Sparks App by Ali Dadashi ("Sparks", "we", "our", or "us") operates the Sparks mobile application. We take your privacy seriously. This document explains what data we collect, why we collect it, how we store it, and your rights.

1. Controller & Contact

Controller: Sparks App by Ali Dadashi, based in Estonia. For privacy inquiries or requests (including deletion, access, or portability), contact: [email protected].

2. Data we collect

We intentionally collect minimal personal data needed to run the App:

• Email address: stored to create and authenticate your account.
• Step count data: read from Apple Health only when you start and stop an activity within the App (step count, date, time).
• Gift usage data: records of gifts you accepted, activated, or completed (to maintain challenge state).

We do not collect name, gender, weight, height, or other personal profile attributes on our servers. Any such personal profile data entered by you remains stored locally on your device.

3. How we use your data

• Authenticate and manage your account.
• Measure and display activity progress for challenges.
• Track gift/challenge state and compute Sparks Points.
• Respond to support and privacy requests.

4. Health data (Apple Health)

Sparks uses Apple HealthKit to read step count data only. This data is used solely to calculate challenge progress and is not shared with third parties or used for marketing or profiling.

5. Storage & security

Account and gift-related data are hosted on Amazon Web Services (AWS) infrastructure within the European Union. We use industry-standard security (encryption in transit and at rest, secure password hashing) to protect your information.

6. Third parties

We rely on a small set of providers to operate the App (for example AWS for hosting and Resend for transactional email). These providers act as data processors under our instruction. We do not sell or rent personal data to third parties.

7. Data retention

We retain gift usage data and minimal account data for operational reasons (accurate reward tracking and dispute handling). When you request deletion of your account (see below), we will delete or anonymize personal data in accordance with applicable law and after any short retention period required for operational integrity.

8. Deletion & your rights

Under EU law you have the right to request access, correction, deletion, restriction, and portability of your personal data. To exercise any of these rights, please contact [email protected].

Account deletion (practical): You may request deletion of your account by emailing [email protected]. After verification we will remove or anonymize your account data within 30 days, subject to short retention necessary for operational reasons.

9. Children

Sparks is available for a general audience and is rated 4+ on the App Store. We intentionally collect only minimal data, limited to an email address, step count during activities, and gift usage data. We do not collect names, ages, gender, or any other personal profile information on our servers.

Because Sparks does not knowingly collect personal data that can identify a child, we do not knowingly process data from children under 13. If a parent or guardian believes that their child has provided an email address or other identifiable information, they may contact us, and we will delete the data promptly.

10. International use & governing law

Sparks is available globally. Data processing is governed by applicable European Union data protection law. By using the App you consent to transfer and processing of your information as described.

11. Changes

We may update this policy from time to time. Material changes will be posted in the App and on our website.