Effective date: October 15, 2026 · Applies to “GhostLab: Paranormal Toolkit” on iOS and Android (formerly SpectralEVP)
GhostLab is built to be private by design. There are no user accounts, no advertising, and no servers of our own. Your investigation recordings, videos, notes, and settings are stored only on your device unless you choose to export or share them. The one piece of information that leaves your phone on its own is a purchase-attribution signal that credits the creator who referred a sale, described under Affiliate attribution below.
GhostLab asks your phone for permission to use the following, strictly to power the features described. All of this processing happens on your own device:
You can decline or revoke any permission in your device settings; the related feature simply won’t function.
On the Haunts map you can tag a spot and send it to a friend. Sharing makes a link that holds the spot’s exact location, what you found there, the name and note you gave it, your name, and when you made it. The link is signed with a key kept on your phone, so the receiver’s app can tell it hasn’t been changed. GhostLab has no server for tags. The link travels only in the message you send, and we never receive it. Anyone you send it to, and anyone they forward it to, can see what it holds.
Opening a link shows a page on ghostlab.icu. The tag sits in the part of the link after the “#”, which your browser reads on your phone and never sends to our website. The page loads no map on its own. If you tap “Show the map here,” the map comes from OpenStreetMap, which then receives the area being shown; see the OpenStreetMap privacy policy. The Apple Maps and Google Maps buttons hand the location to those apps.
A tag a friend sends you is saved on your device. It leaves your map after 7 days unless the sender chose to let you keep it, and you can remove any tag yourself. If you report a tag, your email app opens a message to GhostLab support that contains the tag link. We use it only to look into the report and delete it once that is done.
The optional GhostLab Pro lifetime unlock is processed entirely by Apple through the App Store or by Google through Google Play. We never see or store your name, payment details, or billing information. Your entitlement is verified on-device through Apple’s StoreKit or Google Play Billing.
Creators who recommend GhostLab earn a share of the sales they bring in. To work out which creator referred a purchase, GhostLab includes the GoMarketMe affiliate SDK. On first launch and again when a Pro purchase completes, it sends the following to GoMarketMe:
GhostLab does not use the Apple advertising identifier or the Android advertising ID, and it never asks for permission to track you across other companies’ apps and websites. This information is used to credit an affiliate and to report sales totals. It is not used to show you advertising, it is not combined with data from other apps, and it is never sold. GoMarketMe processes it on our behalf under their privacy policy.
We do not sell or rent personal data to anyone. The only information shared with a third party is the affiliate attribution described above, which goes to GoMarketMe so creators can be paid. Apple and Google handle your payment and tell us only whether you own Pro.
Everything else leaves your device only through actions you take yourself: exporting a session package, generating and sharing a PDF report, saving a video to Photos, sending a tag link to a friend, reporting a tag to us, or sharing session tags with nearby teammates in Team mode.
All sessions, recordings, and settings live in the app’s storage on your device. Delete any session from the Library, or delete the app to remove everything at once. We hold no copies of any of it.
Tags you make and tags friends send you are kept on your device the same way. Deleting one of your tags removes it from your phone. Copies already sent to friends stay on their phones until they expire or the friend removes them, because a link that has been sent can’t be called back.
The affiliate attribution records held by GoMarketMe are kept while they are needed to calculate creator payouts and to meet tax and accounting obligations. You can ask us to delete them at any time. See Data deletion requests for how to do that.
GhostLab is rated 9+ for infrequent horror/fear themes and is not directed at children under 13. We do not knowingly collect personal information from anyone, including children.
If a future update ever changes how data is handled, we will update this page and note it in the App Store and Google Play release notes before the change takes effect.
Questions about privacy in GhostLab: [email protected]