Privacy Policy — AppSpark by Suite 8

AppSpark is built by Suite 8. This policy explains what we collect, why, and what your rights are. We've written it in plain English on purpose — a privacy policy shouldn't need a lawyer to read.

Our promise, in short: Your ideas are yours. We never sell them, never share them with other users, and never use them to train AI. They're stored privately to your account, and only pass through our secure systems for AI processing when you choose to refine one.

The rest of this document explains exactly how that promise holds up in practice.

Who we are

AppSpark is developed by Suite 8 (the same developer name used across all Suite 8 apps, including Score Keeper's published policy). This policy covers the AppSpark mobile app (com.suite8.appspark) and its supporting cloud services.

Age requirement

AppSpark is a general-audience app for people planning and building software projects. It is not directed at children, and we don't knowingly collect personal information from anyone under 13 (or the minimum age required by your local law, if higher). If you believe a child has created an account, contact us using the details below and we'll delete it.

What we collect

Account information

Email address (used for sign-in — either Google Sign-In or a passwordless magic-link email)
Display name, if provided via Google Sign-In

Your idea data

Everything you type into AppSpark to describe your app idea: brain-dump text, question answers, your idea's title, one-liner, features, target audience, design direction, and any AI-refined or AI-rendered output generated from it (including a full Launch Kit render, for subscribers)
Optional free-text feedback you leave in response to the 30-day check-in nudge shown on an idea sitting in Ready to build (e.g. "what's stopping you building this?") — stored on that idea's own record, and overwritten if you submit it again

Usage and technical data

Crash reports (technical details only — device type, OS version, what the app was doing when it crashed — never your idea content, see below)
Basic app usage analytics, once this is switched on (see Third-party services)

What we don't ask you for

We don't request your location, your contacts, or access to your camera or photo library
We don't collect any payment card details ourselves — payments are handled entirely by RevenueCat and the app store you purchased through (Google Play or the App Store)

Why we collect it

Email address — to sign you in and let you recover your account. Sign-in is required to use AppSpark; there's no guest mode, because your ideas need a private, permanent home tied to your account.
Your idea data — this is the actual product. It's stored so you can come back to an idea, edit it, export it, and (if you choose) run it through AI refinement or upgrade it to a full Launch Kit.
Nudge feedback — an optional way to tell us what's stopping you building an idea you've already got a brief for, so we can improve the app. Entirely optional; skipping it changes nothing about how the idea itself works.
Crash reports — to find and fix bugs. Configured to strip out idea content (title, one-liner, answers, brain-dump text, AI-refined output) before anything is sent — see Third-party services below.
Usage analytics (once live) — to understand which parts of the app are actually useful, and which questions or screens people get stuck on, so we can improve them. Event names and counts only, never your idea content.

What we don't collect

No location data
No access to your contacts
No camera or photo access (AppSpark doesn't use either)
No payment card or billing details on our own servers — RevenueCat and the app stores handle all payment processing
No microphone access

How AI processing works

When you use the free "brain-dump" capture, when you reach the Review screen's summary, and separately when you use one of the paid AI features — "Refine" or a single-field "Recommend" — some of your idea text is sent to Anthropic (the company behind Claude) so it can be understood, improved, or suggested back to you. Here's exactly how that works, because the path matters:

Your device never talks to Anthropic directly. Instead: your device → a Suite 8 cloud function (hosted in Singapore) → Anthropic's API → back the same way. Our cloud function holds the API key that talks to Anthropic — that key is never stored on your phone.

