Spark Privacy Policy

Effective Date: January 1, 2025

Last Updated: January 1, 2025

Spark ("we," "us," or "our") operates the Spark mobile application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

1.1 Information You Provide Directly

• Account information: Name, email address, password
• Partner information: Your partner's name and email when you link accounts
• Preferences: Cuisine preferences, date vibes, dietary restrictions, location radius
• Family information: Whether you have children and their approximate ages (used only for childcare matching)
• Payment information: Processed and stored by Stripe; we never store card numbers
• Profile content: Photos you choose to upload, date memories and ratings you create
• Communications: Messages you send to the Spark AI agent

1.2 Information Collected Automatically

• Location: Approximate location (city/zip) when you search for date spots. We do not continuously track your location or store GPS coordinates.
• Device information: Device type, operating system, and app version for technical support
• Usage data: Features used, screens viewed, session duration (anonymized)
• Push notification tokens: To send booking confirmations and reminders

1.3 Information from Third Parties

• Google: Calendar availability (only when you explicitly connect Google Calendar)
• Booking platforms: Confirmation details from OpenTable and Resy after a booking
• Apple: Basic profile information when you use Sign in with Apple

2. How We Use Your Information

We use your information to:

• Plan and book date nights through our AI agent
• Process restaurant and experience reservations
• Match you with childcare providers (ages/availability only — no children's names or identifiers)
• Send booking confirmations, reminders, and date-night follow-ups via SMS and email
• Add date nights to your calendar (with your explicit permission)
• Personalize AI recommendations based on your preferences and date history
• Process subscription payments and manage your account
• Provide customer support
• Improve our Service (using anonymized, aggregated data)

We do not sell your personal information to anyone, ever.

3. How We Share Your Information

3.1 Service Providers

We share limited information with trusted service providers who help us deliver the Service:

| Provider | Purpose | Data Shared |

|---|---|---|

| Anthropic | AI agent responses | Your messages to Spark |

| OpenTable | Restaurant bookings | Name, email, phone, party size |

| Resy | Restaurant bookings | Party size, date, time |

| Stripe | Payment processing | Email, payment method |

| Twilio | SMS confirmations | Phone number, booking details |

| Resend | Email confirmations | Email, date itinerary |

| SitterCity | Childcare matching | Location, date, time, children's ages (no names) |

| Care.com | Childcare backup | Location, date, time, children's ages (no names) |

| Google | Calendar sync | Event title, date, time (only with your permission) |

| Supabase | Data storage | All account data (encrypted at rest) |

| Sentry | Crash reporting | Anonymized error logs |

3.2 Legal Requirements

We may disclose your information if required by law, court order, or to protect the rights and safety of Spark, our users, or the public.

3.3 Business Transfers

If Spark is acquired or merges with another company, your information may be transferred. We will notify you before this happens.

4. Data Retention

• Account data: Retained while your account is active
• Date history: Retained indefinitely unless you delete it or your account
• Payment records: 7 years (legal requirement)
• AI conversation logs: 90 days, then anonymized
• Location data: Never permanently stored; used in real time only

5. Your Rights

5.1 All Users

• Access: Request a copy of your data at [email protected]
• Deletion: Delete your account in the app (Profile → Delete Account) or email us
• Correction: Update your information at any time in the app
• Portability: Request your data in a machine-readable format

5.2 European Union / UK Users (GDPR)

You have additional rights including:

• Right to restrict processing
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with your local supervisory authority

Our legal basis for processing: Contract performance (account, bookings), Legitimate interests (security, fraud prevention), Consent (analytics, marketing communications)

To exercise GDPR rights: [email protected] | Response within 30 days

5.3 California Residents (CCPA)

California residents have the right to know what personal information is collected, to delete it, and to opt out of its sale. We do not sell personal information.

To submit a CCPA request: [email protected]

6. Children's Privacy (COPPA)

Spark is not directed at children under 13. We do not knowingly collect personal information from children under 13.

Our childcare matching feature collects children's approximate ages to find suitable sitters. We do not collect children's names, photos, school information, or any other personally identifiable information about children. All childcare-related data is shared only with the sitter platforms (SitterCity, Care.com) and is used only for matching and booking purposes.

If you believe we have inadvertently collected information about a child under 13, please contact [email protected] immediately.

7. Security

We implement industry-standard security measures:

• All data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Authentication via Supabase with bcrypt password hashing
• Payment data handled exclusively by Stripe (PCI DSS Level 1)
• Regular security reviews
• Access to production data limited to essential personnel only

No method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites.

9. Changes to This Policy

We will notify you of material changes via email and in-app notification at least 30 days before the change takes effect. Continued use of the Service after changes constitutes acceptance.

10. Contact Us

Spark

Email: [email protected]

Support: [email protected]

Website: https://sparkchord.com

For data protection inquiries in the EU: [email protected]