Privacy Policy
Last updated: August 21, 2026
This Privacy Policy explains how Spark of Light LLC, a Delaware limited liability company ("Spark of Light", "SOL", "we", "us", or "our"), collects, uses, shares, and protects information when you use the SOL mobile application (iOS & Android, bundle identifier com.sparkofsouls.sol) and related services available at sparkoflight.ai (together, the "Service").
1. Who We Are
Spark of Light LLC is the data controller for personal data processed in connection with the SOL Service. Contact us at privacy@sparkofsouls.com for any privacy-related questions or requests.
2. Information We Collect
We collect the following categories of information about you:
- Account information: email address, a securely hashed password, and a display name you choose.
- Wellness preferences: the goals you select, your focus areas (e.g., mind, body, soul), your preferred language, and whether you have memory features enabled.
- Conversations: the text messages you exchange with our AI mentors and voice recordings you choose to submit through the app.
- Optional biometrics (WHOOP): if you connect a WHOOP account, we receive recovery, strain, sleep, and heart-rate variability (HRV) metrics so your mentor sessions can take your physiology into account.
- Subscription information: your subscription state, expiration date, and customer identifier from RevenueCat (we do not see or store your payment card details — those are handled by Apple, Google, and their payment processors).
- Device and usage data: push notification tokens, app version, the language detected from your voice (used passively to localize your experience), and analytics events.
- Notification history: a record of the push notifications we have sent you (title, body, timestamp) so we can audit and improve our notification quality.
3. How We Use Your Information
- To personalize your conversations with our AI mentors.
- To integrate your biometric data into your sessions, when you choose to connect WHOOP.
- To send you relevant push notifications and reminders.
- To manage your subscription, including processing renewals and providing pro features.
- To operate, secure, debug, and improve the Service.
- To comply with legal obligations.
4. Third-Party Processors
To deliver the Service we rely on the following service providers. Each receives only the data necessary for their function, under contractual data-processing terms.
- AWS (European Union) — hosting, and the large-language-model processing that powers mentor conversations, using models provided by Anthropic. Conversation memory is stored here.
- Microsoft Azure (European Union) — voice transcription, and the processing that lets the Service recall earlier conversations.
- ElevenLabs (United States) — text-to-speech for our mentor voices.
- RevenueCat (United States) — subscription management and receipt validation.
- PostHog (European Union) — product analytics.
- WHOOP (United States) — only if you choose to connect your WHOOP account; we receive recovery, strain, sleep, and HRV.
- Apple Push Notification Service and Google Firebase Cloud Messaging — delivery of push notifications.
5. Permissions the App Requests
The SOL app requests the following device permissions, and only when needed:
- Microphone — to record voice messages for your mentor sessions.
- Notifications — to send you the reminders and event updates you have asked for.
- Background audio playback — to allow audio responses to continue playing when you switch away from the app.
The app does not request access to your camera, photo library, contacts, location, calendar, or health/fitness data on your device.
6. Data Residency & International Transfers
Spark of Light LLC is incorporated in Delaware, USA. Our primary application and data-processing infrastructure is located in the European Union. Certain sub-processors listed above (for example, RevenueCat, ElevenLabs, WHOOP) are based in the United States and may process limited personal data there.
Where personal data is transferred outside the European Economic Area or the United Kingdom, we rely on Standard Contractual Clauses or another lawful transfer mechanism to protect your data.
7. Age Restriction & Minors' Privacy
The SOL Service is intended for users 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected personal data from a person under 18, we will delete that data promptly. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@sparkofsouls.com.
8. Your Rights
Depending on where you live (for example, the European Economic Area, the United Kingdom, California, or other jurisdictions with comparable privacy laws), you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete personal data.
- Delete your personal data (see the next section).
- Receive a portable copy of your data.
- Object to or restrict certain processing, including analytics.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email privacy@sparkofsouls.com.
9. Data Deletion
You can delete your SOL account directly in the app: open SOL → Settings → Delete Account. Your account and the personal data associated with it are hard-deleted from our primary database immediately; downstream cleanup (backups, derived caches, biometric snapshots, and notification history) completes within 7 days.
If you cannot access the app, you can also email privacy@sparkofsouls.com with the subject line "Account Deletion Request" from the email address on your account, and we will action the request within the same 7-day window and confirm completion by email.
10. Retention
We retain your account data for as long as your account is active. Optional biometric snapshots are retained while your WHOOP account is connected. Conversation history is retained until you disable memory features or delete your account, whichever comes first. We may retain certain records (for example, transaction receipts) for longer when we are required to by law.
11. Security
We use industry-standard technical and organizational measures to protect your data, including transport-layer encryption (TLS) for data in transit, hashed passwords, and credentials held in a managed secret store. No system is perfectly secure; we encourage you to use a strong, unique password and to contact us at privacy@sparkofsouls.com if you suspect any unauthorized activity on your account.
12. Cookies & Analytics on Our Website
Our website (sparkoflight.ai) uses PostHog (European Union) to measure aggregate usage: page views, which buttons are pressed, and whether a sign-up succeeded. It sets no advertising cookies and we do not sell or share this data. You can opt out with a browser-level tracking blocker, or by emailing us to request your data be excluded.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of the page. For material changes, we will provide additional notice (for example, in-app or by email). Continued use of the Service after a change indicates your acceptance of the updated policy.
14. Contact Us
If you have questions, concerns, or requests about this Privacy Policy or your personal data, contact us at:
Spark of Light LLC
Delaware, USA
Email: privacy@sparkofsouls.com