
What we don’t collect
We do not collect or use: your name, email, phone number, or contacts; your location; your photos; advertising identifiers; analytics of our own; or anything for advertising or tracking. SpotDrop contains no third-party advertising or analytics code. (Apple may share crash reports or tester feedback with us if you have chosen to share them with developers in your device settings.)
Services we rely on
| Service | What it does for SpotDrop |
|---|---|
| Apple (iCloud / CloudKit, App Store) | Stores and syncs your saved spots in your account; handles purchases |
| Cloudflare | Hosts the small server that passes link text to the AI service |
| Anthropic | Reads shared caption text and returns the place name |
| The site you share from (Instagram/Meta, TikTok, Yelp, AllTrails, Apple, Google) | Provides the public caption when your phone opens the link |
Your choices and controls
- Delete your data. In SpotDrop, Settings has options to delete spots and to erase everything, which also removes your SpotDrop data from your iCloud. Deleting the app alone does not remove what is stored in your iCloud.
- Leave shared collections whenever you like.
- Turn off location and notifications in iOS Settings.
- Reset the install code by deleting and reinstalling the app.
- Questions or requests about your information: email Scott@scashforlabs.com. Because we hold almost no personal information, there is usually little to retrieve, but we’ll help however we can.
Children
SpotDrop is not directed to children under 13, and we don’t knowingly collect information from them.
Changes to this policy
If we change how SpotDrop handles information, we’ll update this page and the effective date. If a change is significant, we’ll tell you in the app.
Contact
Scashfor Labs LLC · Scott@scashforlabs.com