Privacy Policy
Last updated: 2026-04-25
Plain-language summary: Your test results are encrypted and stored in your own free Puter account, not on our servers. We never see your raw data. We don't sell or share data with anyone. You can export or delete everything at any time.
What we collect
When you use Psyche Spark, the following data exists:
- Test answers and computed scores — stored encrypted in your Puter account, accessible only by you.
- Account email and Google OAuth identity — held by Puter, used only to sign you in.
- Stripe subscription metadata — if you subscribe, Stripe holds your payment info (we never see card numbers).
- Affiliate click events — if you click through to a therapy provider, we log that click (anonymously) for affiliate attribution.
- Standard server logs — IP address, request timestamps, user agent — held by our hosting provider (Vercel) for 30 days.
What we don't collect
- Your raw test answers on our servers — those live in your Puter account, encrypted at rest.
- Cross-site tracking cookies, advertising pixels, or third-party trackers (unless you've explicitly enabled GA / FB Pixel via the admin panel).
- Health insurance claims, medical records, or HIPAA-covered data — Psyche Spark is not a HIPAA-regulated entity.
Where data lives
- Puter (puter.com) — your encrypted KV storage. Read their privacy policy for details on their security model.
- Stripe (stripe.com) — payment processing only. Subject to Stripe's privacy policy.
- Vercel (vercel.com) — hosting infrastructure. Sees standard server logs only.
- OpenAI / Anthropic / Google (via Puter's AI proxy) — when you generate AI insight, your test results are sent to the configured model for a single completion. None of these providers retain your data for training, per their API terms.
Your rights
You have the right to:
- Export everything — settings → "Export my data" gives you a JSON of all your test results, partner data, profile, and conversation history.
- Delete everything — settings → "Delete all my data" wipes your Puter KV. Stripe subscription metadata is retained per Stripe's record-keeping requirements (typically 7 years for tax/audit), but no Psyche Spark-specific data remains.
- Object to processing — under GDPR / CCPA, you can request that we stop processing your data. Email us; in practice this means we delete you and you stop using the product.
Children
Psyche Spark is for adults (18+). The clinical instruments we use (PHQ-9, GAD-7, etc.) are validated for adults. We don't knowingly collect data from children under 13.
Affiliate disclosure
If you click through to a therapy platform we recommend (BetterHelp, ReGain, Talkspace) and sign up there, Psyche Spark may receive a referral fee. This doesn't affect your cost, and it doesn't affect which providers we show — those are ranked by how well they match your test pattern, not by referral payout.
Contact
Questions about privacy: privacy@psychespark.com