Privacy Notice

1. Who is responsible for your data

SPARO is operated byMaravelle AI("Maravelle", "we", "us"). Maravelle is the data controller for personal information processed through SPARO.

2. Data we collect

• Account data — name, email, login credentials, authentication tokens.
• Household data you enter — events, calendars, to-dos, family member profiles (including an optional birthday or date of birth), reminders, notes, addresses, and other content you provide, including names and phone numbers of people outside your family (for example a carpool driver) that you add.
• Content you send for SPARO to read — voice recordings, photos, PDFs, assistant chats, texts and emails to SPARO. When you share a PDF in the app, the file stays on your device; SPARO sends the text read from it, or images of scanned pages. PDFs attached to emails reach our servers as files. This content is processed to complete your request; the events, to-dos, and other results you save are kept with your account.
• Subscription status — your plan, renewal dates, and purchase status reported by Paddle or Apple. We do not receive full card details.
• Connected accounts — data pulled from third-party calendars and email inboxes you connect (only what is needed to sync events).
• Support and communications — the messages you send us.
• Usage and device data — telemetry, device identifiers, IP address, and app diagnostics.

3. How we use it

• Provide, operate, and improve SPARO.
• Create and manage your account.
• Send transactional emails (welcome, receipts, reminders).
• Prevent fraud and secure the Service.
• Respond to support requests.
• Comply with legal obligations.

Our legal bases include performance of a contract with you, legitimate interests (operating and improving SPARO), consent (where required), and legal obligations.

4. Who we share it with

• Paddle — our Merchant of Record for subscriptions, payments, tax compliance, and invoicing.
• AI processing providers — when you use an AI feature, the content needed for that request is sent through the Lovable AI Gateway to the AI model providers it routes to (SPARO is currently configured to use Google Gemini and OpenAI model routes). This includes: voice recordings you choose to send, for transcription into text; photos, images, and pages rendered from scanned PDFs, and text extracted on your device from shared PDFs, so events can be read from them; messages and emails you send to SPARO; questions you ask the SPARO assistant; and the calendar events, to-dos, and family details needed to answer or plan. These providers process it to return a result to SPARO. The gateway and model providers may keep request data under their own retention and logging practices.
• Messaging and notification providers — Twilio (texts), our email delivery provider, and Firebase Cloud Messaging (phone alerts), to deliver messages you asked for and to receive the texts, photos, and emails you send to SPARO.
• Service providers — hosting, database, email delivery, analytics, error monitoring, and customer support tools. Their role depends on the service and the applicable agreement: some act on our behalf, while others, such as Lovable for certain hosting operational logs, process data as independent controllers under their own terms.
• Household members you invite — data you place in a shared household is visible to other members of that household.
• Authorities — where required by law or to protect rights and safety.
• Professional advisers — legal, accounting, or similar, under confidentiality.

We do not sell your personal information.

5. International transfers

Your data may be processed in countries other than where you live. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Data retention

We keep personal data for as long as your account is active and as needed afterwards to comply with legal obligations and resolve disputes. You can delete your account at any time. Deletion removes your account and the records covered by SPARO's deletion rules; records in a shared household may remain for its other members. Backups, security and legal records, and operational or AI request logs kept by third-party providers follow their own separate practices. We have not established the exact retention period used by upstream AI providers, and individual historical AI request logs held by Lovable cannot be deleted on request. Turning off AI context logging affects new requests only: it does not erase earlier logs or stop the AI processing needed to provide a feature you use.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, port, or object to processing of your personal data, and to withdraw consent. EU/UK residents also have the right to lodge a complaint with a supervisory authority. We aim to respond within one month.

To exercise these rights, email hello@sparo.live.

8. Security

We use appropriate technical and organizational measures to protect your data — including encryption in transit, access controls, and least-privilege database policies.

9. SMS / text messaging

If you opt in to SPARO SMS or WhatsApp messages (for example, via our SMS sign-up page), Maravelle AI collects your name, email, and mobile phone number solely to send you event, scheduling, and account messages you asked for, and to keep an audit record of your consent. When you text or message SPARO, we process the message content — including photos of schedules you send — to create and update your events. Message frequency varies. Message and data rates may apply. ReplySTOP to cancel or HELP for help.

