Sparkzy

Privacy Policy

Effective July 17, 2026

Sparkzy ("we," "us," "our") is a mobile learning app that turns bite-sized facts and quizzes into a daily habit. This Privacy Policy explains what data we collect, why we collect it, who we share it with, and the choices you have. By creating an account or using the app, you agree to this policy.

1. Who we are

Sparkzy is operated by LoqzCorp. You can reach us at loqzcorp@gmail.com.

2. Information we collect

2.1 Account information

When you sign up, we collect:

2.2 Profile and learning activity

As you use Sparkzy, we record activity to power your progress, streaks, leaderboards, badges, and the social features you opt into:

2.3 Device and technical information

2.4 Subscription information (Sparkzy Pro)

If you subscribe to Sparkzy Pro, we receive information about your subscription from Apple (App Store) or Google (Play Store) via our billing partner, RevenueCat. This includes:

We do not see or store your credit card, debit card, or bank-account number. Payment is processed entirely by Apple or Google. We only receive entitlement status — whether your Pro subscription is active and when it expires.

2.5 Information we do not collect

3. How we use your information

We use the data above for the following purposes:

4. Legal bases (EEA, UK, Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data under one or more of the following legal bases:

5. Who we share data with

We do not sell your personal data. We share specific data with the following service providers ("sub-processors"), only as needed to run Sparkzy:

Service What they receive Why
Supabase All account data and learning activity; basic request metadata (IP, user agent) when your device fetches fact-card background images Database, authentication, and storage hosting (including the public bucket that serves fact-card backgrounds)
Vercel Basic request metadata (IP, user agent) when your device opens this Privacy Policy, the Terms, or the Support pages Hosts our public web pages (privacy / terms / support). Vercel does not receive any in-app data.
Apple Sign-in token, push notification payloads (iOS), purchase data Sign in with Apple, APNs push delivery, App Store billing
Google Sign-in token, push notification payloads (Android), purchase data Google Sign-In, FCM push delivery, Play Store billing
RevenueCat Subscription receipts and entitlement status Validate purchases, manage subscription lifecycle
Expo Anonymous push token and the notification payload Routing push notifications to APNs / FCM

We may also disclose data if required by law, to enforce our Terms of Service, or to protect the rights, property, or safety of Sparkzy, our users, or the public.

6. Data retention

We retain your data while your account is active. If you delete your account from inside the app (Profile → Delete Account), we permanently delete your authentication record and your profile row. Because our database uses cascading deletes, this also removes your comments, likes, saved facts, friend records, badges, quiz attempts, notifications, push tokens, subscription records, and streak freezes.

Backups may retain a copy of your data for up to 30 days after deletion, after which they are overwritten.

Aggregated, non-identifying analytics (for example, "how many users completed a Risky quiz this week") may be retained indefinitely.

7. Your rights

Depending on where you live, you may have the right to:

The fastest way to delete your data is to use Profile → Delete Account inside the app. For any other request, email loqzcorp@gmail.com with the email address linked to your account.

8. Children's privacy

Sparkzy is intended for users 13 years of age and older (16 in regions where local law requires a higher minimum age for online services). We do not knowingly collect personal data from children under that age. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Security

We protect your data with industry-standard safeguards including TLS encryption in transit, row-level security on our database so users can only access their own records, and authentication tokens with limited lifetimes. No system is perfectly secure, but we take reasonable measures and review them regularly.

10. International transfers

Sparkzy and its sub-processors operate in the United States and other countries. If you access the service from outside these regions, your data will be transferred to and processed in countries that may have different data-protection laws than your home country. Where required, we rely on standard contractual clauses or other approved mechanisms to safeguard international transfers.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make a material change, we will update the "Effective" date above and, where appropriate, notify you in-app or by email. Continued use of Sparkzy after a change means you accept the updated policy.

12. Contact

Questions about this policy, or any privacy request, can be sent to loqzcorp@gmail.com.