Spark Privacy Policy
Spark is an app for couples. Its heart is a daily photo moment you share with your partner, surrounded by things like a private gallery, location sharing, anniversaries, a bucket list, date planning, and small games you play together.
Because Spark is built for two people who trust each other, we take the data you put into it seriously. This policy explains, in plain language, what we collect, why, who else touches it, what your partner can see, how long we keep it, and the rights you have. If anything here is unclear, please email us — the contact is in the first section.
1. Who we are
Spark is operated by Nikodem Zelenak as the controller of your personal data — an individual based in Slovakia, in the European Union, who runs Spark independently; there is no company behind it yet. Throughout this policy, "we" and "us" mean the operator.
You can reach us about anything in this policy, or to exercise any of your rights, at:
privacy@mysparks.app
Because we are established in Slovakia, our lead supervisory authority is the Slovak data protection authority, the Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic). You always have the right to contact them, or your own local authority, if you have a concern (see Section 7).
This policy covers the Spark mobile app and this website (www.mysparks.app).
2. What we collect
We collect only what Spark needs to work, plus a little that helps us improve it (and that only with your permission). Here is everything, grouped by what it is:
Your account. Your email address and password, or — if you choose to sign in that way — your identity from Sign in with Google or Sign in with Apple. This is how you log in.
Your profile. Your username, your birthday, an optional phone number, and an avatar image if you add one. When you pair with a partner, we also handle an invite code that links the two of you.
Your relationship details. Things you tell Spark about your relationship — such as important dates, shared goals, habits you're building together, and what you want to focus on. We also store the fact that you are paired with your partner and your time zone. Because information about your relationship can reveal or suggest intimate details about you, we treat it with extra care (see Section 3).
Your daily photo moments. When you capture a daily Spark, we store the photos (typically a front-camera and a back-camera image), any caption you add, and an optional location label you choose to attach.
Your location — including in the background — when Together Map sharing is on. If you turn on location sharing (Together Map), we collect your precise location so your partner can see where you are. When sharing is on, this can include location updates while the app is in the background. We keep only your latest point — each update overwrites the one before it, so there is no location history. Turning on Ghost Mode pauses sharing.
Anniversaries and milestones. The dates and milestones you add.
"Thinking of you" nudges and located hearts. When you tap "thinking of you," we record the nudge — who sent it and when — so your partner still sees it even if the push notification never arrives, and the time of your latest one can appear on their home-screen widget. Unless you're in Ghost Mode, the nudge also carries the precise location you sent it from, so a heart lands on your partner's Together Map at that spot for them to collect — this is location-attached content. (In Ghost Mode we don't attach your live position; the heart is pinned at your last shared location — the frozen spot your partner's map already shows — or arrives without a place if you've never shared one.) Unlike your live location, collected hearts leave a lasting "thought trail" and add up over time into a shared keepsake, so we keep them (see Section 6); collecting them earns the two of you a little XP.
Your bucket list. The items you add, along with any notes, photos, and addresses attached to them - and, if you schedule one, the date you plan to do it. If you tap "add to calendar," Spark writes that one event into your device calendar right on your phone. To do that it only looks up which of your calendars it can write to - it never reads your events, and nothing about your calendar is sent to us.
Date-planner inputs. When you use the date planner, we use your location and the preferences you enter to find date ideas nearby (this involves the processors named in Section 4).
Games — including Would You Rather answers. When you play the built-in minigames (Trivia, Draw Battle, Love Golf, Would You Rather, Battleship), we store your answers, moves, and scores. This includes your Would You Rather answers, which can be personal.
Private notes. Notes you write for yourself in the app (for example, Trivia notes) that are visible only to you.
Drawings. When you draw, we store the finished image and the stroke-by-stroke replay data (the sequence of strokes that lets a drawing play back).
In-app activity and rewards. As you use Spark you earn experience points (XP); we log the in-app actions that award them.
Push tokens. To send you notifications, we store the push token for your device (including the token used for live activities). Your partner's app can read your push token so it can notify you.
On your device. Some data lives on your phone rather than on our servers — for example your login session (kept in secure storage), a copy of your partner's details and last location so features and home-screen widgets work, and widget data shared with the operating system.
Device info and usage analytics — only with your consent. If, and only if, you opt in, we collect first-party analytics about how the app is used: which features you use and how often, session counts and length, which screens you visit, which notifications you tap, and where people drop off in sign-up and pairing — plus technical context like app version, operating system, device model, coarse country, and a random, app-generated identifier. Analytics answers "how many, how often, which feature, how long" — never the content of your photos, drawings, messages, notes, captions, answers, precise location, or your or your partner's identity. If you don't opt in, we collect no analytics.
