Last updated: September 14, 2026
Your financial data is stored on your device, not our servers. We never sell your data. We don't serve ads. The only data we collect is what's described below, and we collect as little as possible.
SparkFi is operated by [ENTITY NAME], a [STATE] limited liability company ("SparkFi," "we," "us," or "our"). Our registered address is [ADDRESS]. For privacy enquiries, contact us at sparkteam@catchthesparkfi.com.
Note: entity details will be updated upon LLC formation.
When you sign up for the waitlist we collect your email address and, optionally, your first name. We also collect basic page-view analytics (pages visited, referral source, approximate country). Your IP address is hashed with SHA-256 and a per-request salt for rate-limiting purposes only — the raw IP address is never stored and the hash is discarded after the request completes.
Legal basis (GDPR): Waitlist registration is processed on the basis of your consent (Art. 6(1)(a) GDPR). Page-view analytics are processed on the basis of our legitimate interest in understanding site traffic (Art. 6(1)(f) GDPR), which we have balanced against your right to privacy given the minimal data collected and the absence of raw IP storage.
Financial data. In the current release, you add accounts and transactions manually — SparkFi does not connect to bank or brokerage accounts automatically. All transaction data, account balances, and financial records are stored locally on your Mac or iPhone. If you enable iCloud sync, Apple encrypts that data end-to-end. We never receive, transmit, or store your financial transactions on our servers. A future release may add automatic bank/brokerage sync through third-party providers (for example Plaid or SnapTrade); this policy will be updated, with 30 days' notice as described under "Changes to this policy," before any such feature reaches you.
Legal basis (GDPR): Local financial data processing is performed solely on your device under your control.
We do not collect identity information. At no time does SparkFi request your Social Security Number (SSN), Social Insurance Number (SIN), home address, legal name, or other personally identifiable fields — whether through any feature that captures a photo or document, such as scanning a paystub, or (in a future release) through connecting a bank or brokerage account automatically. If any such field is ever incidentally present in data captured through document/photo capture, it is not stored on our servers and is never shared with any third party.
Document scanning (paystub photos). SparkFi's Income Creation Assistant can fill out an income source from a photo of your paystub. That image is processed entirely on your device using Apple's on-device Foundation Models — the photo, and any data read from it, is never transmitted to SparkFi or to any third party, regardless of your subscription plan. We do not read your Social Security Number, Social Insurance Number, your home address, your legal name, or your employer's Employer Identification Number (EIN) from a scanned paystub or any other document, even though paystubs typically show several of these — our on-device extraction process is built to disregard those fields entirely rather than capture and discard them. If a future version of SparkFi needs to compare one of these values on-device (for example, to recognize a duplicate scan), only an irreversibly masked or hashed form would ever be stored — never the original value — and it would never leave your device.
Analytics. The app sends lightweight usage events to help us understand how SparkFi is used and where to focus development. Each event contains:
app.open, tracker.created)No financial data, no personally identifiable information, and no device identifiers are included in analytics events. Your IP address is used only to enforce a per-minute rate limit and is not stored. Events are retained for 12 months then deleted.
Legal basis (GDPR): App analytics are processed on the basis of our legitimate interest in improving the product (Art. 6(1)(f) GDPR). You can opt out at any time in Settings → System Settings → Privacy → Share Analytics.
Payments and subscriptions. SparkFi is a single $2.99/month subscription with a one-month free trial for new subscribers. Payment is processed entirely by Apple through the App Store. We do not receive or store your payment card details, billing address, or any payment instrument data. Apple provides us with a subscription status token only. See Apple's Privacy Policy for how your payment data is handled.
On-device AI. Some features (such as natural-language transaction entry, smart rule suggestions, and document scanning) use Apple's on-device Foundation Models. These run entirely on your Mac or iPhone — nothing is sent to SparkFi or to any third party to generate them.
SparkFi does not currently send your data to any financial-data or AI sub-processor — there is no bank/brokerage sync and no cloud-based AI feature in this release, so none of the providers below currently receive your data. They're listed here because a future release may reintroduce automatic bank/brokerage sync and cloud-based AI features (at no change to your subscription price); if and when that happens, this policy will be updated first, with 30 days' notice as described under "Changes to this policy" below.
Plaid — bank account connection (not currently used). See Plaid's Privacy Policy.
SnapTrade — brokerage account connection (not currently used). See SnapTrade's Privacy Policy.
Finnhub — real-time stock quotes (not currently used — share prices are entered manually in this release). See Finnhub's Privacy Policy.
Anthropic — would power SparkFi's Claude-based AI features (Spending Insights, Transaction Categorizer, Financial Coach) if reintroduced; not currently used. If active, relevant transaction descriptions, amounts, categories, and/or an account summary would be sent to Anthropic's Claude API through our backend proxy solely to generate the response you requested. See Anthropic's Privacy Policy.
Apple iCloud — optional encrypted sync of your SparkFi data across your devices. Governed by Apple's Privacy Policy.
Your email address is used to send waitlist updates, your invite, and — if you become a customer — account and billing emails. We do not share it with third parties except the sub-processors listed above.
App analytics are used solely to understand feature usage and improve the product. They are never sold, shared with advertisers, or used for profiling.
SparkFi is operated from the United States. If you access the service from the European Economic Area (EEA), the United Kingdom, or Canada, your data (specifically: waitlist email address and app analytics events) will be transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the transfer mechanism for EEA personal data. UK users benefit from the equivalent International Data Transfer Agreement (IDTA). Canadian users' data is handled in accordance with PIPEDA (see the Canadian Residents section below).
Waitlist email addresses are retained until you unsubscribe or request deletion. App analytics events are retained for 12 months. Website page-view analytics are retained for 12 months. No raw IP addresses are retained at any point.
Depending on where you live, you may have the following rights regarding your personal data:
To exercise any right, email sparkteam@catchthesparkfi.com. We will respond within 30 days (45 days for California requests if additional time is needed, with notice).
Your financial data stored locally in the SparkFi app is entirely under your control — delete the app to remove it from your device.
If you are a California resident, you have the following rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act:
Categories of personal information collected: Identifiers (email address); Internet or other electronic network activity (analytics events, page views); Financial information (processed and stored locally on your device — not otherwise collected or retained by us; see "Third-party services" above for the cloud-based features that are not currently active).
To exercise your California rights, email sparkteam@catchthesparkfi.com with "California Privacy Request" in the subject line. We will not discriminate against you for exercising these rights.
If you are a Canadian resident, your personal information is collected, used, and disclosed in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, including Quebec's Act respecting the protection of personal information in the private sector (Law 25).
We collect only the information necessary for the purposes described in this policy, with your knowledge and consent. You may withdraw consent at any time, subject to legal or contractual restrictions. You have the right to access your personal information and to challenge its accuracy. To exercise these rights or to make a complaint, contact our privacy officer at sparkteam@catchthesparkfi.com.
This website uses a single session cookie for CSRF protection and referral tracking. No advertising cookies, no tracking pixels, and no third-party analytics scripts are used.
SparkFi is a financial management application intended for adults (17+). It is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please contact us at sparkteam@catchthesparkfi.com and we will delete it promptly.
We will post changes here and update the "Last updated" date. For material changes, we will send an email to waitlist and active subscribers at least 30 days before the change takes effect, giving you time to review and, where applicable, withdraw consent.
Questions or requests? Email sparkteam@catchthesparkfi.com.
If you are in the EEA and are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority. For UK residents, the relevant authority is the Information Commissioner's Office (ICO).