Privacy Policy

1. Who we are

Acadeller Spark (the "App") is built and operated by Acadeller ("we", "us"), based in Spain. For anything about this policy or your data, write to privacidad@acadeller.com.

Under the EU General Data Protection Regulation (GDPR), we are the data controller for the limited personal data described in section 4.

2. Your Screen Time data stays on your device

Spark asks for Screen Time access through Apple's Family Controls framework, for your own device only. Once you grant it, your usage — time per app, pickups, categories — is read and turned into your Spark Score, your top apps, and your seven-day trend inside a sandboxed Apple report extension running on your iPhone.

Apple's framework does not allow that extension to pass your raw usage records back to the main app, and we do not attempt to work around it. We never receive, store, or transmit your screen time, your pickup counts, or the names of the apps you use. This is enforced by the operating system, not merely by our policy.

3. What is stored only on your iPhone

The following never leaves your device. It lives in local storage and a private app group, and it is removed when you delete the App:

• Your app, category, and website selection — stored as opaque system tokens. These are meaningless outside your device, and even we cannot read which apps they refer to.
• Your focus history — the minutes of Charge you completed, recorded by calendar day to draw your Journey calendar and streak.
• Your onboarding answers, including your estimated daily usage.
• Your active Limits and any running Charge deadline.

4. What we do receive

A deliberately short list, and only when it is needed:

• Account data — when you sign in with Apple or Google, we receive a user identifier, your display name, and your email address. These are stored in our Firebase project so you can sign back in and reach your subscription. If you use Apple's Hide My Email, we only ever see the relay address.
• Subscription status — whether your premium entitlement is active, handled by RevenueCat on top of Apple's App Store. We never see your card details; Apple processes all payments.
• Diagnostics — crash and error reports, used to fix problems. These contain no Screen Time data.
• Support messages — whatever you send us when you contact support, kept so we can reply.

5. Why we process it, and on what basis

Each purpose has a legal basis under the GDPR:

• Running your account and restoring your subscription — performance of our contract with you.
• Fixing crashes and keeping the App reliable — our legitimate interest in a product that works.
• Service emails about your account or important changes — performance of our contract.
• Product news or marketing — your consent, which you can withdraw at any time.

6. Who processes data for us

We keep the list short: Google Firebase for authentication and account storage, RevenueCat for subscription state, and Apple for sign-in and payments. They act on our instructions and are contractually bound to protect your data.

Where any of them processes data outside the European Economic Area, the transfer relies on the European Commission's Standard Contractual Clauses or an adequacy decision.

7. What we do not do

We do not sell your personal data. We do not share it with advertisers or data brokers. We do not use third-party advertising or tracking SDKs, and we do not build a profile of you for advertising purposes. We do not collect your location, contacts, photos, microphone, or camera.

8. How long we keep it

Account data is kept while your account exists. Delete your account from Settings and we delete it, along with your Firestore record, within 30 days — except where law requires us to keep billing records longer. Diagnostics are kept for up to 12 months. On-device data disappears the moment you delete the App.

9. Your rights

If you are in the EEA or the UK you can access your data, correct it, delete it, restrict or object to its processing, and request a portable copy. Email privacidad@acadeller.com and we will respond within one month.

Note that we cannot give you a copy of your Screen Time data, because we never had it — that data is yours alone and stays on your device. You can also revoke Screen Time access at any time in iOS Settings, and you can file a complaint with your supervisory authority; in Spain that is the Agencia Española de Protección de Datos (aepd.es).

10. Children

Spark requests Screen Time authorization for an individual device, not as a parental-control tool for someone else's device. It is not directed at children under 14 and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.

11. Security

Data in transit is encrypted, access to account data is restricted internally, and credentials are held in the iOS keychain. No system is perfect; if a breach affects your data and poses a risk to you, we will notify you and the relevant authority as the law requires.

12. Changes to this policy

If we change anything material — especially anything that would change section 2 — we will update the date above and tell you in the App or by email before it takes effect.