Privacy policy

MemSpark is built local-first: your decks, cards, and review history live on your device, and the app works fully offline. This page lists everything that ever leaves your device, why, and how to delete it.

What we collect

Account

You can use MemSpark without creating an account; the app then uses an anonymous session identifier so sync and AI generation can work. If you sign up, we store your email address, or, with Sign in with Apple, the name and (possibly private-relay) email address Apple shares. We use it to sign you in and to answer support requests. Nothing else.

Synced study data

Decks, cards, review history, and media you attach are synced so your collection survives a lost phone and follows you across devices. This data is stored with Supabase on servers in the ca-central-1 region (Montréal, Canada). It is protected by row-level security: only your account can read your data.

AI card generation

When you generate cards, the source you provide, pasted text, a photo, a PDF, or audio, is sent through our server to OpenAI, and for some photo and document processing to Google, solely to create your cards. Under the API terms we use, this content is not used to train their models. We do not log your prompts, your source material, or the generated cards on our servers. AI features are the only reason card content ever leaves the sync database.

Crash reports

Crash and error reports go to Sentry: device model, OS version, app version, and the technical stack trace. They never include card content. Crash reporting stays on so we can fix problems.

Usage analytics

We use PostHog to count feature usage, events like "import completed" with counts, never card content, never AI prompts. You can turn analytics off in Settings at any time, and the switch is honored immediately.

Purchases

Payments are handled entirely by Apple. We use RevenueCat to know whether your subscription is active. We never see your payment details.

What we do not do

• We do not sell your data, ever.
• We do not show ads and do not track you across other apps or websites.
• We do not use your cards or study data to train AI models.
• We do not read your collection; access is limited to what operating the service requires.

Deleting your data

Settings → Delete account removes your account and all synced data from our servers. Decks stored on your device stay yours until you delete the app. If anything is left behind or you cannot use the app, email us and we will delete it manually.

Changes

If this policy changes in a way that matters, we will say so in the app before the change takes effect. The current version always lives at this address.

Contact

Caffeinated Code d.o.o.
support@memspark.app