3. Why we use your data (legal bases)
Under the GDPR we must have a lawful basis for using your data. Here is ours, by purpose:
- To provide Spark's core features — performance of our contract with you. Creating and running your account, pairing you with your partner, capturing and sharing daily moments, anniversaries, the bucket list, kisses, games, drawings, and notifications all rely on this basis. Without this data, the app cannot work.
- For things you switch on — your consent. Location sharing (Together Map) and usage analytics happen only if you choose them. You can withdraw any of these at any time (see Section 7); withdrawing does not affect processing that already happened.
- To keep Spark safe — our legitimate interests. We use limited data to secure the service, prevent abuse, and fix problems, balanced against your rights.
- To let your partner keep the memories you made together — our legitimate interests and the protection of their rights. If you delete your account, the shared photo memories the two of you made stay with your partner, because they are their memories too and deleting your account shouldn't erase theirs. We rely here on legitimate interests, including the protection of the rights of another person (GDPR Article 6(1)(f) and Recital 73). Your name and details are removed from those photos, and you can object — or ask us to remove specific photos or all of them from your partner's side — at any time (see Section 7).
Heightened care for relationship data. Information about your relationship, your Would You Rather answers, and the simple fact that you are paired with a partner can suggest intimate aspects of your life. We treat this information with particular care, keep it scoped to you and your partner, and do not use it for advertising or profiling.
4. Who else processes your data
We keep Spark lean, but a few trusted service providers ("processors") help us run it. They act on our instructions, and we share with them only what each one needs.
| Processor | What they do for Spark | What they receive |
|---|---|---|
| Supabase | Hosting, database, and file storage (our core backend) — region: United Kingdom (London) | The data described in Section 2 that lives on our servers |
| Sign in with Google; map tiles on Android | Sign-in identity if you use it; map view data when you use maps on Android | |
| Apple | Sign in with Apple; push notification delivery (APNs); map tiles on iOS | Sign-in identity if you use it; push tokens/notifications; map view data when you use maps on iOS |
| Expo | Delivery of push notifications | Push tokens and notification content routed to your device |
| Geoapify | Date-planner ideas and map images | The coordinates and search terms needed to find nearby places |
| Tripadvisor | Photos of suggested venues in the date planner | Only the coordinates of the venue being shown — no identity, and never your own location |
| Unsplash | A small number of decorative stock images shown in the app | Standard web-request data (such as your IP address) when the image loads |
When you tap an external link in Spark (for example, to a social media profile such as Instagram), that takes you to a third-party site governed by its own privacy policy; those sites are not processors for us.
We do not sell your data. We do not show ads. We use no advertising or tracking SDKs.
5. What your partner sees
Spark is a shared app, so honesty here matters. Once you are paired, your partner can see:
- Your profile and relationship details you add.
- Your daily photo moments and the gallery you build together.
- Your location, but only while you have location sharing (Together Map) turned on and Ghost Mode off.
- Your game activity — the games you play together, your answers, and scores.
- Notes and items you mark as shared with them.
Some profile details are visible to your partner through the app — keep that in mind when adding a phone number or birthday.
Unpairing. If you unpair, sharing between you stops and the couple-only data that existed just because you were together - such as games and your bucket list - is deleted.
When one of you deletes their account. When you delete your Spark account, we remove your profile, your logins, and your side of Spark. One thing we keep, on purpose: the photo memories you made together stay with your partner — because they're theirs too, and deleting your account shouldn't erase their memories. Your name and details come off them. Everything else tied just to the two of you - your games, XP, bucket list, anniversaries, and drawings - is deleted. Within 30 days you can undo (until then, access is locked). Want specific photos — or all of them — gone from your partner's side as well? Just email privacy@mysparks.app and we'll take care of it; we honor these requests, especially for sensitive photos. And if you have no partner, or you're the last one to leave, everything — including the shared photos — is deleted.
