Fantasy Spark

---

**Effective Date:** September 28, 2025  
**Last Updated:** September 28, 2025

## Introduction

Fantasy Spark ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application Fantasy Spark (the "App").

## Information We Collect

### Personal Information You Provide
- **Account Information**: Email address, password, and optional profile information (username, full name)
- **User-Generated Content**: Stories, collections, and creative prompts you create within the app
- **Subscription Information**: Payment details processed through Apple App Store or Google Play Store and RevenueCat
- **Communication Data**: Messages you send through customer support channels

### Information Automatically Collected
- **Authentication Data**: User session tokens and authentication status managed through Supabase
- **Usage Analytics**:
- AI service usage (story generation, image creation, text-to-speech narration)
- Token consumption and API usage metrics
- Subscription status and billing periods
- **Device Information**: Platform type (iOS/Android), app version, and device compatibility data
- **Performance Data**: Error logs and crash reports for app improvement

### Cloud Storage Data (Premium Users Only)
- **Story Synchronization**: Your stories and collections for cross-device access
- **Image Files**: Generated cover art and illustrations (compressed and optimized)
- **Storage Usage Metrics**: File sizes and storage quota utilization

## How We Use Your Information

### Core App Functionality
- **Account Management**: User authentication, profile management, and session security
- **Content Creation**: Processing your prompts through AI services to generate stories, images, and narration
- **Data Synchronization**: Syncing your content across devices (premium feature)
- **Subscription Management**: Processing payments, managing subscription tiers, and enforcing usage limits

### Service Improvement
- **Analytics**: Understanding usage patterns to improve app features and performance
- **Cost Optimization**: Monitoring AI service usage to maintain sustainable pricing
- **Quality Assurance**: Identifying and fixing bugs, crashes, and performance issues

### Legal and Safety
- **Compliance**: Meeting legal obligations and protecting user rights
- **Security**: Preventing fraud, abuse, and unauthorized access
- **Content Moderation**: Ensuring generated content meets our community guidelines

## Third-Party Services

We integrate with the following third-party services:

### Authentication & Database
- **Supabase**: Secure user authentication, database storage, and real-time synchronization
- **Data Processing**: User accounts, story data, and subscription information

### AI Content Generation
- **DeepInfra API**: Powers our AI story generation, image creation, and text-to-speech features
- **Data Shared**: Your creative prompts and generation requests (processed securely through our servers)
- **Data Retention**: Prompts are not stored by third-party AI services after processing

### Subscription Management
- **RevenueCat**: Subscription analytics, billing management, and cross-platform purchase validation
- **Apple App Store / Google Play**: Payment processing and subscription management
- **Data Shared**: Purchase information, subscription status, and usage analytics

### Cloud Storage (Premium Users)
- **Supabase Storage**: Secure cloud storage for your stories and images
- **Data Encryption**: All cloud data is encrypted in transit and at rest

## Data Storage and Security

### Local Storage
- **Device Storage**: Stories, images, and audio files are stored locally on your device in user-specific folders
- **Privacy Protection**: Each user's data is isolated and protected from other users on shared devices

### Cloud Storage (Optional)
- **Secure Transmission**: All data transmitted to cloud services uses HTTPS encryption
- **Access Control**: Row-level security ensures you can only access your own data
- **Data Isolation**: Your data is never shared with other users

### Security Measures
- **Encryption**: All sensitive data is encrypted both in transit and at rest
- **Authentication**: Secure token-based authentication with automatic session management
- **Access Control**: Strict permissions ensure data access is limited to authorized users only

## Your Rights and Choices

### Account Control
- **Access**: View and manage your account information within the app
- **Deletion**: Delete your account and associated data through the app settings
- **Data Export**: Request a copy of your data (contact support)

### Privacy Settings
- **Cloud Sync**: Choose whether to enable cloud synchronization (premium feature)
- **Content Storage**: Control what content is synced to the cloud
- **Data Retention**: Manage local storage and clear cached content

### Communication Preferences
- **Marketing**: Opt out of promotional communications (if applicable)
- **Service Updates**: Essential service notifications cannot be disabled

## Data Retention

### Active Accounts
- **Account Data**: Retained while your account is active
- **Content**: Stories and collections retained based on your storage preferences
- **Usage Data**: Analytics retained for service improvement and billing purposes

### Account Deletion
- **Immediate**: User-generated content and personal information deleted within 30 days
- **Analytics**: Anonymized usage data may be retained for service improvement
- **Legal**: Some data may be retained longer if required by law

## Children's Privacy

Fantasy Spark is designed as a family-friendly app suitable for children. We comply with applicable children's privacy laws:

- **No Personal Information Collection**: We do not knowingly collect personal information from children under 13 without parental consent
- **Safe Content**: All AI-generated content is filtered for age-appropriateness

## International Data Transfers

Your data may be processed and stored in servers located in different countries. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable laws.

## Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through:
- **In-App Notifications**: For major policy changes
- **Email**: If we have your email address (for account holders)
- **App Updates**: Policy changes will be included in app update notes

## Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us:

- **Email**: service@thunderpeaklabs.com
- **In-App**: Use the "Contact Support" feature in app settings

## Compliance

This Privacy Policy complies with:
- **General Data Protection Regulation (GDPR)** for users in the European Union
- **California Consumer Privacy Act (CCPA)** for users in California
- **Children's Online Privacy Protection Act (COPPA)** for users under 13
- **Apple App Store** and **Google Play Store** privacy requirements

---

**Fantasy Spark Privacy Policy v1.0**
*This document was generated based on a comprehensive audit of the Fantasy Spark application architecture and data flows.*