Maravelle AI will not sell, rent, or share your mobile phone number or SMS opt-in information with any third party for their marketing or promotional purposes. We share phone numbers only with our messaging delivery provider (Twilio) to the extent needed to send the messages you requested, and where required by law.

10. Mobile app (iOS and Android)

The SPARO mobile app collects the same information described above. In addition, it may ask your permission for the following device features. You can refuse or revoke any of them in your device settings; the rest of the app keeps working.

• Camera and photos — only when you choose to photograph or attach a schedule, flyer, or confirmation so SPARO can read the event details from it. Images are processed to extract event information and are not used for advertising.
• Approximate location — only when you use travel time, weather, or directions features, to show conditions and routes relevant to an event. SPARO does not track your location in the background.
• Notifications — device tokens used to deliver reminders and schedule-change alerts you enabled.
• Diagnostics — crash and performance data used to fix problems.

We do not track you across apps or websites owned by other companies, and we do not use your data for third-party advertising or data brokerage. If subscriptions are purchased inside the app, Apple or Google processes the payment and shares only the purchase status needed to activate your plan — we never receive your card details.

11. Google user data (limited use)

When you connect Google Calendar or a Google email inbox, SPARO reads the calendar and message data needed to show and sync your events. SPARO's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not allow SPARO staff to read it except with your explicit permission, for security or legal reasons, or in aggregated anonymous form.

How it's used in SPARO features: once imported, events from a connected Google Calendar become part of your family calendar. Their details (such as title, time, place and who it's for) can then be included in features you use that rely on AI or automation: answers from the SPARO assistant, plan-ahead suggestions and to-dos, conflict and schedule insights, reminders, and your daily rundown or change summaries sent by app alert, text or email. To produce AI answers, the relevant event details are sent to the AI services SPARO uses to process your request and generate the response shown to you. SPARO itself does not use Google data to train AI models.

Disconnecting and deleting: when you remove a Google account in SPARO, you choose whether to keep or delete the events it imported. Where SPARO can revoke its access for that connection, it does so first; if revocation fails, nothing is removed and you can try again. In some cases (for example older connections) SPARO can only remove the connection on its side, and the app tells you to finish at your Google account permissions page, where you can remove SPARO's access at any time. Deleting your SPARO account removes your Google connection records, and SPARO attempts to revoke its Google access first. If that attempt does not succeed, remove SPARO at your Google account permissions page to fully end access. Events already imported into a shared household calendar may remain for other household members. Removing access stops future syncing; it does not by itself erase every event already imported.

12. Children

SPARO is intended for adults managing a household. It is not directed to children, and we do not knowingly collect personal information directly from children under 13. Parents and guardians may add details about their children — such as a first name and their activity schedule — to organize the family calendar. That information is provided and controlled by the adult account holder. It can be seen by authorized household members, shared through sharing features an adult chooses to use, and processed by our service providers to run SPARO, subject to sections 6 and 14. If you believe a child has created an account without a parent's involvement, email us and we will remove it.

13. US state privacy rights

If you live in California, Colorado, Connecticut, Virginia, or another state with a comprehensive privacy law, you may request access to, correction of, deletion of, or a copy of your personal information, and you may appeal a decision we make about such a request. We do not sell personal information, do not share it for cross-context behavioral advertising, and do not use it for profiling that produces legal or similarly significant effects. We will not discriminate against you for exercising these rights. Email hello@sparo.live to make a request.

14. Deleting your account and data

You can delete your SPARO account at any time from sparo.live/delete-account or by emailing hello@sparo.live. Deletion removes your login and the records linked to your user account under SPARO's deletion rules. Content in a shared household may remain available to the other members of that household. Backups, security and legally required records, and operational or AI request logs kept by third-party providers follow separate practices and limits.

15. Cookies

SPARO uses cookies and similar browser storage that are essential for authentication and app functionality, plus a few functional cookies from services like Google Maps and Paddle when you use those features. SPARO does not use advertising or cross-site tracking cookies. For details, see our Cookie Policy. You can manage cookie preferences in your browser settings.

16. Changes

We may update this notice from time to time. Material changes will be communicated in-app or by email.

17. Contact

For privacy questions, data access, correction, or deletion requests, email hello@sparo.live.

Maravelle AI (data controller)
21906 NE 140th Way
Woodinville, WA 98077, USA