SparkJam Co., Limited

AuraCue Privacy Policy

Last Updated: October 22, 2026

Introduction

SparkJam Co., Limited ("SparkJam," "we," "us," or "our") operates the AuraCue iOS application (the "App"). This Privacy Policy explains how we collect, use, share, retain, and protect information when you use the App.

AuraCue does not require your name, email address, or social login to create an account. When you first use the App, AuraCue creates a pseudonymous guest account to operate requests, store selected preferences, maintain security, and associate tasks with the correct installation.

Although the guest account does not require your name or email address, information associated with a guest user ID, device identifier, request, task, resource, or installation may be linked to that guest account or device. You can delete the guest account and associated data from within the App.

Information We Collect

Information You Provide

We may collect information you choose to provide, including:

Personalization information: Settings, preferences, selections, and other context you provide to tailor the Service. This information may be stored locally and in a limited server-side profile linked to your guest account.
Uploaded content: Screenshots or images you select and content visible in them, such as conversation text, names, usernames, profile images, timestamps, and emojis.
Request context: The intent, background, or instructions you provide for a reply or analysis.
Support information: Your email address, feedback, attachments, and diagnostic details when you contact us.

Information Generated by the Service

To provide requested features, AuraCue may generate or derive OCR text, conversation structure, contextual signals, suggested replies, explanations, next-step recommendations, safety flags, task status, and error information.

AI-generated interpretations may be incomplete, inaccurate, or ambiguous and should not be treated as verified facts about another person. Content you submit may incidentally contain personal or sensitive information about you or another person. Please do not include information that is unnecessary for your request.

Information Collected Automatically

We may collect:

pseudonymous guest-account, authentication, service, and device identifiers, including IDFA when available after you grant ATT permission;
device type, iOS version, App version, language, and time zone;
App interactions, such as completing setup, submitting requests, viewing results, and using result actions;
network and service information, including your IP address and limited technical request data used for service operation, security, abuse prevention, and diagnostics;
crash reports, performance data, network status, and related diagnostic information.

How We Collect Information

We collect information directly from you when you select or enter content, configure available settings, submit a request, or contact support. We collect limited device, usage, and diagnostic information automatically through the App and its integrated SDKs. We may also receive limited installation, referral, or diagnostic information from Apple and our service providers where applicable.

Purchase information. For App Store purchases, we receive transaction identifiers, product and subscription information, and, where available, pricing and currency information through Apple’s purchase and verification services. We associate this information with your guest account to verify purchases, provide and restore subscription access, provide customer support, and analyze subscription activity. Apple processes payments; we do not receive your full payment card details.

How We Use Information

We use information to:

create and operate the guest account;
store and apply personalization information you provide;
process selected screenshots and request context;
generate and personalize replies and analysis;
store and display submitted content and generated results so you can revisit them during the retention periods described below;
provide content-safety controls and customer support;
maintain security, prevent fraud and abuse, diagnose failures, and enforce our terms;
measure App reliability, usage, and approved conversion events; and
comply with legal obligations and protect rights and safety.

For first-party analytics, AuraCue may use pseudonymous guest or device identifiers, product-interaction events, structured preferences and assessment responses, and structured request or result metadata, such as request status, processing duration, error category, and result labels. We do not use selected screenshots, conversation text, free-text request context, or generated reply or analysis text for first-party analytics.

AuraCue does not provide selected screenshots, conversation content, AI prompts, personalization information, or AI-generated results to third-party analytics or advertising-attribution providers.

AI Processing

When you use an AI feature, AuraCue asks for your explicit permission before sharing selected content with third-party OCR or AI providers.

Selected screenshots are uploaded to private Tencent Cloud Object Storage (COS) and sent to Google Cloud Vision for text extraction.

Extracted conversation text and relevant request details—including your instructions, background, language, and selected personalization settings—are sent to Tencent Cloud Model Service (TokenHub), where DeepSeek and GLM models generate and validate replies and analysis.

AuraCue does not automatically redact personal information in selected screenshots, extracted text, or request details before this processing. Shared content may therefore include personal or sensitive information about you or other people.

AuraCue limits sharing to information reasonably necessary to provide the requested feature. AuraCue does not use submitted content for advertising or to train its own models.

You can withdraw this permission at any time through Me > AI Data & Privacy. After withdrawal, AuraCue will not send new content to these providers unless you allow processing again. Withdrawing permission does not delete data previously submitted. To delete data associated with your guest account, use Me > Delete Account or contact us.

Photos and Information About Other People

AuraCue uses Apple’s system photo picker. The App receives only the screenshots or images you explicitly select and does not receive permission to browse or scan your full photo library. Selected images are uploaded only after you initiate a reply or analysis request.

Before upload, AuraCue removes available EXIF metadata, including GPS coordinates, device model, and capture time. Images may be re-encoded when needed for orientation correction or compression and may retain other metadata, such as XMP.

Before uploading, review the content and remove information that is unnecessary for your request, such as names, usernames, profile photos, contact details, and addresses. Do not upload passwords, verification codes, government identification numbers, or payment account details. Submit information about another person only if you have their permission or are otherwise legally authorized to share it with AuraCue and the providers described in this Policy.

We do not sell your personal information. We share only the information reasonably necessary to operate AuraCue, provide requested features, measure performance, maintain security, or comply with law.