What happens to the result once a request completes is worth being specific about, because it isn't identical across features:

Refine and Recommend (paid): we don't keep a separate copy, on our servers, of what was sent to Anthropic or what came back. For Refine, the only thing we retain afterwards is a simple yes/no flag on your own idea record noting that refinement has been used — not the refined content itself. Suggestions from either feature are shown to you in the app, and only become part of your stored idea data if you choose to accept them.
Brain-dump extraction (automatic, both free and paid tiers, using Anthropic's lighter Haiku model): this one is different — it exists specifically to turn your own words into a saved list of answers, so the structured result of that call genuinely is saved to your own idea record, the same as everything else you type directly into AppSpark. We treat it as ordinary app processing rather than a separate event, since it happens automatically as part of capturing your idea rather than being a deliberate extra step you take — but it is stored, unlike the Refine/Recommend suggestions above.
Review summary (automatic, both free and paid tiers, using Anthropic's lighter Haiku model): when you reach the Review screen, we ask Anthropic to weave your captured answers into a short two-part summary — what the app is, and what it means for you as the builder. Like brain-dump extraction, this happens automatically as part of using the app rather than being a deliberate step you take, and the result is saved to your own idea record so it's ready the next time you open it rather than being regenerated on every visit.

Anthropic's API terms mean the content of your requests isn't used to train their models. That's the basis for our promise that we never use your ideas to train AI.

Third-party services

We use a small number of trusted services to run AppSpark. None of them are given more access to your data than they need to do their specific job.

Service	Purpose	Privacy Policy
Google Firebase	Authentication, database storage, and cloud functions. Your account and idea data is stored in Firebase's Singapore region (asia-southeast1). Firestore security rules mean only your own signed-in account can ever read or write your idea data — there's no shared or public data path.	firebase.google.com
Anthropic	Powers the AI processing described above (automatic idea extraction, the automatic Review summary, the paid Refine feature, and the paid single-field Recommend feature).	anthropic.com
RevenueCat	Manages subscription purchases and restores. Handles payment processing; we never see or store your card details.	revenuecat.com
Google AdMob	Shows ads to free-tier users only (subscribers never see ads). Ads are non-personalised — we don't send your idea content or any custom targeting information to AdMob.	policies.google.com
Sentry	Crash and error monitoring, so we can find and fix bugs. Configured to strip your idea content (title, one-liner, answers, brain-dump text, AI-refined output) from every crash report and breadcrumb before it's sent — Sentry only ever sees technical error information.	sentry.io
PostHog	Product analytics, to understand app usage: which screens people visit, which mode they pick, whether an idea got exported, whether an upgrade prompt was tapped, whether nudge feedback was given. Only event names and simple metadata (never free text) are ever sent — idea content, including nudge feedback text, is never included.	posthog.com

Data retention

Your idea data is kept for as long as your account exists, so you can come back to it whenever you like.

You can delete individual ideas at any time from within the app.

Account deletion: you can delete your account and everything in it at any time, right from the app:

Profile → Account → Delete account — type DELETE to confirm, and it's actioned immediately.

Behind the scenes: a Suite 8 cloud function first deletes every idea and every usage record stored under your account in Firestore, then deletes your account profile itself, and only once all of that has succeeded does it delete your Firebase sign-in record. That order is deliberate — it means your data is never left behind, ownerless, if something goes wrong partway through. This is permanent: once it's done, there's no way for us to get your ideas back.

A couple of things worth knowing: signing out of the app as part of this process also clears your subscription session on your device, but RevenueCat and the app stores keep their own purchase/transaction records for a subscription you've held, as required for financial and legal record-keeping — that's outside our control and outside AppSpark's own data. Likewise, any crash reports or analytics events already sent before you deleted your account aren't retroactively erased from Sentry or PostHog — as explained above, none of those ever contained your idea content (including nudge feedback text) in the first place, only technical and event metadata.

Your rights

You can:

Access your data — everything you've entered is visible to you in the app at any time
Correct your data — edit any idea, or your profile details, whenever you like
Delete your data — delete individual ideas, or your whole account, at any time, directly in the app (Profile → Account → Delete account)
Export your data — export any idea as a .md file via the app's share sheet

If you'd rather we handled a request on your behalf — for example, you're locked out of your account and can't reach the in-app flow, or you'd simply prefer email — contact us at the email below and we'll action it.

Changes to this policy

If we make a material change to what we collect or how we use it, we'll update this document and change the "Last updated" date at the top. If a change is significant, we'll also tell you inside the app.

Contact

For any privacy question, data request, or account deletion request:

Email: suite8apps@gmail.com