Privacy Policy
Last updated: October 15, 2026
Sparkal (“Sparkal”, “we”, “us”) is a skincare app that analyses photos of your skin and of skincare products, and helps you build and track a routine. Sparkal is operated by Inuyasi LLC, a Wyoming limited liability company, which is the controller of your personal data.
This policy explains what we collect, why, who processes it for us, where it’s stored, how long we keep it and the choices you have. It covers the Sparkal app for iOS and Android and the website at sparkal.app.
Contact: support@sparkal.app
The short version
- We collect what’s needed to give you results: your photos, the skin profile you choose to share, your routine and your account details.
- Photos and questions are analysed by an AI service (Anthropic’s Claude) only after you agree to it in the app.
- We don’t sell your data, don’t use advertising trackers, and don’t track you across other apps or websites.
- We don’t use your face to identify you. Face photos are used only to analyse your skin.
- You can delete your account and all of its data in the app at any time.
What we collect
Account details. If you sign up: your email address and password (stored hashed by our authentication provider), or, if you use Sign in with Apple, Google or Facebook, the email address and identifier that provider shares with us. Before you sign up, the app creates an anonymous account so your first scan can be saved; it has no email or name attached.
Your skin profile. What you tell us during onboarding and in your profile: your first name, skin goals, experience level, habits (water, sleep, sun exposure) and any skin conditions you choose to share (for example eczema or rosacea).
Photos and scan results. The face and product photos you take in Sparkal, the broad face and skin-tone traits measured on your device (see “Face photos and face data”), and the results we produce from them: scores, notes, shade suggestions, ingredient analysis and routine suggestions.
Routine and check-ins. The routine steps you tick off and the daily check-ins you choose to log, such as sleep, stress, water, a note and, if you turn it on, whether you’re on your period.
Advisor conversations. Questions you ask the in-app skin advisor and its answers.
Subscription status. Whether you’re on a free trial or a paid plan, which plan, and when it renews or ends. Payments are handled entirely by Apple or Google; we never see your card or payment details.
Usage counts. How many scans and advisor messages you use each day, so we can apply your plan’s limits.
Technical data. Like any online service, our providers process your IP address and basic device and request information when the app talks to our servers, to deliver the service and keep it secure.
We don’t collect your precise location, contacts or advertising identifiers, and the app contains no advertising or third-party analytics SDKs.
Face photos and face data
Sparkal works by looking at photos of your face, so we want to be specific about this:
- On your device: before a photo is sent anywhere, the app checks on your phone that there is one face, looking forward, in focus and well lit. While doing this it also works out a few broad traits used to personalise your results: face shape and eye spacing (as categories such as “oval” or “wide-set”), skin depth and undertone, your average skin colour (used to suggest foundation shades), and the outline of each face zone (forehead, cheeks, nose, chin) for your heat map. Only these broad results are sent with your scan and saved with it. The detailed facial points the app measures them from stay on your device and aren’t stored.
- What we use photos and these traits for: only to analyse the visible condition of your skin (for example hydration, redness, clarity, oiliness, texture and tone), to suggest shades and products, to show you your results and history, and to let you compare scans over time.
- What we don’t do: we don’t use your photos, or any information derived from them, for facial recognition, to identify or verify who you are, to create a biometric template or faceprint, for advertising, or to train AI models. We don’t sell or share them.
- Where they’re kept: photos are stored privately with your account (see “Where your data is stored”) until you delete them or your account.
AI processing
Scans and advisor messages are analysed by Claude, an AI service provided by Anthropic, PBC (United States). Before your first scan, Sparkal asks your permission and explains what will be sent. When you scan or ask a question, we send Anthropic the photo(s), your skin profile, the products you’ve saved and, for the advisor, your question with your latest results.
Anthropic processes this data on our behalf only to produce your results. Under its commercial terms, Anthropic does not use it to train its models and keeps it only for a limited period for trust and safety purposes.
If you don’t agree, you can still use the parts of Sparkal that don’t need AI, such as your routine and check-ins. You can withdraw consent at any time by contacting us; we’ll stop sending new scans or questions for AI processing.