6. How long we keep it
We keep data only as long as we need it. Here is the plain version:
| Data | How long we keep it |
|---|---|
| Your account identity — profile, logins, and personal details | Deleted when you delete your account, after the 30-day undo window below |
| Shared photo memories — daily Spark photos, captions, and the couple gallery | Stay with your remaining partner (as their memories, with your name and details removed) until they delete them or delete their own account. If you have no partner or are the last to leave, they are deleted with everything else. You can ask us to remove specific photos, or all of them, at any time (privacy@mysparks.app) |
| Deletion undo window | 30 days after you delete your account, during which access is locked and you can still undo; after it, the deletion is permanent |
| Finished or abandoned minigames | Purged after roughly 12 hours (aggregate win counts are kept until you delete your account) |
| Raw analytics events | 13 months, after which they are retained only as pseudonymised, aggregated statistics (your identifiable analytics are deleted when you delete your account) |
| Soft-deleted bucket-list items | Hidden from you and your partner as soon as you delete them, and permanently removed shortly after (and in all cases when you delete your account) |
| Location | Only your latest point — each update overwrites the previous one |
| "Thinking of you" nudges and located hearts | Kept on purpose as a shared keepsake — they build up over time with no automatic cleanup, and are removed when you delete your account or the couple's shared data is deleted |
| Push tokens | Until you sign out or delete your account |
| Billing and subscription records | Kept for about 10 years, because tax and accounting law requires it — metadata only (who paid what, and when), never your photos or content |
| Fraud-prevention token | A minimal marker kept 6–12 months to stop a banned user from evading the ban — no photos or content |
| Backups | Age out on a fixed rotation; data you deleted is put beyond use in any backup that still holds it and is never restored |
| Anonymised aggregate statistics | May be kept indefinitely — but only in a form that carries no per-user or per-couple identifiers, so it can no longer be linked back to you |
7. Your rights
You are in control of your data. You can exercise all of these rights, and we will not charge you or treat you differently for doing so.
- Delete your account. You can delete your account in the app under Settings → Delete Account. This removes your account, profile, and logins, and deletes the couple content tied just to the two of you — with one exception: the shared photo memories you made together stay with your partner (as their memories, with your name removed), because deleting your account shouldn't erase theirs. If you have no partner, or you're the last one to leave, everything — including the photos — is deleted. You have 30 days to undo before the deletion becomes permanent. Want specific photos, or all of them, removed from your partner's side too? Email privacy@mysparks.app — we honor these objections, especially for sensitive content.
- Access, export, and correction. You can ask us for a copy of your data, ask us to export it, or ask us to correct it, by emailing privacy@mysparks.app. We will respond within one month. These are your rights under Articles 15, 16, and 20 of the GDPR (access, rectification, and portability).
- Withdraw consent. For anything based on consent — location sharing and analytics — you can withdraw it at any time using the relevant toggle in the app. This stops future processing without affecting what already happened.
- Complain to a regulator. You can lodge a complaint with the Slovak data protection authority (Úrad na ochranu osobných údajov Slovenskej republiky) or with the supervisory authority in your own country.
Everyone gets these rights, worldwide. We honor these same rights for all Spark users regardless of where you live, including users in California and elsewhere in the United States.
8. International transfers
Our servers are in the United Kingdom: the data described in Section 2 that lives on our backend is hosted by Supabase in London. Moving your data from the EU to the UK is fine because the European Commission has decided that the United Kingdom provides an adequate level of data protection — its adequacy decision for the United Kingdom — so your data is protected there to essentially the same standard as it is in the EU.
Some of the other providers in Section 4 are US companies — Apple, Google, Expo, Tripadvisor, and Unsplash — and may process some of your data in the United States. Where that happens, we rely on the safeguards recognized under the GDPR: the EU-U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (SCCs). Geoapify processes your data in Germany, within the EU.
You can contact us at privacy@mysparks.app for more information about any of these safeguards.
9. Security
We take reasonable steps to protect your data. Connections between the app and our servers are encrypted in transit (HTTPS/TLS), and access to your data is scoped so that, in the normal operation of the app, it is limited to you and your paired partner through per-couple access controls.
No app or online service can promise perfect security, and we do not. We are continuing to strengthen how your content is stored and protected, and we will update this policy as we do. If we ever become aware of a data breach that affects you, we will act on our legal obligations to notify the relevant authority and, where required, you.
10. Children
Spark is for people aged 16 and over. It is not intended for children under 16, and we do not knowingly collect data from them. If we learn that an account belongs to someone under 16, we will delete that account and its data.
11. Changes to this policy
This policy is version 1.0, effective 29 July 2026.
If we make material changes — for example, collecting something new or using a new processor — we will announce the change in the app before it takes effect, and update the effective date above. Your continued use of Spark after a change means you accept the updated policy.