Privacy Policy
Last updated: 7 April 2026
The short version: There is no Soul Spark server that holds a profile of you. Your data is not sold, not shared with advertisers, and not used to train AI models. Some features make limited external API calls (market prices, weather) — only functional identifiers like ticker symbols or city names leave the system, never your personal history or insights.
1. Who this applies to
This Privacy Policy applies to all users of the Soul Spark application and the soulspark.me website. It describes what data is collected, how it is used, and your rights in relation to it. The product is operated by Sameer Bhalerao, based in Luxembourg.
Soul Spark is currently in private beta, running as a personal tool on the founder's own hardware. There is no centralised Soul Spark server or multi-tenant cloud database. This policy reflects that architecture honestly and will be updated as the product evolves.
2. What data we collect
Account data: When you register or request access, we collect your name and email address. This is used solely to manage your access to the product.
Life data you provide: Health metrics, financial records, journal entries, and other personal data you input are stored in a local database on the infrastructure running the app. In the current beta, that infrastructure is the founder's personal machine — not a public cloud service. This data is used only to generate your insights and is never transmitted to Soul Spark as a company, because that entity does not have servers.
Connected service data: If you connect third-party services (financial accounts, calendar, health platforms), that data is pulled on your behalf and used to generate insights. It is stored locally alongside your other data. It is not forwarded to any third party beyond what is described in Section 4.
Booking data: If you book a call via the website, we collect your name, email address, preferred date and time, and any context you provide. This is used solely to manage the booking.
Interest list data: If you sign up to the interest list, we store your name and email to contact you about beta access and product updates.
Usage and error data: Basic non-identifying technical information (session timestamps, error logs) may be retained locally. We do not use third-party analytics that track personal browsing behaviour.
3. How we use your data
- To provide and maintain your access to Soul Spark
- To communicate with you about your account, bookings, and beta access
- To improve the product based on aggregated, anonymised feedback
- To respond to support requests
We do not use your data to train AI models, serve advertising, build profiles for sale, or share with third parties for their marketing purposes.
4. Architecture — where your data actually lives
Soul Spark is architected as a local-first system. Your life data (health, finance, journal, social, career signals) is stored in a local database on the machine running the app. In the current private beta, that machine is the founder's personal hardware. There is no centralised Soul Spark cloud database that aggregates user data.
Access to the app from outside the local network is provided via an encrypted Cloudflare Tunnel. Cloudflare routes the connection but does not have access to plaintext application content.
AI interpretation within the app is powered by Ollama — a locally-run inference engine. In the current beta this runs on the founder's machine. In future, the roadmap is for inference to run on-device for each user, eliminating the need for any shared AI infrastructure. Your prompts and context are not sent to OpenAI, Google, or any commercial AI cloud.
5. Third-party services we use
The following external services may receive limited functional data as part of normal product operation. In all cases, only the minimum data needed for the specific feature is sent — never your personal history, insights, or identifying profile.
| Service | Data sent externally | Purpose |
|---|---|---|
| Vercel | Request metadata | Website hosting (soulspark.me) |
| Google Calendar API | Calendar events (with your auth) | Booking management |
| Gmail / Nodemailer | Name and email | Booking confirmations |
| Cloudflare Tunnel | Encrypted tunnel traffic | Secure app access — plaintext not visible to Cloudflare |
| Yahoo Finance / yfinance | Ticker symbols only | Live market and FX prices |
| Open-Meteo | City-level location | Weather and AQI context |
| Spoonacular | Search terms only | Recipe discovery |
| Amadeus | Origin and destination cities | Travel search |
| Ollama (local inference) | Query context (current beta: founder's machine) | AI interpretation — not routed through OpenAI or Google |
6. Data storage and retention
Your life data is stored in a local database on the infrastructure running the Soul Spark app. In the current private beta, that is the founder's personal machine. It is not stored in a commercial cloud database and is not accessible to Soul Spark as a company.
Account and interest list data (name, email) is retained until you ask us to delete it. Booking data is retained for up to 12 months. The soulspark.me website is hosted via Vercel, subject to Vercel's own data processing terms.
7. Your rights (GDPR)
Under GDPR, you have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Rectification: Ask us to correct inaccurate data
- Erasure: Ask us to delete your data ("right to be forgotten")
- Restriction: Ask us to limit how we process your data
- Portability: Request your data in a portable format
- Objection: Object to processing based on legitimate interests
To exercise any of these rights, contact us at sameerbh08@gmail.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Commission Nationale pour la Protection des Données (CNPD) in Luxembourg at cnpd.public.lu.
8. Cookies
The soulspark.me website uses minimal cookies — only those required for basic site functionality and session management. We do not use advertising cookies or third-party tracking cookies. No consent banner is required for strictly necessary cookies under EU GDPR.
9. Children's privacy
Soul Spark is not directed at or intended for use by children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the product after changes constitutes your acceptance of the updated policy.
11. Contact
For any privacy-related questions or to exercise your rights, contact: sameerbh08@gmail.com