Privacy policy

SparksBloom is a calm, mastery-based early reading app for children aged two to seven. The parent or guardian is the only account holder. Children never sign in and never type anything. We collect as little as possible: an email address so a parent can sign in by a link we send, and, for each reader, a display name the parent chooses and an avatar colour. Nothing else. We do not show advertising and we do not track your child.

The party responsible for your data (the controller under the GDPR, the DSGVO in German law) is named in the Impressum. You can reach us at hello@sparksbloom.com.

• Parent account: your email address. We sign you in by sending a link to that address, so there is no password to create or store.
• Reader profiles: for each child you set up, a display name you choose and an avatar colour. That is the whole record.
• A sign-in cookie, so you stay logged in between visits. It is not used for advertising or cross-site tracking.

• No information entered by a child. Children never type anything.
• No child names beyond the display name a parent chooses, no birthdates, no photographs, no location.
• No advertising identifiers, and no third-party analytics on children.

Because the parent is the only account holder and no personal information is collected from children, the design meets the United States Children’s Online Privacy Protection Act (COPPA) and the heightened protections for children’s data under the European and German GDPR (GDPR-K) by default. A verified adult holds the account, and there is no child data to protect because none is gathered.

We use your account data only to provide the service: to sign you in and to show your child the readers you set up. SparksBloom is operated from Germany and hosted in the European Union, so the GDPR (the DSGVO in German law) applies. The legal basis is the performance of the service you asked for, together with the consent you give as the account-holding parent when you request a sign-in link.

We rely on a small set of carefully chosen providers to run SparksBloom. Each one acts as a processor on our behalf, and each does a specific job.

• Supabase: our database and authentication, hosted in the European Union (Stockholm region). It holds your account email and the reader profiles you create.
• Stripe: billing and subscriptions. When you subscribe, your card details go directly to Stripe and never reach us. We never see or store card numbers.
• Resend: sends our transactional email, including your magic sign-in links.
• Vercel: hosting and privacy-respecting analytics. The analytics measure page traffic without tracking individuals across sites.
• ElevenLabs: generates the narration audio. The audio is produced ahead of time as content, so no user data is sent to ElevenLabs.

Your account and profile data live with Supabase in the European Union (Stockholm region).

We keep your data only while your account exists. When you delete your account, your account and every reader profile under it are removed.

You can access, correct, or delete your data at any time. You can edit or remove reader profiles in the app, and you can delete your whole account, with all associated data, from Account and privacy. Under the GDPR you also have the right to data portability and the right to lodge a complaint with a supervisory authority. To make any request, contact us at hello@sparksbloom.com.

We use a single sign-in cookie to keep you logged in. We do not use advertising or tracking cookies.

If you ask to be told when SparksBloom opens, we store your email address and the time you signed up, and nothing else. We use it only to email you about the launch.

If this policy changes, we will update this page and the date at the top.