How we use your data and our legal bases
| Purpose | Legal basis (where GDPR or similar laws apply) |
|---|---|
| Analyse your photos and give you results, routines and advisor answers | Performance of our contract with you; your explicit consent for AI processing and for any health information you share |
| Save your history to your account so it’s available on a new phone or after a reinstall | Performance of contract |
| Manage your subscription, free trial and plan limits | Performance of contract |
| Send account emails (sign-in codes, password resets) and service emails, such as a reminder before a free trial turns into a paid plan | Performance of contract; our legitimate interest in clear billing |
| Keep the service secure, prevent abuse and fix problems | Our legitimate interests |
| Comply with legal obligations | Legal obligation |
We don’t use your data for advertising, don’t sell it, and don’t make automated decisions about you that have legal or similarly significant effects.
Who processes your data
We use a small number of service providers that process data only on our instructions:
| Provider | What for | Location |
|---|---|---|
| Supabase | Database, private photo storage, sign-in and server functions | Singapore (data at rest) |
| Anthropic | AI analysis of scans and advisor answers | United States |
| RevenueCat | Tracking subscription status from Apple and Google | United States |
| Apple, Google | Processing subscription payments; Sign in with Apple and Google sign-in if you use them | Global |
| Meta (Facebook) | Facebook sign-in, only if you choose it | Global |
| Resend | Sending account and reminder emails | United States |
| Cloudflare | Hosting and protecting the sparkal.app website | Global |
We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger or acquisition, in which case this policy will continue to apply to your data.
Where your data is stored and international transfers
Your account data, photos and results are stored by Supabase in Singapore. Some providers, such as Anthropic and RevenueCat, process data in the United States. Where data from the European Economic Area, the UK or Switzerland is transferred to countries without an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses (or the UK equivalent) in our providers’ data processing terms.
How long we keep it
- Your account and its data: for as long as you have an account.
- When you delete your account: your account, profile, photos, scan results, routine, check-ins and advisor history are deleted from our systems straight away. Copies in our providers’ routine backups are overwritten within 30 days.
- Anonymous accounts that are never used again: we may delete them, with their data, after 12 months of inactivity.
- Subscription records: Apple and Google keep their own purchase records under their own policies.
Security
Data is encrypted in transit (HTTPS/TLS) and at rest. Photos are kept in private storage that only your account can access, and access to our systems is restricted. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires.
Your choices and rights
- Delete your account at any time in the app under Settings › Delete account, or by following the steps on our account deletion page. This removes everything listed above. It doesn’t cancel an App Store or Google Play subscription; cancel that in your store’s subscription settings.
- Access or correct your data: most of it is visible and editable in the app. For anything else, contact us.
- Delete individual scans from your scan history at any time.
- Withdraw consent for AI processing or for health information you’ve shared, by contacting us or removing that information from your profile.
Depending on where you live, you may have further rights, such as to receive a copy of your data, to restrict or object to processing, or to lodge a complaint with your local data protection authority. Contact us at support@sparkal.app to use them. We’ll respond within 30 days and won’t treat you differently for using them.
California and other US state residents: we don’t sell or share personal information for cross-context behavioural advertising, and we use sensitive personal information (such as health information you choose to share) only to provide the service you asked for.
Children
Sparkal is not intended for anyone under 16, and we don’t knowingly collect data from children under 16. If you believe a child has used Sparkal, contact us and we’ll delete their account and data.
Health information
Sparkal gives general skincare and wellness guidance based on how your skin looks. It isn’t a medical device and doesn’t diagnose or treat any condition. Skin conditions and period tracking you choose to share are sensitive; they’re optional, used only to personalise your results, and never used for advertising.
The sparkal.app website
The website doesn’t use cookies, analytics or advertising trackers. Cloudflare, our hosting provider, processes basic request data such as your IP address to deliver the site and protect it from abuse. If you email us, we use your message only to reply.
Changes to this policy
We’ll update this page if our practices change and change the date at the top. For significant changes, we’ll also tell you in the app or by email before they take effect.
Contact
Inuyasi LLC, operator of Sparkal 30 N Gould St, Ste R, Sheridan, WY 82801, United States Email: support@sparkal.app