SparkFuel — Privacy Policy

Effective Date: April 19, 2026
Last Updated: April 19, 2026

SparkFuel (“we,” “our,” or “the app”) is a nutrition, fitness, and wellness tracking application developed by HB Apps. Your privacy is important to us. This Privacy Policy explains what data SparkFuel collects, how it is used, and the choices you have.

1. Data We Collect

1.1 Health & Fitness Data (via Apple HealthKit)

SparkFuel reads and writes data to Apple HealthKit with your explicit permission. The types of data accessed include:

Read access:

• Dietary energy consumed (calories)
• Active energy burned
• Resting energy burned
• Dietary macronutrients (carbohydrates, fat, protein)
• Step count
• Sleep analysis
• Workouts
• Body mass (weight)
• Height
• Date of birth
• Biological sex

Write access:

• Dietary energy consumed (calories)
• Active energy burned
• Resting energy burned
• Dietary macronutrients (carbohydrates, fat, protein)
• Body mass (weight)
• Height
• Workouts

All HealthKit data remains on your device or in your personal iCloud HealthKit store controlled by Apple. SparkFuel never uploads HealthKit data to external servers, third-party services, or cloud databases operated by us.

1.2 User-Entered Data

• Your name (optional, for personalization)
• Age, gender, height, and weight (for calorie calculations)
• Food log entries (meal names, calorie and macro values, dates)
• Workout programs and exercise logs
• Goal selections (spark type and intensity)

1.3 Camera and Photo Library

SparkFuel uses your device camera or photo library solely to capture images of nutrition labels or meals. These images are processed on your device to extract text and nutritional information. Images are not stored permanently and are never transmitted to external servers.

1.4 Data Processed by AI

On-Device AI (Apple FoundationModels):
On supported devices running iOS 26 or later, SparkFuel uses Apple’s on-device FoundationModels framework to generate personalized coaching insights. All AI processing occurs entirely on your device. No health data leaves your device for this feature.

Cloud AI (Food Description Parsing):
When you use the “Describe a Meal” feature, the text description you type is sent to a secure Cloudflare Worker proxy, which forwards it to an AI service (Anthropic Claude) for nutritional estimation. Only the food description text you type is sent — no HealthKit data, no personal identifiers, no health metrics. The AI service processes the description and returns estimated nutritional values. We do not store your food descriptions on our servers after processing.

2. How We Use Your Data

We use your data exclusively to provide the app’s core functionality:

• Nutrition tracking — logging meals, calculating daily calorie and macro totals
• Fitness tracking — recording workouts, tracking activity levels
• Health insights — analyzing sleep patterns, step counts, and activity trends
• Personalized coaching — generating actionable insights based on your behavioral patterns
• Goal progress — tracking progress toward your selected health goals
• Milestone rewards — calculating streaks, adherence scores, and reward points

We do not use your data for:

• Advertising or marketing
• Selling to third parties
• Data mining or profiling beyond the app’s core features
• Training machine learning models

3. Data Storage & Sync

3.1 On-Device Storage

All health and fitness data is stored locally on your device using Apple’s SwiftData framework. This includes your HealthKit-derived data, intelligence profiles, behavioral snapshots, and workout logs.

3.2 iCloud Sync (CloudKit)

SparkFuel uses Apple’s CloudKit to sync the following data across your devices:

• Food log entries (meal names, calorie and macro values)
• Previously logged meal templates
• User profile information (name, age, gender, goals)

This data is stored in your private iCloud container and is accessible only to you. Apple manages the encryption and security of CloudKit data. We do not have access to your iCloud data.

Important: HealthKit data, intelligence profiles, behavioral snapshots, and AI-generated insights are never synced to CloudKit. These remain on-device only.

3.3 No External Databases

SparkFuel does not operate any external databases, analytics services, or data collection servers. We do not collect telemetry, usage analytics, or crash reports through third-party services.

4. Data Sharing

SparkFuel does not share your personal data with third parties, except:

• Apple HealthKit — Data you choose to sync with HealthKit is governed by Apple’s privacy policies.
• Apple CloudKit (iCloud) — Synced data is stored in your private iCloud container, governed by Apple’s privacy policies.
• Cloudflare / Anthropic — When you use “Describe a Meal,” only your typed food description is sent for AI processing. No personal data, health data, or identifiers are included. See Section 1.4 above.

5. Data Retention

• On-device data is retained as long as the app is installed on your device.
• CloudKit data persists in your iCloud account until you delete it from the app or delete your iCloud data through Apple’s settings.
• AI-processed food descriptions are not retained after processing is complete.
• Uninstalling the app removes SparkFuel local app storage from your device. CloudKit data may persist in your iCloud account and can be removed through Apple’s iCloud settings. HealthKit records previously saved by SparkFuel may remain in the Health app until removed there.

6. Data Deletion

You can delete your data at any time:

• Individual food logs — swipe to delete within the app
• Workout programs — delete from the Workout tab
• HealthKit data — manage through the Apple Health app (including records previously written by SparkFuel)
• All app data — uninstall SparkFuel to remove all local data
• CloudKit data — use Settings > iCloud > Manage Storage to remove SparkFuel’s iCloud data

7. Security

• All data transmitted to CloudKit is encrypted in transit and at rest by Apple.
• The Cloudflare Worker proxy communicates exclusively over HTTPS.
• No API keys or credentials are stored in the app bundle — all external API calls are proxied through secure server-side infrastructure.
• On-device AI processing uses Apple’s FoundationModels framework with no data leaving the device.

8. Children’s Privacy

SparkFuel is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us so we can take appropriate action.

9. Your Rights

9.1 General Rights

You have the right to:

• Access the personal data SparkFuel stores about you (all visible within the app)
• Delete your data at any time (see Section 6)
• Revoke HealthKit permissions at any time through iOS Settings > Privacy & Security > Health
• Revoke camera or photo library permissions at any time through iOS Settings

9.2 European Economic Area (GDPR)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation:

• Right to access — request a copy of your personal data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data
• Right to restrict processing — limit how your data is used
• Right to data portability — receive your data in a structured format
• Right to object — object to data processing

Since SparkFuel stores all data on-device or in your personal iCloud container, you already have full control over your data. To exercise any of these rights, contact us at the email below.

Legal basis for processing: We process your data based on your consent (HealthKit permissions) and the performance of the app’s services (contract).

9.3 California Residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information is collected about you
• Request deletion of your personal information
• Opt out of the sale of your personal information

SparkFuel does not sell your personal information. We do not share your data with third parties for their commercial purposes.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the “Last Updated” date at the top of this policy and, where appropriate, through an in-app notification.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

Email: privacy@sparkfuel.app
Developer: HB Apps

This privacy policy is required by Apple App Store Review Guidelines 5.1.1 and 5.1.2, and HealthKit guidelines under Section 27.0.