Privacy Policy

Last updated: 29 September 2026

This policy explains what information the Spark app collects, how it is used, who it is shared with, and the choices you have.

1. Who we are

Spark is operated by Nandita Varshney, an independent developer (“Spark”, “we”, “us”). You can contact us at sparkdeveloper040@gmail.com.

2. What this policy covers

This policy covers the Spark mobile app and these web pages. Spark lets adults practise conversations with fictional AI characters.

3. Information we collect

Account information

You sign in to Spark with your Google account. When you do, Google shares basic account information with us, which our authentication provider (Supabase) stores:

• your email address;
• your name and profile picture link, as provided by Google;
• an identifier for your Google account;
• a Spark user ID that we create for your account, and sign-in timestamps.

We use your first name from Google only to suggest a display name during setup, which you can change before saving.

Profile and setup information

After you sign in, Spark asks for a display name and three setup questions. We store:

• your display name;
• your answers, chosen from fixed lists: what you want to get better at, what you find hardest, and how you want to practise;
• when you completed setup.

Conversations

When you talk to a character, we store:

• the messages you send and the replies the AI character generates;
• conversation details such as when it started and ended and the character’s current conversational state (for example, how interested the character is shown to be);
• technical records of each AI request, including the conversation context that was sent and the response that came back. We use these records to operate, debug and improve the quality and safety of replies.

Spark shows a summary on your “You” screen that is calculated from your stored conversations. When you ask for help during a conversation, the suggestions are generated for you on the spot and are not stored.

Usage analytics

We use PostHog to understand how the app is used, for example how many people finish onboarding or start a first conversation. We send:

• events describing actions in the app, such as the app being opened, onboarding screens viewed, sign-in started, completed or failed (with a general error category), setup completed, and a conversation started, resumed or ended;
• limited details about those actions, such as which onboarding screen was viewed, which character a conversation was with, or how many messages a conversation had;
• your Spark user ID, after you sign in, so that events from the same account can be connected;
• device and app information that the analytics tool collects automatically, such as operating system and version, device model, app version, language and time zone;
• your IP address, which the analytics provider uses to estimate an approximate location (for example, country or city).

We do not send message text, AI replies, your name, your email address or your setup answers to our analytics provider. We do not use session recording.

Information stored on your device

The app keeps your sign-in session in your device’s secure storage (Keychain on iOS, Keystore on Android) so you stay signed in, and stores a small note that you have completed setup.

What we do not collect

Spark does not access your contacts, photos, microphone, camera or precise location, and does not process payments.

4. How we use information

• to create and run your account and sign you in;
• to generate AI character replies and help suggestions;
• to show your conversations and your progress in the app;
• to keep the service working, investigate problems and improve the quality and safety of AI replies;
• to understand how the app is used, in aggregate, so we can improve it;
• to respond to you when you contact us.

We do not sell your personal information and we do not show advertising.

5. AI processing

Spark’s characters are fictional. Their replies are generated by an AI model provided by OpenAI.

To generate a reply or a help suggestion, we send OpenAI the relevant part of your conversation (your messages and the character’s previous replies), information describing the fictional character, and, in some replies, your display name. We send this to OpenAI through its API with the option to store responses switched off. OpenAI processes this information under its own API terms and policies.

We do not use your conversations to train AI models.

6. Service providers we share information with

We share information only with the service providers that run Spark, and only for the purposes described in this policy:

• Supabase: sign-in, database and backend functions. Stores your account, profile and conversation data.
• Google: Google Sign-In.
• OpenAI: generates AI character replies and help suggestions.
• PostHog: usage analytics, as described above.
• Vercel: hosts these web pages. These pages do not use analytics or tracking.

We may also disclose information if required by law or to protect the rights, safety or property of our users or others.

7. How long we keep information

We keep your account-related Spark information (your account, profile and conversations) until your account is deleted, subject to any retention required by law. Conversations do not currently expire automatically after a set period.

When your account is deleted, your account, profile, setup answers, conversations, messages and the related AI request records are deleted from our database, and we delete the analytics data associated with your account. See Delete your account for details.

8. Deleting your account

You can ask us to delete your account and associated data at any time by emailing sparkdeveloper040@gmail.com. Deletion requests are handled manually, within 30 days of receiving a valid request. See Delete your account.

9. Security

We use reasonable measures to protect your information. These include encrypted connections, database access rules that limit each account to its own data, and secure storage of your sign-in session on your device. No system is completely secure, so we cannot guarantee the security of information.

10. Your choices

• You can ask us for a copy of your information, to correct it (for example, your display name), or to delete it by contacting us at sparkdeveloper040@gmail.com.
• We will respond to reasonable requests, subject to applicable law and reasonable verification of your identity.

11. Age requirement

Spark is for adults aged 18 and older. It is not intended for anyone under 18. Spark does not currently verify users’ ages. If we become aware that someone under 18 has registered for or is using Spark, we will remove their account.

12. International processing

Our service providers may process information in countries other than the one where you live. These countries may have different data protection laws.

13. Changes to this policy

We may update this policy. When we do, we will change the “Last updated” date above, and, for significant changes, let you know in the app or by other appropriate means.

14. Contact

Questions about this policy or your information: sparkdeveloper040@gmail.com.