Skip to content

Last updated: July 2026

Privacy Policy

This Privacy Policy explains how Brady Salcido, doing business as JourneySpark ("JourneySpark," "we," "us") collects, uses, shares, and protects personal information when you use the JourneySpark platform, websites, applications, and embeddable widgets (the "Service").

JourneySpark is a wellness coaching and client-engagement platform. By design, the Service never solicits, structures, or surfaces clinical information. It captures self-reported subjective experience — how a person feels about their journey — and is not a medical, clinical, or HIPAA-covered service. For matters concerning health data, our Consumer Health Data Policy provides additional, controlling disclosures.

Capitalized terms not defined here have the meaning given in our Terms of Service.

1. Coaches and Clients: our role

JourneySpark serves two kinds of Users:

  • For a Coach's own account, billing, and use of the Service, JourneySpark determines how information is handled.
  • For the Client information a Coach collects through the Service, the Coach directs what is collected within the Service's wellness scope, and JourneySpark processes that information to provide the Service to the Coach and the Client. Coaches are responsible for their own privacy practices and for complying with laws applicable to their Clients.

Clients always retain rights over their own information as described in Sections 8 and 9 and can exercise those rights directly with JourneySpark.

2. Information we collect

2.1 Information you provide.

  • Account information — name, email, password, and profile details.
  • Client self-reported content — reflections, notes, and subjective experience ratings (for example, energy, sleep, mood, and habit ratings) that a Client enters in their own words.
  • Coach content — program templates, check-in questions, coach notes, and edits to generated narratives.
  • Consent selections — a Client's choices about whether and how their story may be shared or published.
  • Communications — messages you send us.

We do not request, and Users agree not to enter, clinical documentation, diagnoses, medications, lab values, or other protected health information.

2.2 Information collected automatically.

  • Usage and device data — pages viewed, features used, approximate location derived from IP address, browser and device type, and similar analytics.
  • Log and security data — IP address, timestamps, and diagnostic data used to operate and secure the Service.

2.3 Payment information. Subscription payments are processed by our payment processor. We do not store full card numbers; we receive limited billing details (such as the last four digits and billing status).

2.4 Cookies and similar technologies. We use strictly necessary cookies to run the Service. We use limited analytics cookies to understand usage only after you consent through our cookie banner, and we honor Global Privacy Control and similar browser opt-out signals where applicable. You can change your cookie choices at any time through the banner or your browser settings.

3. How we use information

We use personal information to:

  • provide, operate, secure, and maintain the Service;
  • generate SparkMoments, case-study narratives, and other AI-assisted content from self-reported data, for review by the Coach;
  • serve consented Published Assets and power the Outcomes Widget;
  • process subscriptions and payments;
  • communicate with you about the Service;
  • provide support and respond to requests;
  • monitor, debug, and improve the Service and develop new features;
  • detect, prevent, and address fraud, abuse, and security issues; and
  • comply with legal obligations and enforce our Terms.

We do not use Client self-reported content to make automated decisions that produce legal or similarly significant effects about a Client.

4. AI processing

To produce Generated Content, self-reported data is processed by our AI model provider (Anthropic) under commercial terms that restrict the provider from using it to train its models. Generated Content may be inaccurate and is provided for Coach review; it is not a clinical or professional assessment.

5. How we share information

We share personal information only as described here. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

  • Within the Coach–Client relationship. A Client's information is available to their inviting Coach as necessary to provide the Service; a Coach's designated content is available to their Clients as configured.

  • Consented publishing. Where a Client has consented, associated content may be published as a Published Asset or served through the Outcomes Widget at the identification level the Client chose.

  • Service providers (sub-processors). We share information with vendors that help us run the Service, bound by contract to protect it and use it only on our behalf:

    PurposeProvider
    Application hosting and databaseSupabase
    Website and edge hostingVercel
    Subscription billing and paymentsStripe
    Product analyticsPostHog
    AI-assisted content generationAnthropic
    Transactional email deliveryResend

  • Legal and safety. We may disclose information to comply with law, respond to lawful requests, or protect the rights, safety, and security of Users, the public, or JourneySpark.

  • Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

6. Aggregated and de-identified data

JourneySpark may use anonymized, aggregated, non-identifiable data for platform analytics, research partnerships, and industry reporting. No individually identifiable information is ever included in aggregate reports or shared with third parties. Aggregate data cannot be reverse-engineered to identify any individual client or coach.

We maintain and use such aggregated data in a form that does not identify any individual, and we do not attempt to re-identify it.

Client self-reported content is private by default and is not published without the Client's affirmative, specific, informed, and revocable consent, obtained through the Service. A Client controls whether a story may be shared and the level of identification. A Client may withdraw or change consent at any time; withdrawing consent automatically unpublishes the associated content from JourneySpark-controlled surfaces, and the Coach is notified. Because content may have been exported or displayed off-platform, removal from locations outside our control cannot be guaranteed.

8. Your privacy rights and choices

Depending on where you live, you may have rights to access, correct, delete, and export your personal information, to withdraw consent, and to opt out of any sale or sharing (note: we do not sell or share for cross-context behavioral advertising).

How to exercise rights. Email us at privacy@journeyspark.io. We will verify your identity before acting and respond within the timeframes required by applicable law. You may use an authorized agent where permitted. We will not discriminate against you for exercising your rights. If we deny your request, you may appeal by replying to our response.

Clients and Coaches. Clients may export and delete their own data and retain access to their own story. Because Coaches direct some Client information within the Service, we may coordinate certain Client requests with the relevant Coach as required by law.

California residents. We collect the categories of information described in Section 2 for the purposes in Section 3, and disclose them to the categories of providers in Section 5. We have not sold or shared personal information as those terms are defined under the CCPA/CPRA. California residents have the rights described above.

9. Data retention and deletion

We retain personal information for as long as needed to provide the Service and for legitimate business and legal purposes, then delete or de-identify it. On account termination, we delete or retain User Content in accordance with this Policy and applicable law; you are responsible for exporting anything you wish to keep before termination. Deletion requests are honored subject to technical and legal limits, and residual copies may persist in backups for a limited period before being overwritten.

10. Security

We use reasonable administrative, technical, and organizational safeguards — including access controls and row-level security — to protect personal information. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential.

11. Data location

Personal information is processed and stored in the United States and may be processed by our providers in other locations. We do not commit to keeping data within any specific region.

12. Children

The Service is not directed to, and may not be used by, anyone under 18. We do not knowingly collect personal information from children. If we learn we have, we will delete it.

The Service may link to third-party sites or services we do not control. This Policy does not apply to them; review their privacy policies.

14. Changes to this Policy

We may update this Policy. We will post the updated version with a new "Last updated" date and, for material changes, provide notice in-product or by email where appropriate.

15. Contact

Privacy questions or requests: privacy@journeyspark.io General: hello@journeyspark.io