Privacy Policy

BarSpark ("we," "us," or "the Service") respects your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data.

1. Data We Collect

Information you provide

• Email address and display name (when you create an account)
• Essay text you submit for AI grading
• MBE answers, flashcard review history, and other study progress data

Information collected automatically

• Usage data (pages visited, features used, timestamps)
• Browser cookies used to maintain your session
• An anonymous session identifier stored in localStorage before you create an account

Payment information

Payment details (credit card numbers, billing addresses) are collected and processed by Stripe. We do not store your full payment card information on our servers. We receive only a Stripe customer ID and subscription status.

2. How We Use Your Data

• Service delivery: Storing your study progress, tracking MBE accuracy, scheduling flashcard reviews, and saving essay drafts
• AI grading: Sending your essay text to the Google Gemini API to generate scores and feedback
• Payments: Processing subscription payments through Stripe
• Email communications: Sending study reminders, account notifications, and drip campaign emails via Resend (only if you opt in)
• Analytics: Understanding how the Service is used so we can improve it

3. Third-Party Services

We share data with the following third-party services as needed to operate:

• Google / Gemini API:Essay text is sent to Google for AI grading. Google's use of this data is governed by their own privacy policy.
• Stripe: Payment processing. Stripe receives your billing information directly.
• Firebase (Google): Authentication and push notifications. Firebase receives your email address and authentication tokens.
• Neon: Database hosting. Your study data is stored in a PostgreSQL database hosted by Neon.
• Resend: Email delivery for study reminders and account notifications.

We do not sell your personal data to third parties.

4. AI Processing Transparency

When you submit an essay for grading, the full text of your essay is sent to the Google Gemini API. Google processes this text to generate a score and written feedback. Your essay text is not used by us to train AI models. For details on how Google handles data sent to the Gemini API, refer to Google's privacy policy and Gemini API terms of service.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days. Some anonymized, aggregated data (such as total question answer counts) may be retained indefinitely for analytics purposes.

6. Your Rights

You have the right to:

• Access your data: View the data we hold about you through your profile page
• Download your data: Export all of your study data as a JSON file from your profile page
• Delete your data: Request deletion of your account and all associated data
• Unsubscribe from emails: Opt out of marketing emails at any time using the unsubscribe link in any email
• Correct your data: Update your display name and email through your profile settings

California residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete that information, and the right to opt out of the sale of your personal information. As stated above, we do not sell personal data. To exercise your CCPA rights, contact us at support@juridionai.com.

Virginia residents (VCDPA)

If you are a Virginia resident, you have rights under the Virginia Consumer Data Protection Act, including the right to access, correct, delete, and obtain a copy of your personal data, and the right to opt out of the processing of your personal data for targeted advertising or the sale of personal data. We do not sell personal data or process it for targeted advertising. To exercise your VCDPA rights, contact us at support@juridionai.com.

Colorado residents (CPA)

If you are a Colorado resident, you have rights under the Colorado Privacy Act, including the right to access, correct, delete, and obtain a portable copy of your personal data, and the right to opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. We do not sell personal data, use it for targeted advertising, or engage in such profiling. To exercise your CPA rights, contact us at support@juridionai.com.

Connecticut residents (CTDPA)

If you are a Connecticut resident, you have rights under the Connecticut Data Privacy Act, including the right to access, correct, delete, and obtain a copy of your personal data, and the right to opt out of the sale of personal data or targeted advertising. We do not sell personal data or use it for targeted advertising. To exercise your CTDPA rights, contact us at support@juridionai.com.

7. Security

All data transmitted between your browser and our servers is encrypted using TLS. Access to our database and server infrastructure is restricted to authorized personnel. While we take reasonable measures to protect your data, no system is completely secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Service is intended for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from a person under 18, we will delete that information promptly.

9. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the "Last Updated" date at the top of this page and notify you by email if the changes are material.

10. Contact

If you have questions about this privacy policy or your data, contact us at support@juridionai.com.