Privacy Notice
Last updated: 7/21/2026
Who we are
SparkJournal is operated by Atlantic Cape Concepts LLC ("we", "us"), the data controller for information collected through the SparkJournal app and website.
What personal data we collect
- Account data — email, password (hashed), display name, account type (kid / parent / adult), date of birth (for kids, to enforce age-gating), and guardian email (for kid accounts).
- Content you create — reflections, vision boards, goals, uploaded images, and AI-generated images.
- Usage & device data — log data, IP address, browser and device type, and interaction events used for security and improving the product.
- Support messages — anything you send us when you contact support.
- Billing data — collected and processed by Paddle (our Merchant of Record). We receive limited data such as subscription status and country.
Why we use it (purposes and legal bases)
- To create and secure your account (performance of a contract).
- To provide the app's features — save reflections, render boards, generate AI images (performance of a contract).
- To keep the service safe — moderating content, detecting abuse and self-harm signals, enforcing age and guardian rules (legitimate interests and, for kid accounts, protection of vital interests).
- To handle payments and comply with tax and financial regulations (legal obligation).
- To communicate about your account and important service changes (legitimate interests).
- To improve the product through aggregated analytics (legitimate interests).
Who we share it with
- Service providers / subprocessors — hosting, database, storage, and email delivery vendors we use to run the app.
- Paddle.com Market Limited — our reseller and Merchant of Record. Paddle processes payments, calculates tax, and handles invoicing and refunds.
- AI providers — prompts and images you submit to AI Studio are sent to model providers to generate the requested output.
- Guardians — for kid accounts, a verified guardian can see the kid's reflections, boards, goals, and safety alerts.
- Authorities — where required by law, court order, or to protect the safety of a user.
Children and guardian access
SparkJournal is designed for tweens and teens (ages 8–17) as well as adults. Kid accounts must provide a guardian email; a verified guardian can view the kid's activity and pause the account at any time. Paid subscriptions are purchased by an adult account.
Data retention
We keep account data for as long as your account is active. If you delete your account, we delete or anonymize personal data within 30 days, except where we must keep records to meet legal, tax, or accounting obligations.
Your rights
Depending on where you live, you may have the right to access, correct, delete, export, restrict, or object to our processing of your personal data, and to withdraw consent at any time. To exercise these rights, email us at the address below. Users in the UK / EEA also have the right to lodge a complaint with a supervisory authority. We respond to verified requests within 30 days.
International transfers
Personal data may be processed in the United States and other countries where our service providers operate. Where required, we rely on Standard Contractual Clauses or equivalent safeguards for transfers out of the UK / EEA.
Security
We use industry-standard technical and organizational measures — encryption in transit, access controls, and row-level security on our database — to protect personal data. No system is 100% secure; we work to detect and respond to incidents quickly.
Cookies
We use strictly necessary cookies to keep you signed in and to protect the service. We do not currently use advertising cookies. If we add analytics or marketing cookies, we will update this notice and, where required, ask for consent.
Contact
Atlantic Cape Concepts LLC — questions or privacy requests: contact us through the support link in the app.