Legal
Privacy Policy
1. What we collect
- Account: your email address and first name.
- Learning data: the courses you build, the answers you give, your XP, streak and mastery — so the app can adapt and show your progress.
- Plan: which plan you're on, to enforce weekly allowances.
- Consent: the time you accepted these policies at sign-up.
2. Who processes your data
- Supabase — hosts our database and authentication (EU region). Your account and learning data live here.
- Stripe — handles payments if you buy a plan. We never see or store your card details.
- Google Gemini — generates courses from the topic you type. Only the topic text is sent — never your name, email or answers.
- PostHog and Sentry — product analytics and error monitoring, only if enabled, and configured to strip personal data (no emails, names, answers, or URLs with tokens).
3. What we don't do
We don't sell your data. We don't show third-party ads. We don't run social feeds or chat. There are no tracking cookies beyond what's needed to keep you signed in and remember your language choice.
4. Storage in your browser
Sparkbright stores a little data in your browser's local storage: your Supabase session (to keep you logged in) and your chosen interface language. Clearing your browser data removes these.
5. Retention and deletion
We keep your data while your account is open. Email [email protected] to delete your account and we will remove your account and learning data.
6. Your rights
You can ask to access, correct, export or delete your personal data, and withdraw consent, by emailing us. If you're in the UK/EU, you have these rights under UK GDPR / GDPR.
7. Children
Sparkbright is designed for all ages. If a child under the age of digital consent in your country uses it, a parent or guardian must create and manage the account.