Privacy Policy

1. Who we are

Sparkmint Studio is operated by SMART FIX IT SRL, a company registered in Romania (CUI 51341266, Trade Register No. J2025012973005, registered office: Str. Dumbrava Nouă nr. 18, bl. M165, sc. 1, et. 6, ap. 27, Sector 5, București, Romania). SMART FIX IT SRL is the controller of the personal data described in this policy.

For any privacy question or request, write to support@sparkmintstudio.app.

2. One account for both apps

NetQuest and ChipQuest share a single account. If you sign in to both with the same Google or Apple account, you have one account with us. Your progress is stored separately for each certification, but the account itself, your name, email address and language choice, is shared. This has two consequences:

• Deleting your account deletes it from both apps, including your progress in the app you did not delete it from.
• A language you choose in one app also applies in the other.

3. What we collect

Account details

The apps require an account. You can sign in only with Google, or with Sign in with Apple on iPhone. When you sign in, we receive and store:

• Your name, as it appears on your Google or Apple account. It is shown in the app as your display name. Apple sends your name only the first time you sign in with it. If no name is available from a Google account, the part of your email address before the “@” is used as your display name.
• Your email address. With Sign in with Apple you can choose to hide your address; we then receive an Apple relay address instead of your real one.
• Account identifiers: a random user ID that we create for your account, and the identifier of your Google or Apple account.
• The address (URL) of your Google profile photo, so the app can display it. We store the address only, not the image itself.
• Sign-in sessions, including the IP address from which a session was created.
• If you use Sign in with Apple, a token issued by Apple, kept only so that we can disconnect the app from your Apple account when you delete your account.
• The dates your account was created, last updated and last active.

Learning progress

For each certification (CCNA in NetQuest, CompTIA A+ in ChipQuest) we store:

• XP, level, current and best streak, the days on which you were active (your phone’s local date, not your time zone), lives, and the exam you chose;
• for each lesson: stars, attempts, best score and date; and a history of the XP you earned, with its source;
• badges and the dates you earned them;
• results from the practice tools, module quizzes and exam simulations, such as start and end times, number of questions answered and answered correctly, whether you passed, time used, and the score for each exam domain.

Your individual answers are not stored. When you finish a lesson, quiz or simulation, your answers are sent to our server to be checked; the server keeps only the resulting scores and totals and discards the answers.

Your onboarding choices

When you start, the app asks for your level (beginner, intermediate or advanced), your goal and how many minutes a day you want to study. You choose from fixed options; there is no free text.

Language

The language you choose in the app. It is stored only if you choose one explicitly; your phone’s system language is never sent to us.

Purchases

Paid levels are one-time purchases made through the App Store or Google Play. For each purchase we store which level you have (for example Pro), the product ID, its source, an expiry date if one applies, whether it was a test purchase, and a record of the purchase events we received. We never receive your card or payment details; the payment is handled entirely by Apple or Google.

Technical data

Like any online service, our servers receive the IP address and the device’s user agent (a short description of the app and operating system) with each request made by the app.

Messages to support

If you email us, we receive your email address and whatever you write in your message.

4. What we do not collect

The apps do not collect your location, contacts, calendar, files, photos (other than the profile-photo address above), audio, messages, browsing or search history, health data or advertising ID. They do not ask for your age; instead, by signing in you confirm that you are at least 16 (see section 14). They contain no advertising, no analytics and no crash-reporting tools.

5. What stays on your phone

Some data is kept only on your device and is never sent to us:

• your sign-in session;
• a lesson you have started but not finished, including the answers given so far (sent to us only when you finish the lesson);
• whether you have completed onboarding;
• your language, theme (light or dark) and which in-app guided tours you have seen;
• possibly a cached copy of your profile photo.

Signing out removes the session, unfinished lessons and onboarding marker from the phone. Language, theme and tour settings remain until you uninstall the app. The app also reads, without sending anything, your phone’s system language (to pick the interface language), its light or dark mode, and its reduced-motion and text-size settings.

6. How we use your data

We do not sell your personal data, share it for advertising, or use it to build advertising profiles. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

7. Data from your Google account

When you sign in with Google, we ask Google only for your basic profile and email address (the standard openid, email and profile permissions). From these we use your name, email address, Google account identifier and profile-photo address, only to create and run your account and to show your name and photo in the app, as described above. We do not use Google user data for advertising, do not sell it, and do not share it with anyone other than the service providers listed below, which store and process it on our behalf.

8. Who else processes your data

The companies below receive personal data in connection with the apps. All of them except Apple are service providers: they process data on our behalf and only to provide their service to us. Apple handles Sign in with Apple and App Store payments as an independent controller, under its own privacy policy.

