Privacy Policy

Effective date: November 2, 2026 · Last updated: November 2, 2026

Spilled RealiTea LLC operates a social platform for reality TV fans to share hot takes, discuss shows, and connect with other fans. This policy explains what information we collect, how we use it, and your rights over your data.

1. Information We Collect

Account information

Email address (required for registration and account verification)
Username (your public @handle)
First and last name
Password (stored as a one-way cryptographic hash — we cannot read it)
Phone number (optional)

Profile information

Profile photo (uploaded as an image)
Bio text
Privacy setting (public or private account)

Content you create

Posts, comments, and reactions in your feed and in Confessionals (rooms)
Polls you create and votes you cast
Live session data (the show or movie you declare you are currently watching)
Live chat messages sent while watching with friends
Direct messages you send and receive
Links and embedded media you share (TikTok links, external URLs)

Social graph

Who you follow and who follows you
Follow requests you send or receive
Users you have blocked
Confessionals (rooms) you have joined
Shows and catalog items you have saved

Usage data

Server access logs (IP address, request path, timestamp, HTTP status code), kept for security and debugging purposes
Error reports (technical details about a failure, which may include the request involved)

Device information

Your push notification token, if you allow notifications

Waitlist signups

Your email address, if you join the beta or merchandise waitlist on our website

2. How We Use Your Information

Provide the service — create and maintain your account, display your content, and enable social features (following, reactions, live watch parties)
Notifications — send push notifications you have enabled, such as show reminders and activity alerts
Email communications — send account verification, password reset, and content moderation notifications
Safety and moderation — review reported content, enforce our community guidelines, and investigate abuse
Security — detect and prevent unauthorized access, fraud, or misuse
Service improvement — understand how features are used to improve the app. We do not use third-party analytics or advertising SDKs.

We do not sell your personal information. We do not use your data to serve third-party advertisements.

3. Information We Share

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

Other users

Your username, display name, profile photo, bio, and public posts are visible to other users. If your account is set to private, your feed posts are only visible to approved followers. Posts in Confessionals (rooms) are visible to other users.

Service providers

Railway — cloud hosting provider where the application and database run. Your data is stored on Railway's infrastructure.
Resend — transactional email provider used to send verification, password reset, and moderation emails. Resend receives your email address and the content of those emails.
Expo, Apple, and Google — deliver push notifications. They receive your push token and the content of the notification.
Sentry — error monitoring used to diagnose failures. It receives technical details about errors, which may include information from the request involved.
GIPHY — powers the GIF picker. Your device sends your GIF searches to GIPHY directly, which also receives your IP address.
TikTok — provides previews for TikTok links. Your device sends the link you paste to TikTok directly, which also receives your IP address.
TVMaze — public TV schedule API used to display show information. No personal data is sent to TVMaze.
Anthropic — AI tools help our team research show cast lists and eliminations. Only show names and episode details are sent. Your personal data and content are not.

Legal requirements

We may disclose information if required by law, court order, or to protect the rights and safety of our users or the public.

4. Data Retention

We retain your account data and content for as long as your account is active. When you delete your account, we permanently delete your profile, posts, comments, reactions, votes, messages, follow relationships, and the other data associated with your account. Deletion is irreversible. Your direct message conversations are deleted in full, including the messages the other person sent in them.

Server logs and error reports are kept for a limited time and are not removed individually when you delete your account.

Reports that other users filed about your content may be retained in moderation records after your account is deleted, solely for safety and compliance purposes.

5. Your Rights and Choices

Delete your account — You can permanently delete your account and all associated data at any time from within the app (Settings → Delete Account). Deletion is immediate and irreversible.

Reset your password — You can reset your password at any time using "Forgot password" on the login screen.

Edit your profile — You can update or remove your name, bio, and profile photo at any time from your profile settings.

Private account — You can set your account to private so that only approved followers can see your feed posts and profile activity. Posts in Confessionals (rooms) are public to other users.

Block users — You can block any user to prevent them from interacting with you or seeing your content.

Access or export your data — To request a copy of your data, contact us at the email address below.

If you are located in the European Economic Area (EEA), United Kingdom, or California, you may have additional rights under GDPR or CCPA, including the right to access, correct, or object to the processing of your personal data. To exercise these rights, contact us at the address below.

6. Children's Privacy

Spilled RealiTea LLC is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly. If you believe we may have information from a child under 13, please contact us.

7. Security

We take reasonable measures to protect your information, including:

Passwords are hashed using bcrypt and are never stored in readable form
All data is transmitted over HTTPS (TLS encryption)
Login sessions expire after 30 days without use
Email verification is required before account access is granted

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Third-Party Links

Spilled RealiTea LLC allows users to share links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies before providing any personal information to them.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you via email or an in-app notice. Your continued use of spilled after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Spilled RealiTea LLC
Email: support@spilledrealitea.com