Privacy Policy

1. Introduction and Scope

SparkShift, LLC ("SparkShift," "we," "us," or "our") provides mobile apps, web experiences, and related services for electricians, apprentices, contractors, and training organizations. This Privacy Policy explains what personal information we collect, how we use it, when we share it, and what choices you have when you use our apps, website, support channels, and related services.

Where consent is required, we ask for it in context, such as when you enable location, allow analytics cookies on the website, opt into marketing communications, or use certain voice or AI-powered features.

2. Information We Collect

2.1 Information You Provide Directly

Account and Profile Information

• Name, email address, phone number, and login credentials
• Profile photo, professional bio, job title, union local, company, and certification details
• Support requests, form submissions, survey responses, and other information you choose to send us

Work and Organization Records

• Time entries, jobsite records, work categories, notes, documents, and related attachments
• Apprenticeship progress records, evaluations, sign-offs, and report exports
• Safety training, credential, and compliance-related information you or your organization upload

Pre-Task Plans, Messaging, and Voice Features

• PTP titles, tasks, hazards, safety notes, qualifications, acknowledgements, and sign-offs
• Messages, contact requests, forum posts, uploaded media, and moderation reports
• Push-to-talk or voice messages and transcriptions when those features are used

Payment and Subscription Information

• Subscription or entitlement tier selected
• Subscription start date, renewal date, and transaction status
• Storefront or processor used, such as Apple, Google, Stripe, or RevenueCat

SparkShift may offer free, professional, leadership, network, bundled, school, enterprise, and exam-prep plans. Current plan names, pricing, included features, billing interval, and any trial or promotional terms are shown in the app, the applicable app store, or the web checkout flow at the time of purchase.

We do not store full payment card or bank account numbers. Payments are handled by the processor or storefront identified during checkout.

AI and Uploaded Content

• Prompts, uploaded photos, text, files, and feedback you provide when using AI-assisted features
• Selected text or limited note snippets when you choose AI-assisted organization or category-matching tools
• Generated outputs, summaries, or classifications returned by those features

2.2 Information Collected Automatically

Location Data

• GPS coordinates and related timestamps for clock-in, clock-out, jobsite verification, maps, and related features
• Approximate or precise location depending on your device settings and how you use the feature
• Location visibility settings and related status information for map-based features

SparkShift collects location when you actively use maps, nearby jobsites, clock-in or clock-out verification, jobsite verification, and related safety tools. Map visibility and exact-location sharing remain subject to your in-app privacy controls and device permission settings. On Android, with your permission, SparkShift may also access your location in the background for automatic jobsite detection and geofence-based clock-in reminders. You can disable background location access in your device settings at any time.

Device, Log, and Diagnostic Data

• Device type, operating system, app version, browser type, and language settings
• IP address, approximate region, crash logs, diagnostics, and push notification tokens

Biometric and Device Authentication

If you use biometric authentication features on your device (such as Face ID or Touch ID) to access the App, the biometric data is processed and stored locally on your device by your operating system. SparkShift does not collect, store, or transmit biometric identifiers or biometric information. We receive only a success or failure authentication result from your device.

Website Cookies, App Analytics, and Logs

• Authentication, security, and CSRF-related cookies needed to run the website
• Preference storage, such as theme selection, guest preview settings, and cookie choices
• Analytics events, page views, and aggregated usage information if you allow analytics cookies on the website
• Optional mobile-app analytics, diagnostics, and product-usage events when you enable those features in-app

SparkShift uses PostHog for website analytics and uses Firebase Analytics plus PostHog for mobile-app analytics. On the website, analytics load only after you allow analytics cookies. In the mobile app, optional analytics and attribution features follow your saved in-app privacy setting. On iOS, tracking-related uses that require permission also depend on the App Tracking Transparency prompt. If you deny ATT, SparkShift may continue to use first-party or anonymous analytics that do not rely on cross-app tracking. We do not currently enable website session recording by default.

