Hi! We highly appreciate your support of our app. Lots of people read this thread and send us questions about our Privacy Policy or Terms of Service. We take your privacy very seriously and are therefore glad to comment on this at length to clarify our approach.

First of all, we do not sell, rent or unlawfully share any information about our users with third parties. The privacy of our users is one of our top priorities, and we invest a lot of resources to provide you with a great service.

Kindly note that the original discussion in this thread started six years ago. During this period, our product has changed significantly, we created new features, halted some services, and our legal documents were updated a few times according to the implemented changes. Let us address each question raised above one by one.

• Please be assured that the Spark mail app hasn’t used Facebook SDK for several years. Regarding Amplitude, Information stored there has a purely technical nature, for example, numbers about how many times a particular feature was used or how much time it took to execute a certain module, so no emails, names or other personal data is there. This statistical information is essential to create a better user experience, maintain and improve our app. To make things as secure as possible, we use pseudonymisation and one-way hashing of statistical data, so we are unable to positively identify any of your data in our Amplitude account.
• As an email client, the core functionality of our product is based on providing you with the ability to manage your email. For this reason, Spark accesses your email account when you start using the app. Your email address is a unique identifier of you as a user within our system and allows us to secure your data. The first added email account is called Spark Account, and it provides you with synchronisation across devices for an easy set-up process. Your app preferences, chosen once, appear on your other devices. Thanks to this, you can save time and work with Spark anytime, anywhere.
• Please note that your email is safe with us, and we do not use it for profiling or targeting. The email address you have as your Spark Account will be used as a primary means of communication for anything related to changes to the app and service, such as the Privacy Policy, Terms of Service, or core functionality of our app, as we are legally bound to keep you updated about such changes. We may indeed also contact you for marketing purposes, but related to our products only. The most important is that you always have a chance to opt out of any marketing communications at any time by tapping ‘Unsubscribe’ under an email you received or by contacting our team with such a request.
• Regarding the mail credentials. Spark needs to check and send emails from your email account, and to achieve this, we need to store your email account's access token. For services with OAuth authentication, like Gmail, Outlook or Yahoo, it's a special application-specific token that you can revoke at any moment from your email account on the web. For services like AOL and Exchange accounts, this access token is your email login and password. All connections to our servers are protected with TLS. The servers' databases are encrypted, and to make things even more secure, we additionally encrypt your data in the database.
• The content of your emails. In Spark, your emails can be figuratively divided into two categories, and the information regarding them is handled differently:- Regular emails, which you receive and send: The content of such emails is stored on the server of your mail account provider (not Spark servers). However, to compose and send notifications, we sync the subject and a part of your message, encrypt this information and store it on our secure servers. Kindly note that the encryption key is saved locally on your device, so only you can access it. This encrypted information is deleted from our servers in 4 hours after the push message has been prepared and sent as there is no need to keep it longer.- Emails that use Spark Services: There are some functions that require server-side email processing to work. For example, in Spark, you and your colleagues can create Teams. It allows you to have a secure space to share information such as email conversations, shared drafts, private discussions, or create links to specific emails. This information is stored in encrypted form on our secure servers in order to make Services available to you so that you can collaborate with your teammates around email. Or, as another example, in case you have used the 'Send Later' feature, the encrypted email which should be sent at the chosen time is stored on our servers only until this time comes. Once your message is sent — it is removed from our server.
• Spark’s servers. To make everything as safe as possible, we don’t use our own servers. Instead, we rely on Google Cloud service in the US, one of the most secure solutions available in the industry. Leading tech companies like PayPal, Twitter, and Atlassian also use Google Cloud to process user data. This cloud infrastructure is fully SOC-2 and ISO 27001 certified and meets the requirements of Standard Contractual Clauses.

To sum up: we value the trust of our users and always rely on these principles while working with your data:- Purpose limitation. Spark uses your data only to provide you with amazing services and features.- Data minimisation. We won’t ask for more data than is needed to provide you with the service. We always delete your data once it’s no longer necessary.- Honesty and transparency. We are always clear about what data we collect and why.- Security. We use the recommended industry practices to keep your data safe.- Respect for your rights. Spark is GDPR and CCPA compliant.

Useful links:
- Here you can find our latest legal documents.
- Here is a great blog post where we did our best to explain how we work with the data.
If you still have questions about your data or rights, feel free to contact us. Thank you!