Sparks App by Ali Dadashi ("Sparks", "we", "our", or "us") operates the Sparks mobile application. We take your privacy seriously. This document explains what data we collect, why we collect it, how we store it, and your rights.

1. Controller & Contact

Controller: Sparks App by Ali Dadashi, based in Estonia. For privacy inquiries or requests (including deletion, access, or portability), contact: [email protected].

2. Data we collect

We intentionally collect minimal personal data needed to run the App:

• Email address: stored to create and authenticate your account and to send essential service-related communications, such as security notices, required app updates, account-related messages, and notices about material changes affecting your use of the App.
• Step count data: read from Apple Health only when you start and stop an activity within the App (step count, date, time).
• Gift usage data: records of gifts you accepted, activated, or completed (to maintain challenge state).

We do not collect name, gender, weight, height, or other personal profile attributes on our servers. Any such personal profile data entered by you remains stored locally on your device.

3. How we use your data

• Authenticate and manage your account.
• Measure and display activity progress for challenges.
• Track gift/challenge state and compute Sparks Points.
• Respond to support and privacy requests.
• Send essential service communications, including account notices, security notices, required app updates, and information about material changes affecting your ability to use the App.

4. Legal bases for processing

Where the General Data Protection Regulation (GDPR) applies, we process personal data only when we have a valid legal basis. Depending on the processing activity, this may include processing necessary to provide the App and perform our agreement with you, compliance with a legal obligation, or our legitimate interests in operating, securing, and improving the App, provided those interests are not overridden by your rights and interests.

Essential service communications are operational messages related to your account or use of the App. These may include security notices, required app updates, and other information necessary for continued use of App features. We do not use your email address for promotional or direct marketing communications unless we have an appropriate legal basis to do so.

5. Health data (Apple Health)

Sparks uses Apple HealthKit to read step count data only. This data is used solely to calculate challenge progress and is not shared with third parties or used for marketing or profiling.

6. Storage & security

Account and gift-related data are hosted on Amazon Web Services (AWS) infrastructure within the European Union. We use industry-standard security (encryption in transit and at rest, secure password hashing) to protect your information.

7. Third parties

We rely on a small set of providers to operate the App (for example AWS for hosting and Resend for transactional email). These providers act as data processors under our instruction. We do not sell or rent personal data to third parties.

8. Data retention

We retain gift usage data and minimal account data for operational reasons (accurate reward tracking and dispute handling). When you request deletion of your account (see below), we will delete or anonymize personal data in accordance with applicable law and after any short retention period required for operational integrity.

9. Deletion & your rights

Under EU law you have the right to request access, correction, deletion, restriction, and portability of your personal data. To exercise any of these rights, please contact [email protected].

Account deletion (practical): You may request deletion of your account by emailing [email protected]. After verification we will remove or anonymize your account data within 30 days, subject to short retention necessary for operational reasons.

10. Children

Sparks is available for a general audience and is rated 4+ on the App Store. We intentionally collect only minimal data, limited to an email address, step count during activities, and gift usage data. We do not collect names, ages, gender, or any other personal profile information on our servers.

Because Sparks does not knowingly collect personal data that can identify a child, we do not knowingly process data from children under 13. If a parent or guardian believes that their child has provided an email address or other identifiable information, they may contact us, and we will delete the data promptly.

11. International use & governing law

Sparks is available globally. Data processing is governed by applicable European Union data protection law. Where personal data is transferred outside the European Economic Area, we use an applicable lawful transfer mechanism and safeguards as required by data protection law. Our processing of personal data is based on the legal bases described in this Privacy Policy and is not treated as consent merely because you use the App.

12. Changes

We may update this policy from time to time. Material changes will be posted in the App and on our website.