3. How We Use Your Information

We use personal information to:

• Provide and operate the service: Authenticate accounts, track work, generate reports, and support requested features
• Enable organization workflows: Allow supervisors, training organizations, or teams to review records you share through the service
• Support communications: Send transactional emails, alerts, moderation notices, and customer support responses
• Improve the product: Debug issues, understand usage patterns, and develop features
• Protect users and the platform: Detect abuse, enforce policies, and maintain security logs
• Process billing and entitlements: Manage subscriptions, purchases, and access controls
• Send marketing only where permitted: Send updates or promotional messages if you opt in or if another lawful basis applies, with unsubscribe options where required

4. Sharing and Third-Party Service Providers

We share personal information only as needed to provide the service, complete a transaction you request, comply with law, or protect SparkShift and our users. Categories of recipients may include:

• Infrastructure and authentication providers: such as Firebase and Google Cloud
• Billing and payment providers: such as Apple, Google, Stripe, and RevenueCat
• Communications and support providers: such as Agora (real-time voice and push-to-talk), Mailgun (transactional email), and related messaging delivery services
• Mapping and location providers: such as Google Maps Platform
• Analytics and diagnostics providers: such as PostHog, Firebase Analytics, and crash-reporting tools
• Conversion measurement: If enabled through store or ad-platform configuration, Google Ads on-device conversion measurement may be used to attribute app installations to advertising campaigns. That processing occurs on your device and is governed by the applicable platform and ad-platform settings.
• AI providers you invoke through product features: such as OpenAI, Anthropic, or Google
• Organizations you work with: such as supervisors, employers, or training programs when you use the service to share records with them
• Cloud hosting and storage providers: such as Google Cloud Platform, Amazon Web Services, and Vercel
• Security and rate-limiting providers: such as Upstash and Cloudflare
• Professional service providers: such as legal, accounting, and compliance consultants engaged under contract

Each service provider is contractually required to use personal information only to perform the services we engage them for and to maintain appropriate confidentiality and security measures.

California disclosure for the preceding 12 months: We have disclosed the following categories of personal information for business purposes to service providers and contractors that process information on our behalf: identifiers and contact information; account and customer records; commercial or transaction information; internet or network activity information; device and diagnostic information; geolocation data; audio, electronic, visual, or similar information; professional, employment, education, apprenticeship, and organization-related information; user-generated content, uploads, and support communications; and inferences or classifications generated to provide requested features, moderation, security, or support.

We may also disclose work records, profile details, reports, and related submissions to employers, supervisors, training centers, unions, schools, or other organizations when you ask us to share that information through the service or when you use features designed for those relationships.

We do not sell personal information for money. If we materially change our data-sharing practices, we will update this policy before doing so.

5. Legal Basis, Consent, and Cookies

Depending on where you live and how you use SparkShift, we may rely on consent, contract performance, legitimate interests, or legal obligations to process personal information.

• Account and service data: Processed so we can provide the service you request
• Location, notifications, microphone, camera, and similar permissions: Controlled through your device and in-app settings
• Website analytics cookies: Loaded only after you allow them on the website
• Mobile app optional analytics and attribution: Controlled by your in-app privacy setting and, on iOS, by App Tracking Transparency where required
• Marketing communications: Sent only where permitted and with opt-out or unsubscribe functionality where required by law

Additional details about cookies and browser-based storage are available in our Cookie Policy.

6. Legal Disclosure and Business Transfers

We may disclose your information if required by law, court order, or government request, or to protect the rights, property, or safety of SparkShift, our users, or others. We may also disclose or transfer information in connection with a merger, financing, acquisition, bankruptcy, or sale of all or part of our business, subject to applicable law.

7. Data Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including:

• Encryption in transit and other reasonable security controls for supported systems
• Authentication controls, session management, and access restrictions
• Logging, monitoring, and internal access controls appropriate to the service

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Data Retention and Account Deletion

We retain personal information for as long as reasonably necessary to operate the service, keep required records, resolve disputes, enforce agreements, and meet legal obligations. Retention periods can vary by data type and feature.

