Privacy Policy
Effective date: July 17, 2026
This policy covers both this website and the Cert to Table mobile app, each operated by Spinach Creations, L.L.C., a Maryland limited liability company. The two are described separately because they handle data differently.
Cert to Table (mobile app)
Cert to Table is an offline-first study app that helps hospitality workers prepare for food-safety certification exams. This section explains what data the app handles, the small amount that ever leaves your device, and the choices you have.
The short version
- Cert to Table has no accounts — no sign-up, no login, no email address.
- Your study data stays on your device. Progress, scores, streaks, settings, your display name, and your profile photo are stored locally and are never uploaded.
- We collect no personal information and attach no identifiers (no device ID, no advertising ID, no location) to anything the app sends.
- Only two things are ever transmitted off your device: feedback you choose to send us, and anonymous usage events (such as “a practice quiz was completed with this score”).
- The app also downloads one small piece of public data: the current list of promotional free windows. It contains no personal data, and nothing about you is sent to request it.
- Payments are handled entirely by Google Play. We never see your payment details.
- There are no ads, no third-party tracking SDKs, and no sale or sharing of data. Ever.
Data stored only on your device
The app keeps the following in private app storage on your device. None of it is transmitted to us or anyone else:
- Study progress: lessons completed, quiz and exam-simulator results, study streaks, and flashcard scheduling.
- App settings: theme, sound, haptics, and music preferences.
- Your optional display name, used only for the greeting on the home screen.
- Your optional profile photo. If you choose one, a resized copy is saved into the app’s private storage and used only as your in-app avatar. It is never uploaded.
- A local record of which study guides you have unlocked, so your purchases work offline.
You can erase all of this at any time by clearing the app’s data in Android settings or uninstalling the app.
Data that leaves your device
1. Feedback you send
If you use the in-app “Send feedback” form, we receive the category you selected (Bug, Content error, Idea, or Other) and the message you wrote, and may receive the app version. Nothing else is attached — no name, no email address, no device identifier.
Because feedback carries no identifiers, we have no way to know who sent a given message, and we cannot look up “your” feedback later. Please don’t include personal information in the message text; if you do, it will be stored with the message. We use feedback solely to fix problems and improve the app.
2. Anonymous usage events
To understand which study content is working, the app records a small event when you finish a practice quiz or exam simulation. Each event contains only: the study-guide ID, the topic ID, the score, and whether an exam simulation was passed. Events contain no device identifiers, no advertising ID, no location, and nothing that identifies you. We use them only in aggregate.
How transmission works
Feedback and events are queued on your device and sent to our backend, hosted by Supabase, when you have an internet connection. The app works fully offline; nothing is ever required to be sent for the app to function. Our database is configured so the app can only submit these records and read one public table. Nothing you do in the app can be read back.
Like any internet request, a transmission necessarily exposes your IP address to the hosting provider in order to be delivered. We do not store IP addresses in our database; the provider’s infrastructure may retain them briefly in routine server logs under its own policies.
Purchases
Study guides are unlocked with in-app purchases processed by Google Play Billing. Google handles the entire payment; we never receive or store your payment card details, billing address, or Google account information. After a purchase, the app receives a confirmation from Google Play and records the unlock locally on your device. Purchases are tied to your Google Play account and can be restored through Google Play. Google’s handling of your payment data is described in the Google Privacy Policy.
What we don't do
- No advertising and no advertising SDKs.
- No selling, renting, or sharing of data with third parties.
- No tracking across other apps or websites.
- No collection of contacts, location, files, or anything from your device beyond what is described above.
Service providers
- Supabase — cloud database hosting for feedback and anonymous events.
- Google Play — app distribution and purchase processing.
These providers process data only as needed to provide their services to us.
Data retention and deletion
Everything on your device is under your control and is removed when you clear the app’s data or uninstall. Feedback and anonymous events on our backend are kept only as long as they are useful for improving the app. Because these records contain no identifiers, we are unable to link any of them to a specific person — which also means that if you ask us to delete “your” data, we genuinely cannot find it; there is nothing on our servers that identifies you.
Children
Cert to Table is intended for hospitality workers preparing for professional certification and is not directed at children under 13. We do not knowingly collect personal information from anyone, children included.
Security
Data in transit is encrypted over HTTPS. Our backend permits the app to insert feedback and events, and to read only the public promotions list — nothing about you is stored there to read back.
This website
What this site collects
spinachcreations.com is a static website. It sets no cookies, runs no analytics, and does not track you across other sites.
If you send a message through the contact form, we receive what you type into it — typically your name, email address, and message — and use it solely to reply to you. We do not add you to a mailing list and do not share it with anyone.
The site is hosted by Vercel, whose infrastructure keeps routine server logs that may include IP addresses, under its own policies.
Changes to this policy
If our data practices change, we will update this policy and revise the effective date above. Material changes affecting the app will be noted in its release notes.
Contact
Questions about this policy: spinachthecow@gmail.com
Spinach Creations, L.L.C. Spinach Creations, L.L.C., United Statesmdash; Maryland, United States