Last updated 9 November 2026

Privacy Policy

This policy explains how HASHSPARKS PTE. LTD. (“HashSparks”, “we”, “us”), a company incorporated in Singapore, collects, uses and protects personal data across our websites, apps and services (together, our “products”).

1. Scope, and how this policy relates to product policies

This is our company-wide privacy policy. It applies to hashsparks.org, to the shared HashSparks sign-in service our apps use, and to any of our products that does not publish its own privacy policy.

Many of our products, such as hangout.chat, OpenStory, Convosense and Kiasu Labs, publish their own privacy policy describing exactly what that product collects and why. Where a product has its own privacy policy, that policy governs your use of that product and prevails over this one if they differ. This policy then fills in anything the product policy does not address.

2. Personal data we collect

Depending on the product and how you use it, we may collect:

Account data — your email address, display name, profile picture and account settings.
Sign-in data — when you sign in with Google or Apple, the provider tells us your email address, whether it is verified, and (Google always, Apple the first time only) your name; Google may also share your profile picture. Apple may give a private relay address instead of your real email. We do not request access to your contacts, files, mail or calendar.
Content you provide — messages, voice, images, stories, prompts, uploads and other material you create or send in a product, and the responses our products generate for you.
Purchase data — your purchases, subscriptions and credit balances. Payments are handled by payment processors and app stores (for example Stripe, Apple and Google); we do not receive or store your full card number.
Technical and usage data — device and app information, approximate location derived from your network (such as country), log data, diagnostics, and how you use features.
Communications — what you send us when you contact support or give feedback.

Some products let you use camera, microphone or screen sharing. These are used only while you have them turned on, for the feature you are using, and the product's own policy explains whether anything is kept.

3. How we use personal data

To provide, operate and maintain our products, including creating and finding your account in the product you sign in to.
To generate AI responses and other content you request.
To process payments, prevent fraud and enforce spending limits.
To keep our products safe and secure, including detecting abuse and enforcing our terms.
To understand usage, fix problems and improve our products.
To communicate with you about your account, purchases, changes and support requests.
To comply with legal obligations and respond to lawful requests.

We collect, use and disclose personal data with your consent, which you give when you use a product or sign in, or where otherwise permitted by the Personal Data Protection Act 2012 (Singapore) and other applicable law. Where the law of your country requires a legal basis, we rely on performance of our contract with you, our legitimate interests in running and securing our products, your consent, and compliance with legal obligations.

We do not sell your personal data, and we do not use sign-in data for advertising. We share personal data only:

With service providers who process it on our behalf, such as cloud hosting and databases, AI model providers that generate responses, payment processors, email delivery and customer support tools, under obligations to protect it.
With other users, where a feature is designed for sharing and you choose to share.
Where required by law, legal process or a government request, or to protect the rights, safety and property of you, other users, us or the public.
In connection with a merger, acquisition or sale of all or part of our business, subject to this policy.

Each of our products keeps its own accounts. Signing in to one product through the shared HashSparks sign-in service does not give other products access to your content.

5. International transfers

We are based in Singapore, and our service providers may process data in other countries. When we transfer personal data outside Singapore, we take steps to ensure it receives a standard of protection comparable to that under Singapore law, for example through contractual safeguards.

6. Retention

We keep personal data for as long as your account is active or as needed to provide the product, and afterwards only as long as needed for legal, accounting, security or dispute-resolution purposes. Then we delete or anonymise it.

7. Security

We use reasonable administrative, technical and physical safeguards, including encryption in transit and access controls. No system is perfectly secure, and we will notify you and the relevant authorities of a data breach where the law requires.

8. Your choices and rights

You may ask to access or correct your personal data, withdraw your consent, or delete your account. Where a product offers it, you can delete your account from inside the product; you can always email contact@hashsparks.org with the product's name and the email you sign in with. Deleting an account also removes the link to your Google or Apple identity, and you can revoke our access in your Google or Apple account settings at any time.

If you are in the European Economic Area, the United Kingdom, California or another place whose law gives you further rights (such as data portability, restriction or objection, or to opt out of certain processing), you may exercise them by contacting us. We will not discriminate against you for exercising your rights. We may need to verify your identity before acting on a request, and we respond within the time required by law.

If you are not satisfied with our response, you may complain to the Personal Data Protection Commission of Singapore or to your local data protection authority.

9. Children

Our products are not directed to children under 13, and some products set a higher minimum age in their own terms. We do not knowingly collect personal data from children below the applicable age. If you believe a child has given us personal data, contact us and we will delete it.

10. Cookies and similar technologies

We use cookies and local storage that are needed to keep you signed in and to make our products work, and first-party analytics to understand usage. Where a product uses non-essential cookies, it says so and, where required, asks first.

11. Changes to this policy

We may update this policy from time to time. We will post the new version here with a new “last updated” date and, for material changes, give notice in the affected products where appropriate.

12. Contact and Data Protection Officer

For privacy questions or requests, contact our Data Protection Officer at contact@hashsparks.org.

HASHSPARKS PTE. LTD., Singapore.