Saypoint privacy policy
This privacy policy is from SPARCPOINT, LLC, doing business as Sparcpoint ("we", "us", "our"). It describes how and why we access, collect, store, use and share ("process") your personal information when you use Saypoint, the app for Android, its server, and this website (together, the "Services"). It says what stays on your phone, what reaches Saypoint's server and when, and how long it is kept.
If you do not agree with this policy, please do not use the Services. If you have questions or concerns, write to support@sparcpoint.com.
Summary of key points
- What we process. You sign in with Google to use Saypoint. Recording, transcription and your lists stay on your phone, and once you're signed in they work offline. Our server receives data when you sign in with Google, add a contact address, buy minutes, redeem a promo code, send feedback, or use AI with a confirmed account.
- Sensitive information. We do not ask for sensitive personal information such as your race, religion, health, precise location or contacts. What you say in a recording is yours; with AI, it goes to our server to be processed, and the results are kept for 7 days or until the app applies them, whichever comes first.
- Third parties. We collect nothing about you from third parties beyond what Google sends when you sign in with it.
- Sharing. We sell nothing and share nothing for advertising. Service providers process data for us, as listed below.
- Safety. We use technical and organisational safeguards, but no system is perfectly secure.
- Your rights. Depending on where you live, you may be able to see, correct, delete or take a copy of your data. You can delete your account yourself.
What stays on your phone
You sign in with Google to use Saypoint. Your notes and recordings stay on your phone.
Memory, a short list of things the app learns about you, is kept on your phone and in Android’s backup of the app. You can read it, delete lines or switch it off in the app at Settings › Memory.
What reaches Saypoint's server
Saypoint's server receives data only at these moments:
- When you sign in with Google (required to use Saypoint): your Google email address and your Google account's identifier, to manage your account.
- If you add a contact address: that email address, to manage your account.
- When you buy minutes: a record of the purchase.
- For AI with a confirmed account: captures and field dictations send your recording to our server for processing by job, with list details the AI needs to sort them (list names, descriptions, groups, instructions, recent item names, a follow-up's subject). The server keeps a usage record for each AI run. A capture job's result is kept until the app applies it or 7 days pass, whichever comes first; after that, it is deleted. Dictation audio is never stored. Job context is deleted when the job finishes.
- With memory on: each AI request also carries the memory list. Now and then the app sends a memory update: the list, the lines you have deleted (so they are not learned again) and what you have recorded or typed since the last update. The server returns changes to the list and keeps none of it once the update finishes; its result is kept until the app applies it or 7 days pass. Memory updates use no minutes.
- When you redeem a promo code: a record of the redemption.
- When you send feedback: what you write, up to five photos you pick, and the activity log if you include it, with your account so we can reply to its email address. We also receive it by email, photos included.
Saypoint does not collect device identifiers.
All personal information you give us must be true, complete and accurate, and you must tell us if it changes.
Sensitive information
We do not ask for sensitive personal information. What you say is your own content and may contain some. Memory is told never to keep your health or sexuality, anything sensitive about other people, passwords, PINs, or card and account numbers; it may keep that someone has died and when, but never the illness or the cause. Anything else you say may appear in it until you delete it. We do not collect payment card details: Google Play takes payment, and we receive only a record of the purchase.
Information from third parties
When you sign in with Google, Google tells us your email address and your Google account's identifier. We collect no other information about you from third parties.
Sign in with Google
Signing in with Google is how you create a Saypoint account. We use what Google sends only for the purposes in this policy. We do not control how Google uses your information; Google's own privacy policy explains that, and how you can set your preferences with Google.
How we process your information
We process your information to:
- create your account, sign you in and keep your account working;
- deliver the service you ask for, such as AI that sorts and tidies what you say, and keep a count of the minutes you have;
- process your purchases and promo codes, and prevent abuse of free minutes and codes;
- send you messages about your account, such as the code that confirms your email address, and answer you when you write to us;
- keep the Services secure, find and fix problems, and prevent fraud; and
- comply with law, respond to legal requests, and exercise or defend our legal rights.
We process your information for other purposes only with your consent.
Legal bases
We process your personal information only when we have a valid reason to under the law that applies to you: with your consent, to provide you the Services and carry out our agreement with you, to comply with the law, to protect your rights or ours, or for our legitimate business interests, such as keeping the Services secure and preventing misuse.
