LifeSpool

Privacy Policy

Colorado Sparks Labs, Inc. · Effective date: January 1, 2025 · Last updated: May 24, 2025

Plain-language summary: LifeSpool stores your recordings and personal memories on your behalf. We do not sell your data. Your recordings are private by default. You can export or delete everything at any time.

1. Who we are

Colorado Sparks Labs, Inc. ("Colorado Sparks Labs," "we," "us," or "our") operates the LifeSpool platform, including the web application at lifespool.com and the LifeSpool iOS app (collectively, the "Service"). Our registered address is 9783 Burberry Way, Highlands Ranch, CO 80129, and we can be reached at [email protected].

2. Information we collect

Account information. When you register, we collect your name, email address, and password (stored as a hashed value). If you sign in via Apple or Google, we receive a unique identifier and, if you consent, your name and email from that provider.

Your recordings and content. Audio and video recordings you create ("Spools"), written transcripts generated from those recordings, prompt responses, chapter titles, and any other content you upload or create within the Service.

Usage data. Log files, device type, operating system version, app version, IP address (truncated after 30 days), session timestamps, and feature-interaction events. We use this to improve the Service and diagnose errors.

Payment information. If you subscribe to a paid plan, payment is processed by Stripe. We store only the last four digits of your card and the billing ZIP code. Full card numbers never touch our servers.

3. How we use your information

  • To provide, operate, and maintain the Service
  • To generate personalized prompts using the Anthropic API — your content is sent to Anthropic solely for this purpose under a data processing agreement
  • To transcribe recordings using OpenAI Whisper — audio is transmitted to OpenAI for transcription and is not used to train their models under our enterprise agreement
  • To send transactional emails (account confirmation, password reset, storage warnings)
  • To investigate abuse, fraud, or violations of these terms
  • To comply with applicable law

We do not use your recordings or transcripts to train our own AI models. We do not sell, rent, or share your personal data with advertisers.

4. Storage and security

Recordings are stored in Amazon S3-compatible object storage in the United States. All files are encrypted at rest (AES-256) and in transit (TLS 1.2+). Access is controlled via short-lived pre-signed URLs generated at request time; no permanent public URLs exist for your content.

We conduct annual penetration tests and maintain SOC 2 Type II controls. Despite these measures, no system is perfectly secure. You are responsible for keeping your password confidential.

5. Data retention and deletion

Your account and all associated content remain available for as long as your account is active. If you delete a Spool, it is removed from our production systems within 24 hours and from backups within 30 days.

If you close your account, all recordings, transcripts, and personal data are deleted within 90 days, except where retention is required by law (e.g., tax records) or for fraud investigation. You may request an export of all your data before deletion via Settings → Account → Export My Data.

6. Your rights

Depending on your location, you may have rights under GDPR, CCPA, or equivalent laws, including the right to access, correct, export, or delete your personal data. Submit requests to [email protected]. We respond within 30 days. We will not discriminate against you for exercising these rights.

7. Cookies and tracking

We use strictly necessary session cookies for authentication. We do not use advertising cookies, third-party tracking pixels, or behavioral analytics SDKs. The iOS app does not use the IDFA (advertising identifier).

8. Children's privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly.

9. Changes to this policy

We will notify you by email and in-app notice at least 30 days before making material changes. Continued use after the effective date constitutes acceptance.

10. Contact

Questions about this policy:

Colorado Sparks Labs, Inc. — Privacy Team [email protected] 9783 Burberry Way, Highlands Ranch, CO 80129