Legal

Privacy Policy

Last updated: September 24, 2026

SparkPay ("SparkPay", "we", "us", or "our") provides a self-custodial, multi-chain crypto wallet. This policy explains what we collect, why, and the control you keep. By using SparkPay, you agree to the practices described here.

You hold the keys, not us. SparkPay secures your wallet with multi-party computation (MPC) threshold signing. Your key shares are generated and held on your own device and by your passkey. SparkPay never holds your complete private key and never takes custody of your funds — we cannot move, freeze, or recover your assets on your behalf.

1Information We Collect

We collect only what is needed to run the wallet:

Email address. Used to sign you in with a one-time passcode and to send security notices you enable. Never used for advertising.
Passkey / device credentials. A passkey authorizes your MPC key share. Its private key never leaves your device or platform keychain.
Public wallet addresses. Stored so we can display balances, activity, and notifications. Public addresses are already visible on public blockchains.
Push token. If you enable notifications, a device push token lets us deliver transaction and security alerts.
Basic technical data. App version, device type, and coarse diagnostic logs used to keep the service reliable and secure.

2What We Never Collect

We do not collect or store your private keys, key shares, seed phrases, or recovery codes. We do not sell your personal information, and we do not use your data for third-party advertising.

3How We Use Information

To authenticate you and protect your account (email passcode and passkey).
To show balances, prices, and transaction activity for your addresses.
To deliver the notifications you opt into.
To detect abuse, prevent fraud, and comply with applicable law.
To operate, maintain, and improve the app's reliability and security.

4Blockchain & Third-Party Services

Transactions you sign are broadcast to public blockchains and are permanent, public, and outside our control. Token swaps are routed through independent third-party decentralized exchange (DEX) aggregators. When you open a decentralized application (dApp) in the in-app browser, your interaction is governed by that dApp's own terms and privacy practices. We also rely on infrastructure providers for blockchain data, price data, email delivery, and push notifications; each processes data only to perform its function.

5Data Retention

We retain account data (such as your email and associated public addresses) while your account is active. Diagnostic logs are kept for a limited period, then deleted or aggregated. You may request deletion at any time (see below).

6Security

MPC threshold signing means no single party ever holds a complete signing key, and traffic to our servers is encrypted in transit. Because SparkPay is self-custodial, you are responsible for safeguarding your device, passkey, and recovery code. If you lose access to all of them, we cannot restore your wallet.

7Your Choices & Rights

Disable notifications at any time in your device settings.
Request access to, correction of, or deletion of the personal data tied to your account by emailing us.
Stop using the app and remove it at any time; your on-chain assets stay under your control through your key shares.

8Children's Privacy

SparkPay is not directed to anyone under 18, and we do not knowingly collect their personal information.

9Availability

SparkPay is offered to users in the United States. Availability may change over time and features may vary by jurisdiction.

10Changes to This Policy

We may update this policy from time to time. Material changes are reflected by the "Last updated" date above and, where appropriate, by an in-app notice.

11Contact Us

Questions or data requests? Email support@sparkpay.pro or visit our Support Center. See also our Terms of Service.