If you are in Canada: we process your information if you have given us permission for a specific purpose (express consent), or where your permission can be inferred (implied consent). You can withdraw your consent at any time by writing to us. In some limited cases the law lets us process information without consent, for example to investigate a breach of an agreement or to detect and prevent fraud, in a business transaction that meets the conditions the law sets, or where disclosure is required by a subpoena, warrant, court order or court rules.
Your recordings and AI
When you use AI with a confirmed account, your recording goes to Saypoint's server as a job. For captures, the server keeps your audio only while processing the job and deletes it when the job finishes or fails. For field dictations, the server never stores your audio. The transcript and other results are kept for 7 days or until the app applies them, whichever comes first; after that, they are deleted. The AI provider runs under a no-retention, no-training setting, so it neither keeps your audio nor trains on it.
Memory is told never to remember your health or sexuality, anything sensitive about other people, passwords, PINs, or card and account numbers. It may remember that someone has died and when, but never the illness or the cause. You can delete any line, and a deleted line is not learned again in the same words.
Service providers
These companies process data for Saypoint as service providers:
- Google, for sign-in and Google Play billing.
- OpenRouter and the model providers it routes to, for AI. They process your recording, its words and the list details above.
- SendGrid, for email. It processes the address it sends mail to, for example when it sends the code that confirms your email address, and the feedback you send, photos included, which it delivers to us.
- Microsoft Azure, which hosts Saypoint's server and this website.
No sharing, no advertising
Saypoint does not sell your data and shares none of it with third parties for their own use. None of it is used for advertising, analytics or personalisation. Apart from the service providers above, we disclose personal information only in these situations:
- Legal requirements. Where the law, a court order or a valid legal request requires it, or to establish, exercise or defend legal claims.
- Business transfers. In connection with, or during negotiations of, a merger, sale of company assets, financing, or acquisition of all or part of our business. Any new owner would be bound by this policy for the data it receives.
Cookies and tracking
The Saypoint app sets no cookies and has no advertising or analytics tracking. This website sets no cookies and uses no tracking technologies, as the section on this website says. Because nothing is tracked, we do not "sell" or "share" personal information for targeted advertising, as those terms are used in US state privacy laws.
How long data is kept
| Data | Kept | When you delete your account |
|---|---|---|
| Your email addresses: Google, contact, and one waiting to be confirmed | Until you delete your account. An address waiting to be confirmed is kept until it is confirmed, replaced or cleared. | All three are erased. |
| Your account, sign-in sessions and minute balance | Until you delete your account. | Deleted. |
| Purchase history | Until you delete your account. | Deleted, and any remaining paid balance is forfeited. |
| Usage records, one per AI run | Until you delete your account. | Deleted. |
| Usage exports: month, plan, kind of job, amount used and time | Kept. | Not deleted. They hold no account identifier. |
| Promo redemption and gift records | Until you delete your account. | Deleted. |
| A one-way hash for each code you redeemed | Until the code's own records are removed. | Kept. |
| Capture job audio segments | Stored only while the job is processing. Deleted when the job finishes or fails. Unsealed jobs are purged after 24 hours. | Deleted with the job. |
| Capture job results (transcript, title, items) | Kept for 7 days after the job finishes, or until the app applies it, whichever comes first. | Deleted with the job. |
| Dictation audio | Never stored. | Nothing to delete. |
| Job context and metadata | Deleted when the job finishes. | Deleted with the job. |
| Memory update inputs (memory list, deleted lines, recent words) | Deleted when the update finishes or fails. | Deleted with the job. |
| Memory update results (changes to the list) | Kept until the app applies them, or 7 days after the update finishes. | Deleted with the job. |
| Feedback reports (your words, up to five photos, an optional activity log) | Kept 90 days after it arrives. | Deleted. |
| Feedback emailed to us (photos included) | Kept in our mailbox. | Not deleted with your account. |
| Backup copies of the data above | At most 35 days after a deletion or change. | Never restored for a deleted account. |
Deleting your account
You can delete your account in the app, at Options › Account › Delete my account, or by email. Delete your Saypoint account explains both routes. When you delete your account in the app, your job data and results are deleted at once. If we delete it for you after an emailed request, the job data is deleted from our records at once and any stored job audio is removed within 2 to 8 days.
What is kept after deletion
Deletion leaves two one-way hashes:
- one of your Google account identifier with the date your free minutes were granted, kept so that deleting and re-creating an account cannot get the free minutes a second time;
- one of each code you redeemed with your Google account identifier, kept so the same code cannot be redeemed twice.
