Privacy Policy
Last updated: May 23, 2026
Who we are
Sparky ("we", "us") is operated by ThinkBuddy AI, a business entity, at www.kidschatapp.live. ThinkBuddy AI is the data controller for personal information processed through Sparky. A parent or guardian creates the account and manages each child's profile.
Information we collect
- Parent account: email address and authentication credentials (or Google sign-in identifier).
- Child profile: first name (or nickname), age range, and parental control settings — provided by the parent.
- Chat content: messages exchanged with Sparky, used to provide replies and to enforce age-appropriate moderation.
- Billing data: processed by our payment processor, Stripe. We receive a subscription status and customer reference, but we do not store full card numbers.
- Technical data: standard logs (IP address, device/browser identifiers, timestamps, error reports) for security and reliability.
How we use it & legal basis
- Provide the service (chat, account, profiles) — legal basis: performance of our contract with you.
- Safety moderation that blocks unsafe topics and keeps responses age-appropriate — legal basis: legitimate interests in protecting children, and parental consent for the child's use of the service.
- Manage subscriptions and send account emails — legal basis: performance of contract.
- Security, fraud prevention, and abuse handling — legal basis: legitimate interests and legal obligations.
- Product improvement (aggregated and de-identified usage analytics) — legal basis: legitimate interests.
Children's privacy
Sparky is intended for children only with parental consent. The parent creates and manages every child profile. We do not knowingly collect personal information directly from a child without the parent having set up the account. We do not show advertising to children and we do not sell or share children's personal information for marketing. Parents can review or delete their child's data at any time from the Parent Dashboard.
Sharing
We do not sell personal information. We share data only with:
- Service providers / subprocessors that help us run Sparky — hosting (Lovable Cloud / Supabase), AI model inference providers, and email delivery — strictly to deliver the service.
- Stripe, our payment processor, for subscription billing, payment processing, tax calculation, and invoicing.
- Professional advisers (legal, accounting) where reasonably needed.
- Authorities where we are required to do so by law or to protect users from harm.
Data retention
We keep account and chat data for as long as the parent's account is active. When you close the account or request deletion, we delete or anonymise personal data within 30 days, except where we are required to retain limited records (e.g. billing/tax records held by Stripe) for legal compliance.
Security
We use appropriate technical and organisational measures to protect personal information, including encryption in transit (HTTPS/TLS), encryption at rest for the database, row-level access controls, and least-privilege access for administrative operations. No system is perfectly secure — please use a strong password and notify us immediately if you suspect unauthorised access to your account.
Your rights
Subject to applicable law, parents may access, correct, export, restrict, or delete their account and their child's profile and chat history at any time from the Parent Dashboard, or by contacting us. You may also object to or withdraw consent for processing where consent is the legal basis. If you are in the UK/EEA, you have the right to lodge a complaint with your local data protection authority.
Contact
Questions or requests? Email privacy@kidschatapp.live.