Spark

    Privacy Notice

    This page explains how we handle your data: what we collect, why and how we look after it, and what rights you have.

    This page describes our current principles and practices. A comprehensive privacy notice is being prepared and will replace this page.

    Data Controller

    This service is operated by Intunex Oy (Helsinki, Finland) as part of the SwarmMind World.
    Contact: info@intunex.fi

    What Data We Collect

    • Account data (if you sign in): Your name, email address and profile picture from Google sign-in, or only your email address if you sign in with a one-time email code.
    • Content you create: Wishes, sparks (reactions), profile information (bio, username, country).
    • Publishing: Publishing a wish requires signing in. You can still appear anonymously to others — then no name is shown, but the service knows who the author is.
    • Technical data: Basic server logs are kept by our hosting infrastructure for security and reliability purposes.

    Why We Collect Data

    • To provide the service: displaying wishes, connecting content to your account, sending notifications.
    • To enable community features: sparks, profiles, and wish sharing.
    • To generate AI-powered content (see below).

    AI Processing

    Intunex Oy is the data controller of Spark's Wish Wall and is responsible for how AI is used in the service. AI is used when:

    • you create a wish: the image, an optional inspiration story, wording and spelling suggestions, and finding similar wishes;
    • text is checked against our content rules;
    • Spark answers a learning question. It reads the conversation, but sees the writers only as roles, never by name.

    We do not profile users and we do not translate content automatically.

    Your texts are not used to train AI models

    • Intunex Oy: No. We do not train our own AI model, and we do not collect texts as training data.
    • Development platform (Lovable): No. Spark's Wish Wall is built on the Lovable development platform, and AI calls pass through it. Under the data processing agreement for our plan, prompts and answers are not used to train AI models, and the content of AI requests is not kept in the app's logs.
    • Model provider (Google Gemini): No. Agreements prohibit Google, as the model provider, from training models on texts sent through Spark's Wish Wall.

    Where your data is stored

    Accounts, wishes, team boards and images are stored in a database and file storage in the EU (Ireland).

    When AI is used (images, inspiration, suggestions, moderation), the text needed for that request is sent for processing in the United States. Transfers out of the EU rely on the EU Standard Contractual Clauses. Google's public policies give a retention period of 55–90 days for requests, depending on the service and agreement. We do not promise zero retention.

    Cookies & Tracking

    We do not use marketing cookies, analytics trackers, or any third-party tracking tools. The only cookies used are essential authentication session cookies when you sign in.

    Data Sharing

    We do not sell your data. We do not share your personal information with third parties, except for the platforms required to run the service:

    • Lovable Cloud — hosting and database
    • Google OAuth — authentication (only if you choose Google sign-in)
    • AI model providers — for image and inspiration generation

    Public Content

    Wishes on the public wall are visible to everyone. Wishes on a personal board or a closed team board are visible only to you or to the board's approved members. You can publish on the public wall anonymously — then no name is shown.

    Meetings and feedback

    • Joining a meeting stores your introduction (answer to the opening question, level, optional LinkedIn link). It is visible only to the host, other participants and administrators.
    • Who has signed up for a meeting (@username and avatar) is visible only to the host, other participants and administrators. Everyone else sees only the number of sign-ups and whether the meeting will take place.
    • The exact address or meeting link is visible only to the host, participants and administrators. Publicly, only “Online” or the city is shown.
    • Leaving a meeting permanently deletes your introduction. Introductions are locked once a meeting is completed or cancelled.
    • Post-meeting feedback (attendance, atmosphere, learning, thank-you, private note) can be given and edited for 14 days after the meeting. Individual answers are visible only to you and administrators.
    • Host profiles show only aggregates; percentages appear only with at least five responses, and thank-yous are anonymous. No individual scores or profiling.

    Your Rights

    You have the right to:

    • View what data we hold about you
    • Request correction or deletion of your personal data
    • Delete your account entirely

    To exercise any of these rights, contact us at info@intunex.fi.

    Retention and deletion

    Your data is kept while your account is active. When you delete your account, your personal data and the wishes only you have contributed to are deleted from the database and file storage. A wish others have joined is frozen for 30 days so they can keep it; your name is not shown on it. Comments you wrote appear as "deleted" without your name. Reports and the admin log are kept for 12 months, notifications for 90–180 days.

    Changes to This Notice

    We may update this privacy notice from time to time. The date at the bottom of this page shows when it was last updated.