Saypoint privacy policy
This privacy policy is from SPARCPOINT, LLC, doing business as Sparcpoint ("we", "us", "our"). It describes how and why we access, collect, store, use and share ("process") your personal information when you use Saypoint, the app for Android, its server, and this website (together, the "Services"). It says what stays on your phone, what reaches Saypoint's server and when, and how long it is kept.
If you do not agree with this policy, please do not use the Services. If you have questions or concerns, write to support@sparcpoint.com.
Summary of key points
- What we process. Recording, transcription and your lists work without signing in and stay on your phone. Our server receives data only when you sign in with Google, add a contact address, buy minutes, redeem a promo code, or turn AI on.
- Sensitive information. We do not ask for sensitive personal information such as your race, religion, health, precise location or contacts. What you say in a recording is yours; with AI on, it passes through our server only to be answered, and is not kept.
- Third parties. We collect nothing about you from third parties beyond what Google sends when you sign in with it.
- Sharing. We sell nothing and share nothing for advertising. Service providers process data for us, as listed below.
- Safety. We use technical and organisational safeguards, but no system is perfectly secure.
- Your rights. Depending on where you live, you may be able to see, correct, delete or take a copy of your data. You can delete your account yourself.
What stays on your phone
Recording, transcription and your lists work without signing in. Your notes and recordings stay on your phone.
What reaches Saypoint's server
Saypoint's server receives data only at these moments:
- When you sign in with Google: your Google email address and your Google account's identifier, to manage your account.
- If you add a contact address: that email address, to manage your account.
- When you buy minutes: a record of the purchase.
- With AI on: your recording, its words, and the list details the AI needs to sort them: list names, descriptions, groups, instructions, recent item names and a follow-up's subject. The server also keeps a usage record for each AI run.
- When you redeem a promo code: a record of the redemption.
Saypoint does not collect device identifiers.
All personal information you give us must be true, complete and accurate, and you must tell us if it changes.
Sensitive information
We do not ask for or process sensitive personal information, such as racial or ethnic origin, sexual orientation, religious belief, health, precise location or financial account details. We do not collect payment card details: Google Play takes payment, and we receive only a record of the purchase. Your recordings are your own content; what is in them is up to you, and the section on your recordings and AI says how they are handled.
Information from third parties
When you sign in with Google, Google tells us your email address and your Google account's identifier. We collect no other information about you from third parties.
Sign in with Google
Signing in with Google is how you create a Saypoint account. We use what Google sends only for the purposes in this policy. We do not control how Google uses your information; Google's own privacy policy explains that, and how you can set your preferences with Google.
How we process your information
We process your information to:
- create your account, sign you in and keep your account working;
- deliver the service you ask for, such as AI that sorts and tidies what you say, and keep a count of the minutes you have;
- process your purchases and promo codes, and prevent abuse of free minutes and codes;
- send you messages about your account, such as the code that confirms your email address, and answer you when you write to us;
- keep the Services secure, find and fix problems, and prevent fraud; and
- comply with law, respond to legal requests, and exercise or defend our legal rights.
We process your information for other purposes only with your consent.
Legal bases
We process your personal information only when we have a valid reason to under the law that applies to you: with your consent, to provide you the Services and carry out our agreement with you, to comply with the law, to protect your rights or ours, or for our legitimate business interests, such as keeping the Services secure and preventing misuse.
If you are in Canada: we process your information if you have given us permission for a specific purpose (express consent), or where your permission can be inferred (implied consent). You can withdraw your consent at any time by writing to us. In some limited cases the law lets us process information without consent, for example to investigate a breach of an agreement or to detect and prevent fraud, in a business transaction that meets the conditions the law sets, or where disclosure is required by a subpoena, warrant, court order or court rules.
Your recordings and AI
Your recording and its words go to Saypoint's server only with AI on. The server keeps them only while it answers the request. The AI provider runs under a no-retention, no-training setting, so it neither keeps them nor trains on them. Nothing of them is retained.
Service providers
These companies process data for Saypoint as service providers:
- Google, for sign-in and Google Play billing.
- OpenRouter and the model providers it routes to, for AI. They process your recording, its words and the list details above.
- SendGrid, for email. It processes the address it sends mail to, for example when it sends the code that confirms your email address.
- Microsoft Azure, which hosts Saypoint's server and this website.
No sharing, no advertising
Saypoint does not sell your data and shares none of it with third parties for their own use. None of it is used for advertising, analytics or personalisation. Apart from the service providers above, we disclose personal information only in these situations:
- Legal requirements. Where the law, a court order or a valid legal request requires it, or to establish, exercise or defend legal claims.
- Business transfers. In connection with, or during negotiations of, a merger, sale of company assets, financing, or acquisition of all or part of our business. Any new owner would be bound by this policy for the data it receives.
Cookies and tracking
The Saypoint app sets no cookies and has no advertising or analytics tracking. This website sets no cookies and uses no tracking technologies, as the section on this website says. Because nothing is tracked, we do not "sell" or "share" personal information for targeted advertising, as those terms are used in US state privacy laws.