Google also receives data in its own right, under its own privacy policy:

• Google sign-in. Each time the app shows your profile photo, your phone loads it from Google’s servers, so Google receives your IP address and device user agent.
• Google Play processes your payments on Android and keeps its own records of your transactions.

We may also disclose data if the law requires us to, for example to a court or a public authority.

9. Where your data is stored

Our database is hosted by Supabase in the European Union, in the AWS eu-west-1 region (Ireland).

Some of our service providers are based outside the European Economic Area (EEA), so personal data may be transferred to them or accessed from there. Each transfer is protected as follows:

• Supabase (Supabase Pte. Ltd., Singapore): your data is stored in the EU region above; any access from outside the EEA is covered by the EU Standard Contractual Clauses included in Supabase’s data processing agreement.
• RevenueCat (RevenueCat, Inc., United States): EU Standard Contractual Clauses, incorporated in RevenueCat’s data processing agreement.
• Expo (650 Industries, Inc., United States): the EU-U.S. Data Privacy Framework.
• Cloudflare (Cloudflare, Inc., United States): the EU-U.S. Data Privacy Framework, under which Cloudflare is certified, and the EU Standard Contractual Clauses in Cloudflare’s data processing addendum.
• Google (Google LLC, United States), for support emails: the EU-U.S. Data Privacy Framework, under which Google LLC is certified; Google also relies on the EU Standard Contractual Clauses where required.
• Apple (Apple Distribution International Ltd., Ireland): Apple generally stores personal data with Apple Inc. in the United States; Apple states that these transfers from the EEA are governed by the EU Standard Contractual Clauses.

Google sign-in and Google Play purchases are handled by Google under its own privacy policy.

10. How long we keep it

• Your account and progress are kept for as long as your account exists. They do not expire on their own: an account you no longer use is kept until you delete it.
• Backups. Our database is backed up daily and each backup is kept for 7 days. After you delete your account, your data may remain in backups for up to 7 days, after which it is gone.
• System logs. Supabase may keep technical logs of sign-ins and requests, which can include your user ID, email address and IP address, and which are not removed when you delete your account. They are kept for 7 days.
• RevenueCat deletes your customer record when you delete your account.
• Apple and Google keep their own records of your purchases under their own policies; deleting your account does not affect them.
• When you delete your account, we keep, for a short time, a record containing only your random user ID and the clean-up steps still to be done (deleting your purchase record from RevenueCat and disconnecting Sign in with Apple). It contains no name, email address or progress, and it is deleted as soon as those steps succeed.
• Messages to support are kept for 12 months after the conversation is closed.
• Data on your phone is removed as described in section 5, or when you uninstall the app.

11. Deleting your account

You can delete your account at any time in either app, under Profile → Delete account, or by email if you no longer have the app. An email request must come from the email address of your account; otherwise we verify your identity before deleting anything. We answer email requests within one month. Deleting your account deletes it from both NetQuest and ChipQuest. The full steps, and what is deleted and what remains, are on our account deletion page.

Deleting your account does not cancel or refund purchases; refunds are handled by Apple or Google.

12. Your rights

Under the EU General Data Protection Regulation (GDPR) you have the right to:

• access the personal data we hold about you and get a copy of it;
• have inaccurate data corrected;
• have your data deleted;
• restrict how we use your data;
• receive your data in a portable format;
• object to processing based on our legitimate interests.

To exercise any of these rights, email support@sparkmintstudio.app from the address linked to your account. We will reply within one month. If you write from another address, we will verify your identity before acting on the request.

You also have the right to complain to a data protection authority. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro); you can also complain to the authority in the EU country where you live or work.

13. Security

All data sent between the apps and our servers is encrypted in transit (HTTPS). Each account can read only its own data, and learning progress and purchases can be written only by our server, not changed directly from the app. Deleting an account requires a valid sign-in to that account. No system is perfectly secure, but we take care to protect your data and will tell you, and the authorities, about a breach where the law requires it.

14. Minimum age

The apps are intended for people aged 16 and over. We do not ask for your age: by signing in, you confirm that you are at least 16. The apps are not directed at children. If we learn that an account belongs to someone under this age, we will delete it. If you believe a child has created an account, contact us.

15. This website

This website, sparkmintstudio.app, does not use cookies, analytics or advertising, and loads no content from other websites. It is delivered by Cloudflare, which processes your IP address and request details in order to deliver the pages and protect the site from attacks.

16. Changes to this policy

When this policy changes, we will update the date at the top. If a change significantly affects how we use your data, we will tell you in the apps before it takes effect.

17. Contact

SMART FIX IT SRL (Sparkmint Studio)
Registered office: Str. Dumbrava Nouă nr. 18, bl. M165, sc. 1, et. 6, ap. 27, Sector 5, București, Romania
Email: support@sparkmintstudio.app