Privacy Policy

Spark (“we”, “us”) runs spark.dating and related live speed dating events. This Privacy Policy explains what personal data we collect, why, who we share it with, how long we keep it, and your rights.

We process data to run events, match guests, keep people safer, operate accounts, and improve the product. Contact: sparkdating.th@gmail.com

Where Thailand’s Personal Data Protection Act B.E. 2562 (PDPA) applies, Spark is the data controller for personal data processed through the Service.

Account: email, phone (if provided), hashed password via our auth provider, and authentication logs.

Profile: display name, date of birth, gender, who you want to meet, city, bio, interests, languages, and profile photo.

Match contacts you choose to add: LINE ID, WhatsApp number, and social handle. These are stored separately and shown only to people you match with.

Events: attendance, device-check status, presence heartbeats, pairing history, and host actions (mute, remove, ban).

Safety: reports, early-exit reasons, pairing blocks, recording consent timestamps, and related notes.

Chat: text messages between matched users, read state, and timestamps.

Technical: approximate IP, browser and device info, and diagnostics needed to run video and prevent abuse.

Video: after you explicitly agree on the event page, we record the lobby and video dates (camera and microphone) for safety and moderation. Recordings are not a public feed.

Contract: creating your account, showing your profile to event guests and matches, running pairings and rotations, delivering chat, and providing the Service you asked for.

Consent: event recording (you must agree before joining the waiting room, lobby, or a date); optional contact details shared after a match; optional marketing if we ever send it.

Legitimate interests / legal obligations: security, fraud prevention, safety review of reports and recordings, enforcing our Terms, and keeping records the law requires.

You may withdraw consent where processing is based on consent (for example, by not joining an event, or by clearing match contact fields). Withdrawal does not affect processing already done.

We do not sell your personal data.

Other guests at an event can see your event profile (photo, name, age, and fields you choose to share) as needed for matching. Matches can also see contact details you added for sharing after a match.

Hosts and Spark staff can see operational and safety information needed to run and moderate events, including recordings when reviewing an incident.

Service providers process data on our behalf and may only use it to provide their services to us: authentication and database (Supabase), live video and recording (Stream), and hosting (Vercel).

We may disclose information if required by law, to protect someone’s vital interests or safety, or to establish or defend legal claims.

We only start event recording after you give explicit, per-event consent. If you refuse, you cannot join that night.

Recordings are used for safety review and moderation. They are not published, not sold, and not shared with other guests. Access by staff is logged.

Recordings are kept for a limited review window and then deleted or strictly access-restricted. Safety incidents may be retained longer where needed for investigation or law.

Account and profile data: while your account is active, then deleted or anonymized after a deletion request except as below.

Chat: while the match remains active; unmatched chats are no longer available to you.

Safety reports, blocks, bans, and some audit logs: longer, as needed for moderation, legal claims, or legal obligations.

Technical logs: typically a short operational window unless tied to a security or safety incident.

Depending on applicable law (including PDPA), you may request access, correction, deletion, restriction, or a copy of personal data we hold about you, and object to certain processing.

You can edit your profile, unmatch or block people, report misconduct, and request account deletion from Account → Safety while signed in.

Email sparkdating.th@gmail.com to exercise rights or ask questions. We may need to verify your identity. You may also complain to the Thai Personal Data Protection Committee or another competent authority.

We use encryption in transit, access controls, and least-privilege admin tools. No system is perfectly secure. Tell us immediately if you suspect unauthorized access.

Infrastructure may process data outside Thailand (for example cloud regions used by our providers). We choose vendors that offer appropriate contractual and technical safeguards.

Spark is only for adults 18 and over. We do not knowingly collect personal data from children. If we learn that we have, we will delete the account and related data except where we must retain records for safety or law.

We use essential cookies and similar storage to keep you signed in, protect the Service, and remember basic preferences (for example camera background). We do not use third-party advertising cookies.

We may update this Policy. The “Last updated” date will change when we do. Significant changes will be highlighted in-product or by email when practical. Continued use after an update means you accept the revised Policy where the law allows.