How long data is kept
| Data | Kept | When you delete your account |
|---|---|---|
| Your email addresses: Google, contact, and one waiting to be confirmed | Until you delete your account. An address waiting to be confirmed is kept until it is confirmed, replaced or cleared. | All three are erased. |
| Your account, sign-in sessions and minute balance | Until you delete your account. | Deleted. |
| Purchase history | Until you delete your account. | Deleted, and any remaining paid balance is forfeited. |
| Usage records, one per AI run | Until you delete your account. | Deleted. |
| Usage exports: month, plan, kind of job, amount used and time | Kept. | Not deleted. They hold no account identifier. |
| Promo redemption and gift records | Until you delete your account. | Deleted. |
| A one-way hash for each code you redeemed | Until the code's own records are removed. | Kept. |
| Recordings, their words and list details sent for AI | Not kept. | Nothing to delete. |
| Backup copies of the data above | At most 35 days after a deletion or change. | Never restored for a deleted account. |
Deleting your account
You can delete your account in the app, at Options › Account › Delete my account, or by email. Delete your Saypoint account explains both routes.
What is kept after deletion
Deletion leaves two one-way hashes:
- one of your Google account identifier with the date your free minutes were granted, kept so that deleting and re-creating an account cannot get the free minutes a second time;
- one of each code you redeemed with your Google account identifier, kept so the same code cannot be redeemed twice.
Usage exports hold no account identifier, so they are not deleted with your account. Backups expire within 35 days and are never restored for a deleted account.
Security
All data is encrypted in transit. Every connection the app makes to Saypoint's server uses HTTPS. We use reasonable technical and organisational measures to protect the personal information we process. No electronic transmission or storage can be guaranteed to be completely secure, so we cannot promise that no one will ever defeat our safeguards and improperly access or change your information. Use the Services on a device and network you trust.
Age
Saypoint is for people aged 13 or older, as the terms of service say. We do not knowingly collect personal information from anyone under 13. If you believe a person under 13 has given us personal information, write to us and we will delete it.
Your privacy rights
Depending on where you live, you may have rights over your personal information. These can include the right to know whether we process it, to access it and get a copy, to correct inaccuracies, to have it deleted, to restrict or object to its processing, to take it with you in a portable form, and to withdraw consent you gave. These rights are not absolute, and the law may let us decline a request in some cases. You will not be treated worse for using them.
Depending on your state, US privacy laws can also give you the right to opt out of targeted advertising, the sale of personal data, and profiling that has legal or similarly significant effects. We do none of these, and we make no decision about you that has legal or similarly significant effects by automated means alone. A state may also give you the right to a list of the categories of third parties, or the specific third parties, to which we have disclosed personal data. The service providers above are that list.
You can review or change your account information, or end your account, at any time. You can delete your account in the app, as the section on deleting your account explains. When you delete it, we delete or de-identify your information, except what this policy says is kept. If you withdraw consent, that does not affect processing done before you withdrew it.
How to use your rights
Write to support@sparcpoint.com. We will answer in line with the law that applies to you, usually within 45 days. We need to confirm that you are the person the information is about, so we may ask for the email address on your account, or for more information if that is not enough. We use what you send only to verify your identity and handle your request.
Where state law allows, you can have an authorized agent make a request for you. We may refuse a request from an agent who does not send proof, such as your written and signed permission, that they may act for you.
If we decline your request, you can appeal by replying to our answer or writing to the same address. We will tell you in writing what we decided and why. If we deny your appeal, you may complain to your state attorney general.
Categories of personal information we have collected
In the past twelve months we have collected these categories of personal information, as US state privacy laws name them. We have not sold or shared any of it for advertising, and we have disclosed it only to the service providers above.
- Identifiers: yes. Your Google email address, your Google account's identifier, and the contact address you add.
- Commercial information: yes. A record of the minutes you buy, your balance, and promo codes you redeem. Payment details stay with Google Play.
- Audio or similar information: yes, not retained. With AI on, your recording, passed through our server only to be answered and not kept.
- Internet or network activity: yes. A usage record for each AI run (month, plan, kind of job, amount used and time). No browsing history.
- Biometric information: no. Saypoint turns speech into words. It does not create voiceprints or identify you by your voice.
- Geolocation data: no. Not collected.
- Protected characteristics, professional or education information, inferences, and sensitive personal information: no. Not collected.
California "Shine the Light"
California Civil Code section 1798.83 lets California residents ask, once a year and free of charge, which categories of personal information a business disclosed to third parties for their direct marketing, and to whom. We disclose none for direct marketing. To ask, write to us at the address in the Contact section.
Do Not Track
Many browsers and mobile systems offer a Do-Not-Track setting. There is no uniform standard for recognising these signals, so we do not respond to them. This does not change anything in practice: the Services do not track you across other websites or apps.
This website
This website collects nothing. It sets no cookies, has no forms or analytics, and loads nothing from another host. Microsoft Azure, which hosts it, processes standard request data, such as your IP address, to serve the pages.
Changes to this policy
We may update this policy from time to time, for example to stay in line with the law or with changes to the Services. The new version shows an updated "Last updated" date at the top. If we make a material change, we may also tell you in the app or by email. Please review this page from time to time.
Contact
Questions or comments about this policy, or a request about your information: write to support@sparcpoint.com, or by mail to SPARCPOINT, LLC, 3608 Rockwood Drive, Fort Wayne, IN 46815, United States.