Privacy Policy

Last updated: August 7, 2026

1. Information We Collect

When you create an account, we collect:

  • Name and email address
  • Password (stored securely as a hash, never in plain text)
  • Confirmation that you are 18 or older

Accounts created on our website may also include a username, date of birth, and city and state. These legacy fields are retained for existing accounts only and are not collected in the app.

As you use the app, we also collect:

  • Quiz answers, study progress, and session history
  • Bookmarked questions and review history
  • Study rewards data (Watts earned, rank, streaks)
  • Your target exam date, if you tell us when your exam is

Subscription data — when you subscribe via Apple In-App Purchase we receive and store your subscription status, trial and renewal dates, and a purchase identifier. We never see your payment card details — payment is processed by Apple.

Device and diagnostic data — a random per-install device identifier (used to secure your sign-in session), your device timezone (used to schedule study reminders at the right local time), and device model, operating system version, app version, and crash logs, collected automatically to diagnose and fix problems. If you enable reminders, we also collect a push notification token and platform type to deliver them.

2. How We Use Your Information

We use your information to:

  • Create and manage your account
  • Track your study progress and personalize your experience
  • Sync your progress across your devices
  • Provide access to your subscription
  • Send email verification and password reset emails
  • Deliver study reminders and notifications you enable
  • Diagnose crashes and improve the app and study materials

If you join a friends leaderboard, your display name (or account name) and score are visible to the friends you've added.

3. Third-Party Services

We use the following third-party services to operate SparkyPass:

  • Apple — Sign in with Apple (we receive your name and email address) and payment processing for in-app purchases
  • Google — optional sign-in (we receive your name and email address)
  • RevenueCat — processes in-app subscription purchases and entitlement status on our behalf; receives your SparkyPass account ID, purchase and subscription history, and device identifiers
  • Expo — delivers app updates and push notifications (receives your push token and device platform if you enable reminders)
  • Sentry — crash reports and app performance diagnostics (device model, OS version, app version); these reports are not linked to your account identity. While our website remains available, it also records session replays to diagnose errors
  • Stripe — payment processing for subscriptions purchased on our website (legacy accounts only; the app uses Apple In-App Purchase)
  • Resend — for sending transactional emails (verification, password reset)
  • Turso — for secure database hosting
  • Vercel — for application hosting

We require every third-party service provider that processes your data on our behalf to provide the same or equal protection of your data as described in this policy.

We use first-party analytics to understand how features are used and to improve the platform. This data is stored in our own database and is never shared with third-party analytics or advertising services. We do not use any third-party analytics or advertising SDKs, and we do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Cookies and Authentication Tokens

The SparkyPass iOS app does not use cookies. It stores encrypted sign-in tokens in your device's secure Keychain to keep you signed in. Our website uses only essential cookies required to function:

  • Session cookie — keeps you logged in
  • CSRF token — protects against cross-site request forgery

We do not use any tracking cookies, advertising cookies, or third-party cookies.

5. Data Retention and Account Deletion

We retain your account data and study progress for as long as your account is active. You can delete your account at any time in the app under Settings → Delete account. Your account is deactivated immediately and permanently deleted after 30 days; signing back in within 30 days restores it. You may also request deletion by emailing us at the address below and we will process your request within 30 days.

Deleting your account does not cancel an Apple subscription — manage that in iOS Settings → your Apple Account → Subscriptions.

6. Children's Privacy

SparkyPass is intended for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from a user under 18, we will delete that information promptly.

7. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Delete your account and data (in-app or by request)

8. Security

We take reasonable measures to protect your information, including password hashing, encrypted connections (HTTPS), secure on-device token storage (iOS Keychain), and secure database access. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or an in-app notice. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

SparkyPass is operated by SparkyPass LLC, the data controller for the information described in this policy. If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at support@sparkypass.com.