← GhostLab home · Support

GhostLab Privacy Policy

Effective date: November 12, 2026 · Applies to “GhostLab: Paranormal Toolkit” on iOS and Android (formerly SpectralEVP)

GhostLab is built to be private by design. There are no user accounts, no advertising, and no servers of our own. Your investigation recordings, videos, notes, and settings are stored only on your device unless you choose to export or share them. Two things leave your phone on their own: a purchase-attribution signal that credits the creator who referred a sale, described under Affiliate attribution, and usage statistics that show us which tools people use, described under Usage statistics.

Summary

Data the app uses on your device

GhostLab asks your phone for permission to use the following, strictly to power the features described. All of this processing happens on your own device:

You can decline or revoke any permission in your device settings; the related feature simply won’t function.

Shared tags

On the Haunts map you can tag a spot and send it to a friend. Sharing makes a link that holds the spot’s exact location, what you found there, the name and note you gave it, your name, and when you made it. The link is signed with a key kept on your phone, so the receiver’s app can tell it hasn’t been changed. GhostLab has no server for tags. The link travels only in the message you send, and we never receive it. Anyone you send it to, and anyone they forward it to, can see what it holds.

Opening a link shows a page on ghostlab.icu. The tag sits in the part of the link after the “#”, which your browser reads on your phone and never sends to our website. The page loads no map on its own. If you tap “Show the map here,” the map comes from OpenStreetMap, which then receives the area being shown; see the OpenStreetMap privacy policy. The Apple Maps and Google Maps buttons hand the location to those apps.

A tag a friend sends you is saved on your device. It leaves your map after 7 days unless the sender chose to let you keep it, and you can remove any tag yourself. If you report a tag, your email app opens a message to GhostLab support that contains the tag link. We use it only to look into the report and delete it once that is done.

Purchases

The optional GhostLab Pro lifetime unlock is processed entirely by Apple through the App Store or by Google through Google Play. We never see or store your name, payment details, or billing information. Your entitlement is verified on-device through Apple’s StoreKit or Google Play Billing.

Affiliate attribution

Creators who recommend GhostLab earn a share of the sales they bring in. To work out which creator referred a purchase, GhostLab includes the GoMarketMe affiliate SDK. On first launch and again when a Pro purchase completes, it sends the following to GoMarketMe:

GhostLab does not use the Apple advertising identifier or the Android advertising ID, and it never asks for permission to track you across other companies’ apps and websites. This information is used to credit an affiliate and to report sales totals. It is not used to show you advertising, it is not combined with data from other apps, and it is never sold. GoMarketMe processes it on our behalf under their privacy policy.

Usage statistics

GhostLab: Paranormal Toolkit uses Google Analytics for Firebase on iPhone, iPad, and Android to count how the app is used, so we can see which tools people use and where they get stuck. It records:

It never records your recordings, video, photos, or transcripts, anything you type or say, session names and notes, the names you say aloud to Spirit Speak, what your tags contain, or your GPS location. GhostLab does not collect the advertising identifier on any device. On Android the permission is removed from the app and collection is switched off. The iPhone and iPad app does not include Apple’s advertising framework and never asks to track you.

In the European Economic Area, the United Kingdom, and Switzerland, the app sends no usage statistics. They start switched off every time the app opens and turn on only when nothing on the device points to one of those countries: on iPhone and iPad its App Store country and its language and region settings, and on Android its Google Play country, its SIM card, its mobile network, and its language settings.

Google processes this information for us as a service provider. We have turned off Google’s options to use it for its own products or for advertising, and we do not link it to Google Ads. The recorded actions are kept for 2 months, and the identifier until 2 months after you last use the app. Then Google deletes them automatically.

Data sharing

We do not sell or rent personal data to anyone. Two services receive information from the app: GoMarketMe receives the affiliate attribution described above so creators can be paid, and Google receives the usage statistics described above and processes them for us. Apple and Google handle your payment and tell us only whether you own Pro.

Everything else leaves your device only through actions you take yourself: exporting a session package, generating and sharing a PDF report, saving a video to Photos, sending a tag link to a friend, reporting a tag to us, or sharing session tags with nearby teammates in Team mode.

Data retention and deletion

All sessions, recordings, and settings live in the app’s storage on your device. Delete any session from the Library, or delete the app to remove everything at once. We hold no copies of any of it.

Tags you make and tags friends send you are kept on your device the same way. Deleting one of your tags removes it from your phone. Copies already sent to friends stay on their phones until they expire or the friend removes them, because a link that has been sent can’t be called back.

The affiliate attribution records held by GoMarketMe are kept while they are needed to calculate creator payouts and to meet tax and accounting obligations. You can ask us to delete them at any time. See Data deletion requests for how to do that.

The recorded usage statistics are deleted automatically after 2 months, and the identifier 2 months after you last use the app. Deleting the app (or, on Android, clearing its storage) removes the identifier from your device.

Children

GhostLab is rated 9+ for infrequent horror/fear themes and is not directed at children under 13. We do not knowingly collect personal information from children.

Changes to this policy

If a future update ever changes how data is handled, we will update this page and note it in the App Store and Google Play release notes before the change takes effect.

Contact

Questions about privacy in GhostLab: [email protected]