• Active account data: Account deletion is processed promptly upon request. Once confirmed, account data is permanently deleted and cannot be recovered. We recommend exporting your data before requesting deletion.
• Billing and transaction records: Retained for up to 7 years after the transaction to comply with tax, accounting, and chargeback obligations
• Security and audit logs: Retained for up to 2 years for fraud prevention and platform integrity
• Operational analytics event stores: Some raw event collections we control are automatically deleted after about 90 days
• Analytics reporting and aggregates: Retention can vary by provider, feature, and reporting need, and may include longer-lived aggregated or de-identified reporting
• Backup copies: Purged within 90 days after deletion from primary systems
• You can request account deletion from supported in-app or dashboard deletion flows, from our web deletion page, or by contacting us
• We may keep limited records needed for security, legal compliance, chargeback defense, fraud prevention, or backup restoration windows
• Aggregated or de-identified information may be retained after account deletion

9. Your Privacy Rights

Depending on your jurisdiction, you may have rights to:

• Access: Request information about the personal information we hold about you
• Correction: Ask us to correct inaccurate or incomplete information
• Deletion: Request deletion of your account or certain personal information, subject to legal exceptions
• Portability: Request export of information where applicable
• Consent withdrawal: Change certain permissions, cookie choices, or marketing preferences

To exercise these rights, visit our Delete Account page or contact us at admin@sparkshift.app.

10. U.S. and Canada-Specific Notes

SparkShift is based in the United States and may process information in the United States or other countries where our service providers operate.

• United States: Residents of states with consumer privacy laws may have additional rights under applicable law
• Michigan: Licensing and apprenticeship recordkeeping rules can vary by state agency, local authority, union program, and employer; verify current requirements with the applicable authority
• Canada: We aim to present our practices in a clear, understandable form and honor applicable access, correction, consent, and complaint rights under laws such as PIPEDA
• Commercial messages: Where required, marketing messages include a way to unsubscribe or manage preferences

11. Do Not Sell or Share My Personal Information

SparkShift does not sell your personal information for monetary consideration. We do not share your personal information with third parties for cross-context behavioral advertising as defined under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

If you are a California resident, you have the right to opt out of the sale or sharing of your personal information. Because we do not engage in these practices, no opt-out action is required. If our practices change in the future, we will provide a conspicuous "Do Not Sell or Share My Personal Information" mechanism before any such change takes effect.

To submit a request or ask questions about your rights under the CCPA/CPRA, contact us at admin@sparkshift.app or call (248) 416-0277. We will verify your identity before processing any request and respond within 45 days as required by law.

12. Automated Decision-Making Technology (ADMT)

SparkShift may use automated processing in the following limited contexts:

• Content moderation: Automated filters may flag user-generated content (forum posts, messages, photos) for review based on community guidelines. Redacted content may be checked with third-party moderation providers, and flagged content is reviewed by our moderation team before enforcement action is taken.
• Fraud and abuse detection: Automated systems may detect suspicious login patterns, rate-limit abuse, or account anomalies. These systems may temporarily restrict access pending manual review.
• AI-assisted features: When you use AI-powered tools (such as document summarization, photo analysis, or trade-school category matching), the AI processes the inputs you choose to submit to generate outputs. These features are opt-in and do not make decisions about your account status or access.

We do not use automated decision-making technology to make decisions that produce legal or similarly significant effects concerning you without human review. If you believe an automated decision has adversely affected you, contact us to request human review.

Most AI-assisted features are optional. If you do not want your information processed through those optional tools, do not use the feature and contact us if you want related account content reviewed or deleted, subject to legal and retention limits. If we later introduce ADMT subject to additional California notice, access, opt-out, or appeal requirements, we will update this policy and the applicable in-product notices before doing so.

13. Children's Privacy

SparkShift is not directed to individuals under 18, and we do not knowingly collect personal information from individuals under 18 through the public service. If you believe a minor provided us personal information, contact us so we can investigate and take appropriate action.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the effective or last updated date above. If changes are material, we may also provide additional notice through the service or by email where appropriate.

15. Contact Us

If you have questions, complaints, or rights requests about this Privacy Policy, please contact us at: