Sparko
Legal

Privacy Policy

Last updated: May 28, 2026 · Effective date: May 28, 2026
Short version: Sparko reads delivery offers on your screen so it can auto-accept the ones that match your filters. All of that reading and decision-making happens on your phone. The only thing we send to a server is the data needed to verify your Google Play subscription and prevent one paid account from being shared across many devices. We do not collect, store, or share information about your offers, routes, earnings, contacts, location, or browsing.

Contents

  1. Who we are
  2. Scope
  3. Data we collect
  4. Data we do not collect
  5. Accessibility Service use
  6. Permissions explained
  7. How we use data
  8. Sharing & third parties
  9. Retention
  10. Security
  11. Your rights
  12. Children
  13. International users
  14. Changes to this policy
  15. Contact

1. Who we are

Sparko (the “app”) is an Android application that helps delivery drivers automate the process of screening and accepting delivery offers. The app is published under the package name com.sparko.ai and is referred to in this policy as “Sparko,” “we,” or “us.”

Sparko is an independent tool, not affiliated with, endorsed by, or sponsored by any delivery platform.

2. Scope of this policy

This policy describes how Sparko handles information when you use the Android app. It does not cover the privacy practices of any delivery platform, Google Play, or any other third party whose service you may use alongside Sparko.

3. Data we collect

Sparko is designed to be local-first. The categories below describe the only data that leaves your device.

3.1 Subscription & device-binding data

To enforce a one-device-per-subscription policy and to verify your purchase status, Sparko stores the following in Google Cloud Firestore (a Google Firebase service):

  • Purchase token — issued by Google Play when you subscribe. This token does not contain your name, payment details, or Google account identity.
  • Random device identifier (UUID) — generated locally on first launch. It is not a hardware ID, advertising ID, IMEI, MAC address, or phone number.
  • Registration timestamp — when the device was first bound to the subscription.
  • Last-seen timestamp — refreshed periodically so we can detect inactive devices.
  • Anonymous Firebase Authentication token — used solely to authorize the Firestore reads and writes above. No email, phone, or social account is involved.

3.2 Crash diagnostics

If Sparko crashes, the Android operating system may collect a crash report and offer to send it to us through Google Play. These reports are governed by Google Play’s privacy practices and contain technical information about the crash (stack traces, device model, OS version) — not the contents of your screen or your offer data.

3.3 Information you provide voluntarily

If you contact us by email, we will receive whatever you choose to put in that email (your address, your message, attachments). We use it only to reply to you.

4. Data we do not collect

Sparko does not collect, transmit, sell, or share:

  • The text, price, distance, store code, route, items, units, stops, duration, chip flags, or any other contents of any delivery offer you see in the delivery app.
  • Your earnings, hours worked, deliveries completed, or any other performance data.
  • Your location, GPS coordinates, or movement history.
  • Your contacts, calendar, photos, messages, microphone, camera, or call logs.
  • Your Google account email, name, profile picture, or any identifier tied to your real-world identity.
  • Your IP address (beyond what is incidentally observed by Google Firebase during authenticated requests and discarded after request handling per Google’s policies).
  • Your phone number, IMEI, MAC address, Android Advertising ID, or any hardware fingerprint.
  • Information about other apps installed on your device, except for a single check of whether the delivery app and WhatsApp are present (required by Android 11+ package visibility rules so Sparko can guide you to install them).

Sparko contains no advertising SDKs, no analytics SDKs, and no behavioural tracking. We do not build user profiles. We do not sell or rent data to anyone — there is no data to sell.

5. How Sparko uses the Accessibility Service

Sparko requests Android’s Accessibility Service permission. Per Google Play policy, we are required to disclose exactly how this permission is used. Here it is in full:

  • Why we need it. The Accessibility Service is the only Android API that lets one app read text rendered by another app. Sparko needs to read the offer cards displayed by the delivery app so it can compare each offer against your filters.
  • What it reads. The service is configured to only receive events from the delivery app's package. Events from every other app are filtered out by Android before they reach Sparko.
  • What it does with what it reads. Offer text is parsed in memory to extract values (pay, distance, stops, etc.), compared against the filter group you configured, and then discarded. Nothing is written to disk except a short rolling diagnostic log (see below). Nothing is sent off the device.
  • How it acts. When an offer matches, Sparko dispatches a tap at the screen coordinates you configured for the Accept button. When an offer does not match, Sparko dispatches a scroll gesture you configured to move past it. These are the same gestures you would perform by hand.
  • Diagnostic log. For troubleshooting, Sparko keeps a short on-device log of recent rule evaluations (e.g. “offer rejected: distance 14.7 mi over limit 10”). This log never leaves your device and you can clear it from Settings at any time.
  • You can turn it off. The Accessibility Service can be disabled at any time from Android Settings → Accessibility → Sparko. When disabled, Sparko cannot read offers or perform any taps.

Sparko does not use Accessibility Service data to advertise to you, profile you, or share with anyone. This is consistent with Google Play’s Use of Accessibility API policy.

6. Other permissions Sparko requests

  • SYSTEM_ALERT_WINDOW (Display over other apps) — required to draw the floating bubble overlay that shows scan status. The bubble runs entirely on-device.
  • FOREGROUND_SERVICE / FOREGROUND_SERVICE_SPECIAL_USE — required by Android to keep the bubble overlay alive while you are in the delivery app. The “special use” subtype is declared as accessibility-overlay.
  • POST_NOTIFICATIONS — required on Android 13+ so Sparko can show you the foreground-service notification and match alerts. You may turn notifications off in system settings.
  • com.android.vending.BILLING — required by Google Play Billing to process your subscription.
  • INTERNET — required only for Google Play Billing and the subscription/device-binding checks described in §3.1. No other network calls are made by the app.
  • QUERIES (package visibility) — Sparko declares a narrow query list for the delivery app and WhatsApp so Android will tell us whether those two apps are installed. Sparko cannot see any other installed apps.

Sparko does not request location, camera, microphone, contacts, SMS, call logs, calendar, body sensors, file storage beyond its own sandbox, or QUERY_ALL_PACKAGES.

7. How we use the data we do collect

  • Subscription enforcement. We use the purchase token + device UUID to verify that the account using Sparko has a valid Google Play subscription, and to ensure that a single subscription is not being shared across many phones.
  • Trial tracking. The first-launch timestamp is stored locally on your device (using Android DataStore) so we can correctly count the days remaining in your 7-day free trial. It is not uploaded.
  • App functionality. Your filter rules, tap coordinates, swipe path, theme preference, and other settings are stored locally on your device using Android Room and DataStore. They are not synced to any server.
  • Support. If you email us, we use what you sent to reply.

We do not use any data for advertising, profiling, or training machine-learning models.

8. Sharing & third parties

We use the following service providers strictly for the limited purposes above:

  • Google LLC (Google Play Billing) — processes your subscription. Governed by Google’s Privacy Policy.
  • Google LLC (Firebase Authentication & Cloud Firestore) — receives the anonymous auth token, purchase token, device UUID, and timestamps described in §3.1, in order to enforce one-device-per-subscription. Governed by Firebase Privacy and Security.

We do not share data with advertisers, data brokers, analytics vendors, or any party not listed above. We do not sell personal information, including under the California Consumer Privacy Act (CCPA) definition of “sale.” If we are ever legally compelled to disclose information (subpoena, court order), we will disclose only what is required and, where lawful, notify the affected user.

9. Data retention

  • On your device: filter rules, settings, tap coordinates, and diagnostic logs are kept until you clear them, uninstall the app, or wipe app data from Android Settings.
  • In Firestore: the device-binding record (purchase token, device UUID, timestamps) is kept while your subscription is active. If you cancel and the subscription expires, the record is purged within 30 days. You may also email us to request deletion sooner; we will verify ownership via the purchase token and remove the record.

10. Security

Data transmitted to Firebase is encrypted in transit via HTTPS/TLS. Firestore data is encrypted at rest by Google. Access to our Firestore project is restricted by security rules: anonymous clients can only read and refresh their own device-binding document, and cannot modify the device identifier once written.

Locally, Sparko relies on Android’s app sandbox. Other apps on your device cannot read Sparko’s database or DataStore files unless your device is rooted, which is outside our control.

No system is perfectly secure. If we ever discover a breach affecting personal data, we will notify affected users by in-app notice or email (if we have one for you) and, where required, the appropriate regulator, within the timelines set by law.

11. Your rights

Because Sparko stores almost all data on your device, you can exercise most data rights yourself:

  • Access / portability: your filter rules and settings are visible inside the app. We can also email you a copy of any device-binding record we hold on request.
  • Rectification: edit your settings inside the app at any time.
  • Erasure: uninstall the app or clear its data from Android Settings to remove local data. For Firestore records, email us as described in §9.
  • Withdraw consent: disable the Accessibility Service or revoke the overlay/notification permissions at any time. The app will stop functioning until they are re-enabled.
  • Object / restrict processing: stop using the app, or contact us for specific concerns.
  • Lodge a complaint: if you are in the EEA, UK, or another jurisdiction with a data protection authority, you may complain to that authority.

California residents (CCPA/CPRA): you have the right to know what we collect, request deletion, and correct inaccuracies. We do not sell or “share” (cross-context behavioral advertising) personal information. There is no financial incentive program. To exercise these rights, contact us at the address below.

12. Children

Sparko is intended for adult delivery drivers. We do not knowingly direct the app to anyone under 16, and we do not knowingly collect data from such users. If you believe a child has provided information to us, contact us and we will delete it.

13. International users

The Firebase services we use are operated by Google LLC in the United States. By using Sparko outside the United States, you understand that your subscription/device-binding data will be transferred to and processed in the U.S. Google relies on Standard Contractual Clauses and other lawful transfer mechanisms for data originating in the EEA, UK, and Switzerland.

14. Changes to this policy

We may update this policy as the app evolves. When we do, we will update the “Last updated” date at the top. If a change is material (for example, adding a new category of data collection or a new third-party processor), we will notify you in-app before the change takes effect.

15. Contact

Questions, privacy requests, or complaints? Email support@sparko.app. We will respond within 30 days, or sooner where required by law.