Usage exports hold no account identifier, so they are not deleted with your account. Backups expire within 35 days and are never restored for a deleted account.
Security
All data is encrypted in transit. Every connection the app makes to Saypoint's server uses HTTPS. We use reasonable technical and organisational measures to protect the personal information we process. No electronic transmission or storage can be guaranteed to be completely secure, so we cannot promise that no one will ever defeat our safeguards and improperly access or change your information. Use the Services on a device and network you trust.
Age
Saypoint is for people aged 13 or older, as the terms of service say. We do not knowingly collect personal information from anyone under 13. If you believe a person under 13 has given us personal information, write to us and we will delete it.
Your privacy rights
Depending on where you live, you may have rights over your personal information. These can include the right to know whether we process it, to access it and get a copy, to correct inaccuracies, to have it deleted, to restrict or object to its processing, to take it with you in a portable form, and to withdraw consent you gave. These rights are not absolute, and the law may let us decline a request in some cases. You will not be treated worse for using them.
Depending on your state, US privacy laws can also give you the right to opt out of targeted advertising, the sale of personal data, and profiling that has legal or similarly significant effects. We do none of these, and we make no decision about you that has legal or similarly significant effects by automated means alone. A state may also give you the right to a list of the categories of third parties, or the specific third parties, to which we have disclosed personal data. The service providers above are that list.
You can review or change your account information, or end your account, at any time. You can delete your account in the app, as the section on deleting your account explains. When you delete it, we delete or de-identify your information, except what this policy says is kept. If you withdraw consent, that does not affect processing done before you withdrew it.
How to use your rights
Write to support@sparcpoint.com. We will answer in line with the law that applies to you, usually within 45 days. We need to confirm that you are the person the information is about, so we may ask for the email address on your account, or for more information if that is not enough. We use what you send only to verify your identity and handle your request.
Where state law allows, you can have an authorized agent make a request for you. We may refuse a request from an agent who does not send proof, such as your written and signed permission, that they may act for you.
If we decline your request, you can appeal by replying to our answer or writing to the same address. We will tell you in writing what we decided and why. If we deny your appeal, you may complain to your state attorney general.
Categories of personal information we have collected
In the past twelve months we have collected these categories of personal information, as US state privacy laws name them. We have not sold or shared any of it for advertising, and we have disclosed it only to the service providers above.
- Identifiers: yes. Your Google email address, your Google account's identifier, and the contact address you add.
- Commercial information: yes. A record of the minutes you buy, your balance, and promo codes you redeem. Payment details stay with Google Play.
- Audio or similar information: yes. With AI and a confirmed account, your capture recording is stored until the job finishes or fails; field dictation audio is never stored. Results are kept for 7 days or until the app applies them, whichever comes first. Also your feedback and the photos you attach.
- Internet or network activity: yes. A usage record for each AI run (month, plan, kind of job, amount used and time). No browsing history.
- Biometric information: no. Saypoint turns speech into words. It does not create voiceprints or identify you by your voice.
- Geolocation data: no. Not collected.
- Inferences: yes, with memory on. Short facts about you that the AI draws from what you record and type, returned to your phone and kept there; the server holds them only as memory update results, as above.
- Protected characteristics, professional or education information, and sensitive personal information: no. Not collected.
California "Shine the Light"
California Civil Code section 1798.83 lets California residents ask, once a year and free of charge, which categories of personal information a business disclosed to third parties for their direct marketing, and to whom. We disclose none for direct marketing. To ask, write to us at the address in the Contact section.
Do Not Track
Many browsers and mobile systems offer a Do-Not-Track setting. There is no uniform standard for recognising these signals, so we do not respond to them. This does not change anything in practice: the Services do not track you across other websites or apps.
This website
This website collects nothing. It sets no cookies, has no forms or analytics, and loads nothing from another host. Microsoft Azure, which hosts it, processes standard request data, such as your IP address, to serve the pages.
Changes to this policy
We may update this policy from time to time, for example to stay in line with the law or with changes to the Services. The new version shows an updated "Last updated" date at the top. If we make a material change, we may also tell you in the app or by email. Please review this page from time to time.
Contact
Questions or comments about this policy, or a request about your information: write to support@sparcpoint.com, or by mail to SPARCPOINT, LLC, 3608 Rockwood Drive, Fort Wayne, IN 46815, United States.