SparkStash

Legal

Privacy Policy

Last updated: June 2026

Overview

SparkStash is built to help musicians capture and organise their creative ideas. We take your privacy seriously. This policy explains what information we collect, how we use it, and what choices you have.

The short version: your creative content belongs to you. Guest users store everything locally on their device only. Signed-in users can optionally sync their content to secure cloud storage and share projects with collaborators. We collect your email address when you create an account, and we process subscription purchases through Apple and RevenueCat. Some optional features — audio transcription and AI photo summaries — send the relevant recording or image to OpenAI to generate the result.

Information we collect

Account information

If you create a SparkStash account, we collect your email address and a securely hashed password. You can also choose to Sign in with Apple; if you do, Apple authenticates you and may share a private relay email address instead of your real one, which is your choice. This information is used to authenticate you, enable cloud sync across devices, and manage your subscription. We use Supabase to store account credentials and your subscription tier. You can delete your account at any time from within the app or by emailing us.

App data

Guest users: All ideas, lyrics, recordings, projects and notes are stored exclusively on your device. This data is never transmitted to our servers and we cannot access or recover it.

Signed-in users: Your creative content is synced to secure cloud storage (Supabase) so you can access it across devices and benefit from cloud backup. This data is encrypted in transit and at rest. We do not use your creative content for any purpose other than providing the service to you.

Shared projects: If you invite someone to collaborate on a project, the content within that project is shared with those collaborators in real time so you can work together. Only people you invite can access a shared project. Anything you keep outside a shared project remains private to you.

AI transcription and photo summaries

SparkStash offers optional AI features. When you transcribe a voice or video recording, the audio is sent to OpenAI (Whisper) to produce a text transcript. When an AI photo summary is generated, the image is sent to OpenAI (GPT-4o mini vision) to produce a short description. These requests are made only to generate the result you asked for; the resulting transcript or summary is stored with your capture. OpenAI processes this data as our service provider and, under its API terms, does not use it to train its models. You can use SparkStash without these features.

Subscription and purchase data

If you subscribe to SparkStash Premium, your purchase is processed by Apple through the App Store. We use RevenueCat to manage subscription entitlements. RevenueCat receives a pseudonymous user identifier and subscription status — no payment card details. We store only your current subscription tier (free or premium) in your account profile.

Analytics

We use PostHog to collect analytics within the SparkStash app. This includes feature usage events such as creating a capture, starting a project, and viewing the upgrade page. We use this data solely to understand how the app is used and to improve the product experience. Analytics are linked to your account (user ID and email address) for signed-in users. Automatic capture, click tracking, and input tracking are all disabled — only specific named events are recorded. PostHog does not sell your data or use it for advertising purposes.

Information we do not collect

We do not collect:

  • Your name, location, or any other personal details beyond your email
  • Device identifiers or advertising IDs
  • Payment card or banking details (handled entirely by Apple)

How we use your information

We use the information we collect to:

  • Authenticate you and provide access to your account
  • Sync your creative content across devices and enable real-time collaboration on shared projects (signed-in users)
  • Manage your subscription status, free trial, and Premium features
  • Generate transcripts and photo summaries when you use those AI features
  • Send you service notifications, such as a reminder before your free trial ends
  • Send occasional product updates to account holders
  • Understand how the app is used so we can improve it (via PostHog analytics)

We will never sell, rent, or share your personal data with any third party for marketing purposes.

Data retention

Account data (email, subscription tier, synced content) is retained for as long as your account is active. You may delete your account and all associated data at any time from within the app, or request deletion by emailing us at hello@sparkstash.app. We will action deletion requests within 30 days. Guest-mode app data is retained on your device for as long as the app is installed; uninstalling removes it permanently.

Your rights

Depending on where you live, you may have rights including the right to access, correct, or delete your personal data. To exercise any of these rights, email us at hello@sparkstash.app. We will respond within 30 days.

Third-party services

We use the following third-party services:

  • Supabase — account authentication and cloud data storage. supabase.com/privacy
  • RevenueCat — subscription management and entitlement verification. revenuecat.com/privacy
  • Apple App Store — payment processing for Premium subscriptions and Sign in with Apple. Apple's privacy policy applies to all payment transactions.
  • OpenAI — audio transcription (Whisper) and AI photo summaries (GPT-4o mini). Processes only the recording or image you choose to transcribe or summarise; not used for model training. openai.com/policies/privacy-policy
  • PostHog — in-app analytics (feature usage events). No advertising use, no data selling. posthog.com/privacy

We do not use any advertising networks or cross-site tracking services.

Children's privacy

SparkStash is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their email address, please contact us and we will delete it promptly.

Changes to this policy

We may update this policy from time to time. We will notify account holders of any material changes by email. The date at the top of this page reflects when the policy was last updated.

Contact

Questions about this policy? Email us at hello@sparkstash.app. We aim to respond within 2 business days.