Privacy Policy

What We Collect

SparkTots collects only the information necessary to provide our service:

• Account information: Email address and password (hashed) to create your account
• Child profile data: Name, date of birth, diagnosis information, and current abilities you share during onboarding
• Activity data: Which activities you complete, milestones achieved, and progress over time
• Usage data: Basic analytics to improve the app (pages visited, features used)

What We Don't Collect

• Medical records or clinical documentation
• Insurance information
• Social Security numbers or government IDs
• Location tracking or precise geolocation
• Contacts or address book access

How We Use Your Data

Your data is used to:

• Generate personalized daily activities based on your child's profile
• Track milestones and show progress over time
• Create PDF reports when you request them
• Send you optional email updates (weekly summaries, new features)
• Improve SparkTots based on aggregate, anonymized usage patterns

Data Sharing

We never sell your data. We only share data in these limited circumstances:

• When you export it: PDF reports you download or share are under your control
• Service providers: We use trusted partners (hosting, email delivery) who are contractually required to protect your data
• Legal requirements: If required by law (e.g., valid court order)

We do not share your data with advertisers, data brokers, or marketing companies.

Data Security

• Encryption: All data is encrypted at rest (AES-256) and in transit (TLS 1.3)
• Infrastructure: Hosted on SOC 2 Type II compliant cloud infrastructure
• Access control: Only essential team members can access user data, and all access is logged
• Regular audits: We conduct regular security reviews and vulnerability assessments

Your Rights

You have full control over your data:

• Access: View all data we have about you in Settings
• Export: Download your data at any time
• Delete: Delete your account and all associated data from Settings
• Correct: Update any information through the app

If you delete your account, we permanently remove all your data within 30 days (some data may remain in encrypted backups for up to 90 days before being purged).

Children's Privacy

SparkTots is a tool for parents, not children. We do not knowingly collect data directly from children. All child information is entered and controlled by the parent or guardian account holder.

Cookies

We use essential cookies for authentication and session management. We use minimal analytics to understand how people use SparkTots so we can improve it. We do not use advertising or tracking cookies.

Contact Us

Questions about privacy? Email us at privacy@sparktots.co