SparkOS Privacy Policy

Effective: May 10, 2026

SparkOS is a kids' learning platform built around a simple promise: we collect the minimum data needed to give your child a great experience, and we never sell or share that data.

What we collect from parents

  • Email address (for sign-in and account recovery)
  • Hashed password (we never see the plaintext)
  • Optional: Google account ID if you sign in with Google
  • Subscription + billing identifiers from Stripe (never card numbers)
  • Audit log of sensitive account actions (sign-in, PIN changes, etc.)

What we collect about children

SparkOS is COPPA compliant. We collect only what is necessary to operate the service:

  • A display name (you choose this — it can be a nickname)
  • Avatar choice
  • Age (used to pick the right tier of content)
  • Anonymous in-app activity (which apps were opened, time spent, achievements)
  • Anonymous narrative continuity for stories (no diary)

We do not collect: real name, address, school, contact info, or any biometric data. We do not advertise to children.

How we use this data

  • To run the service (show your child the right apps for their age)
  • To moderate AI-generated content for safety
  • To send you (the parent) summaries and notifications you opted into
  • To keep the service secure (rate limits, fraud detection)

Data sharing

We do not sell or share your or your child's data with third parties for marketing. We use the following service providers strictly to operate the platform: Anthropic + OpenAI (AI generation, with strict moderation), Stripe (payments), Resend (email), Cloudflare (security).

Your rights (GDPR, CCPA, COPPA)

  • Export: download a complete copy of your account + child data
  • Delete a child: remove a child profile and scrub identifiers
  • Delete account: full erasure within 30 days
  • Withdraw consent: revoke COPPA consent at any time

Reach us at [email protected] for any of the above.

Retention

  • Activity history: 90 days (free), 365 days (paid)
  • Audit logs: 365 days
  • Soft-deleted records are hard-purged after 30 days

Updates

We will notify you via email + an in-app banner whenever this policy materially changes, and ask you to review and accept the new version.

Version 2026-05-10

Questions? [email protected]