Privacy Policy

We collect information you provide, information generated by your use of Vispark, and information from third-party services you connect or use through Vispark.

• Account information, such as your Supabase user identifier, Google account email address, display name, profile image, and authentication session details.
• App activity, such as YouTube channels you track, videos you open or summarize, summary request status, language preferences, notification preferences, read status, and in-app notification history.
• YouTube-related information, such as public channel identifiers, channel titles, channel descriptions, thumbnails, video identifiers, video titles, watch links, publish dates, durations, transcript text, transcript segments, and generated summaries.
• Subscription information, such as your RevenueCat app user identifier, entitlement tier, subscription period, product identifier, purchase status, and app store transaction status. We do not receive your full payment card details.
• Notification information, such as Expo push tokens, platform, deep links, notification metadata, and notification delivery status.
• Device, diagnostics, and usage information, such as platform, language settings, crash reports, error logs, performance data, and identifiers used by Sentry or similar diagnostics services.

We use information to:

• Create and maintain your account and authenticated sessions.
• Search YouTube channels and videos selected by you.
• Track your chosen channels and process new YouTube upload events.
• Fetch transcripts and generate summaries in your selected language.
• Provide in-app and system notifications about summary status and new uploads.
• Measure quotas, enforce plan limits, and manage paid entitlements.
• Process purchases, renewals, cancellations, restores, and entitlement changes.
• Secure, debug, monitor, and improve Vispark.
• Comply with legal obligations and enforce our Terms of Service.

We use third-party services to operate Vispark. These providers may process information according to their own terms and privacy policies.

• Supabase for authentication, database storage, realtime updates, and server functions.
• Google OAuth for sign-in and Google account profile information.
• YouTube and Google application programming interfaces for public channel, video, and transcript-related data.
• Google artificial intelligence services for generating summaries.
• RevenueCat, Apple App Store, and Google Play for subscriptions and entitlement management.
• Expo for push notification delivery.
• Sentry for crash reporting, diagnostics, and error monitoring.
• LangSmith or similar observability tools when tracing is enabled for summary processing.
• Proxy infrastructure for transcript fetching where needed.

Vispark uses YouTube-related features to search channels, retrieve video metadata, receive upload notifications through YouTube WebSub, fetch available transcripts, and create summaries. By using those features, you understand that YouTube and Google may process data under their own policies.

You can review Google's Privacy Policy at policies.google.com/privacy and YouTube's Terms of Service at youtube.com/t/terms.

To generate summaries, Vispark may send video metadata, transcript text, requested language, and related request context to artificial intelligence providers. The generated output is stored so you can view it in the app and so we can avoid unnecessary duplicate processing.

You should not submit private, sensitive, confidential, or regulated content to Vispark. Vispark is designed for public YouTube content and not for private document processing.

We may share information:

• With service providers that host, process, secure, monitor, bill, or support Vispark.
• With app stores and RevenueCat to manage purchases, subscriptions, refunds, and entitlements.
• With YouTube, Google, and artificial intelligence providers when needed to provide YouTube-based and summary features.
• With Expo to deliver push notifications you enable.
• When required by law, legal process, government request, or to protect rights, safety, and security.
• As part of a merger, acquisition, financing, reorganization, or sale of assets involving Vispark.

We do not sell your personal information in the ordinary meaning of selling it for money. We also do not use your private account data to create advertising profiles for third-party advertisers.

We retain information for as long as needed to provide Vispark, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, and maintain service records.

Account-linked records such as preferences, channel subscriptions, notifications, entitlements, push tokens, and user summary request links are generally associated with your authenticated user account. Raw YouTube webhook notification payloads are scheduled for cleanup after approximately one week. Shared summary records, video metadata, transcripts, and generated summaries may remain for service integrity, deduplication, abuse prevention, and operational continuity unless deletion is required by law or approved through a deletion request.

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information. You may also have the right to withdraw consent where processing is based on consent.

• You can sign out through the app.
• You can revoke Google OAuth access through your Google account settings.
• You can manage subscriptions through Apple App Store or Google Play.
• You can disable push notifications through your device settings.
• You can change language and in-app notification preferences in Vispark settings.
• You can contact us to request access, correction, deletion, or export of account information.

We use technical and organizational measures designed to protect information, including authenticated access, row-level access controls, managed hosting providers, secure token storage on supported devices, and diagnostic monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Vispark and its service providers may process information in countries other than your country of residence. Those countries may have data protection laws that differ from the laws where you live. Where required, we rely on appropriate safeguards for international transfers.

Vispark is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to Vispark, contact us and we will take appropriate steps to review and delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you, such as updating the date on this page or providing notice in the app. Your continued use of Vispark after the updated policy becomes effective means you acknowledge the updated policy.

For privacy requests or questions, contact us at privacy@vispark.app. For general support, contact support@vispark.app.