Privacy Policy

Effective date: July 17, 2026

Cert to Table (“the app,” “we,” “us”) is an offline-first study app that helps hospitality workers prepare for food-safety certification exams. It is developed and operated by Spinach Creations, L.L.C. This policy explains what data the app handles, the small amount that ever leaves your device, and the choices you have.

The short version

• Cert to Table has no accounts — no sign-up, no login, no email address.
• Your study data stays on your device. Progress, scores, streaks, settings, your display name, and your profile photo are stored locally and are never uploaded.
• We collect no personal information and attach no identifiers (no device ID, no advertising ID, no location) to anything the app sends.
• Only two things are ever transmitted off your device: feedback you choose to send us, and anonymous usage events (such as “a practice quiz was completed with this score”).
• The app also downloads one small piece of public data: the current list of promotional free windows (which study guides are temporarily free, and until when). It contains no personal data, and nothing about you is sent to request it.
• Payments are handled entirely by Google Play. We never see your payment details.
• There are no ads, no third-party tracking SDKs, and no sale or sharing of data. Ever.

Data stored only on your device

The app keeps the following in private app storage on your device. None of it is transmitted to us or anyone else:

• Study progress: lessons completed, quiz and exam-simulator results, study streaks, and flashcard (spaced-repetition) scheduling.
• App settings: theme, sound, haptics, and music preferences.
• Your optional display name, used only for the greeting on the home screen.
• Your optional profile photo. If you choose one (from your photo library or by taking a picture), a resized copy is saved into the app's private storage and used only as your in-app avatar. It is never uploaded.
• A local record of which study guides you have unlocked, so your purchases work offline.

You can erase all of this at any time by clearing the app's data in Android settings or uninstalling the app.

Data that leaves your device

1. Feedback you send

If you use the in-app “Send feedback” form, we receive the category you selected (Bug, Content error, Idea, or Other) and the message you wrote, and may receive the app version. Nothing else is attached — no name, no email address, no device identifier.

Because feedback carries no identifiers, we have no way to know who sent a given message, and we cannot look up “your” feedback later. Please don't include personal information in the message text; if you do, it will be stored with the message. We use feedback solely to fix problems and improve the app.

2. Anonymous usage events

To understand which study content is working, the app records a small event when you finish a practice quiz or exam simulation. Each event contains only: the study-guide ID, the topic ID (for quizzes), the score, and whether an exam simulation was passed. Events contain no device identifiers, no advertising ID, no location, and nothing that identifies you. We use them only in aggregate.

How transmission works

Feedback and events are queued on your device and sent to our backend, hosted by Supabase, when you have an internet connection. The app works fully offline; nothing is ever required to be sent for the app to function. Our database is configured so the app can only submit these records and read one public table: the promotional free-window list described above. Nothing you do in the app can be read back.

Like any internet request, a transmission necessarily exposes your IP address to the hosting provider in order to be delivered. We do not store IP addresses in our database; the provider's infrastructure may retain them briefly in routine server logs under its own policies.

Purchases

Study guides are unlocked with one-time in-app purchases processed by Google Play Billing. Google handles the entire payment; we never receive or store your payment card details, billing address, or Google account information. After a purchase, the app receives a confirmation from Google Play and records the unlock locally on your device. Purchases are tied to your Google Play account and can be restored through Google Play. Google's handling of your payment data is described in the Google Privacy Policy.

What we don't do

• No advertising and no advertising SDKs.
• No selling, renting, or sharing of data with third parties.
• No tracking across other apps or websites.
• No collection of contacts, location, files, or anything from your device beyond what is described above.

Service providers

• Supabase — cloud database hosting for feedback and anonymous events.
• Google Play — app distribution and purchase processing.

These providers process data only as needed to provide their services to us.

Data retention and deletion

Everything on your device is under your control and is removed when you clear the app's data or uninstall. Feedback and anonymous events on our backend are kept only as long as they are useful for improving the app. Because these records contain no identifiers, we are unable to link any of them to a specific person — which also means that if you ask us to delete “your” data, we genuinely cannot find it; there is nothing on our servers that identifies you.

Children

Cert to Table is intended for hospitality workers preparing for professional certification and is not directed at children under 13. We do not knowingly collect personal information from anyone, children included.

Security

Data in transit is encrypted over HTTPS. Our backend permits the app to insert feedback and events, and to read only the public promotions list — nothing about you is stored there to read back.

Changes to this policy

If the app's data practices change, we will update this policy and revise the effective date above. Material changes will be noted in the app's release notes.

Contact

Questions about this policy: spinachthecow@gmail.com