Service providers may include:

Tencent Cloud infrastructure and Cloud Object Storage (COS), which host AuraCue’s backend and store the account, preference, uploaded-content, task, result, and operational data needed to provide the Service.
Google Cloud Vision, which receives selected screenshots to extract conversation text.
Tencent Cloud Model Service (TokenHub), through which AuraCue uses DeepSeek and GLM models. It receives extracted conversation text, relevant request details, and applicable personalization settings to generate and validate replies and analysis.
Firebase Analytics and Crashlytics, which may receive pseudonymous identifiers, approved interaction events, crash reports, performance data, and diagnostic information.
Meta App Events and Adjust, which may receive IDFA when available after ATT authorization, installation and campaign information, approved conversion events, and fraud-prevention signals.
Google Workspace, which processes information you voluntarily provide when contacting customer support.

Service Provider Safeguards

We require third parties that receive personal information from AuraCue to provide the same or equivalent protection described in this Policy and required by applicable law. When a provider processes information on our behalf, it may use the information only to provide the agreed services and for the purposes described in this Policy. We require appropriate confidentiality, security, access-control, retention, and deletion measures, as well as comparable data-protection obligations for subprocessors. Where a provider acts as an independent controller, its own privacy terms also apply.

We do not provide screenshots, conversation content, AI prompts, personalization information, or AI-generated results to analytics or advertising-attribution providers.

We may also disclose information where required by law, to protect users or maintain security, in connection with a business transfer, or at your direction.

International Processing

Information may be stored or processed outside the country where you live. Uploaded images are currently stored in Tencent Cloud Object Storage (COS) in the Silicon Valley region of the United States.

Other processing may occur in locations used by Google Cloud Vision, Tencent Cloud Model Service (TokenHub), and the other providers described in this Policy. The image-storage region does not determine where all processing occurs.

Analytics, Attribution, and App Tracking Transparency

Firebase Analytics and Crashlytics may process pseudonymous App identifiers, device and App information, approved interaction events, crash reports, and related diagnostic information. Meta App Events and Adjust may process permitted App or device identifiers, installation and campaign information, approved conversion events, and fraud-prevention signals.

For first-party analytics, AuraCue may process guest and device identifiers, including IDFA when available after you grant ATT permission. We use these identifiers for service operation and internal analytics and do not combine first-party analytics data with other companies’ data for advertising targeting or measurement. Meta App Events and Adjust may access IDFA and use permitted device identifiers and conversion events for cross-app advertising attribution only after you authorize tracking through App Tracking Transparency ("ATT"). If permission is denied or unavailable, AuraCue does not provide IDFA for tracking-based attribution and may use Apple-permitted non-tracking measurement. Refusing ATT does not affect AuraCue’s core features. You can change your choice in iOS Settings under Privacy & Security > Tracking.

Data Retention and Account Deletion

History records. We retain your saved reply and analysis history, including the uploaded images associated with those records, images used as history covers, and generated results, until you delete the relevant records or your guest account, subject to the limited retention described below. This allows you to revisit your previous results. You can delete individual records in History or delete your guest account through Me > Delete Account.

Deleting history. When you delete a history record, we remove it from History and initiate permanent deletion of the associated uploaded images, cover images, and generated results from our active systems. Storage cleanup and deletion from backups may take additional time, subject to the limited retention described below.

Temporary processing data. Uploaded content and intermediate processing data that are not retained as part of a saved history record are deleted within 24 hours after the request is canceled, fails, or is otherwise abandoned, unless limited retention is required for the purposes described below.

Purchase records. We retain transaction and subscription records only for as long as necessary to manage subscriptions, restore purchases, prevent fraud, resolve disputes, and comply with legal obligations.

Account and personalization data. Guest-account records, preferences, Role Match answers, and Role Match reports are retained while the guest account remains active or until they are no longer needed to provide the Service. They are removed from active systems when account deletion succeeds, subject to the limited retention described below.

Analytics, diagnostics, support, and backups. First-party analytics and diagnostic records are retained only for periods reasonably necessary for service operation, security, troubleshooting, and measurement. Support communications are retained as needed to resolve requests and maintain support records. Backup copies and copies held by service providers may remain until their applicable retention cycles end or they are overwritten.

Account deletion. You can request deletion through Me > Delete Account. A successful request disables the guest account and its sessions, removes stored preferences, Role Match data, and private task content from the active application database, and schedules associated image objects for asynchronous deletion.

Limited account, security, and deletion-audit records may be retained where necessary for legal compliance, fraud prevention, security, or dispute resolution. Deleting the App does not by itself delete your guest account or server-side data.

Your Choices and Rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information; object to or restrict certain processing; withdraw consent; opt out of certain advertising disclosures; and appeal a privacy-request decision.

You may choose whether to provide optional personalization information. You can delete your guest account and associated data using the in-app account-deletion control and deny or revoke ATT in iOS Settings. To request access to or correction of your personal information, or to make another privacy request, contact customer-service@spark-jam.top with the subject line “AuraCue Privacy Request.”

Security

We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, use, alteration, or disclosure. No transmission or storage method is completely secure, so we cannot guarantee absolute security.

Children’s Privacy

AuraCue is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that such information has been collected, we will delete it as required by applicable law.

Third-Party Links and Services

The App may link to services that SparkJam does not control. This Privacy Policy does not govern the independent practices of Apple or other third parties when they act for their own purposes. Please review their privacy policies before providing information directly to them.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in the App, our data practices, law, or technology. Where required, we will provide additional notice or request consent before a material change takes effect.

Contact Us

If you have questions, complaints, or privacy requests, contact us at:

SparkJam Co., Limited
Email: customer-service@spark-jam.top