Privacy policy

1. What we collect

When you sign in to Spark or the BCL App we collect:

• Email address — used to send a one-time 6-digit sign-in code and to associate your queries with your account.
• Audio captured by the glasses microphone — only while Spark is open and you are actively speaking. Audio chunks are sent to our speech-to-text service for transcription and are not retained after transcription completes.
• Transcribed text and assistant replies — sent to our self-hosted inference gateway to generate a response. Conversation history persists in memory only for the lifetime of the open session and is discarded when you close the plugin.
• Diagnostic logs — minimal request metadata (timestamp, status code, response time) for reliability monitoring. No audio, transcripts, or replies are written to logs.

2. What we do not collect

• We do not record video, photos, or images. Spark does not access the camera.
• We do not collect location data.
• We do not sell, rent, or share your data with advertisers.
• We do not use your conversations to train AI models.

3. Permissions Spark requests

• g2-microphone — Spark needs the glasses microphone to hear your question. Audio is captured only while the plugin is open and is sent only to our speech-to-text service.
• network — Spark connects to ebelzohvuzdavpgwxtdo.supabase.co to verify your sign-in and to route transcription and chat requests through our backend. No other domains are contacted from the plugin.

4. Where your data goes

• Supabase (San Francisco, CA) — handles authentication and runs the edge functions that broker your requests. They store your email and a hashed sign-in token. Their privacy policy is at supabase.com/privacy.
• Cloudflare (San Francisco, CA) — fronts the tunnel between Supabase and our self-hosted inference server. Cloudflare may temporarily process traffic to deliver it but does not retain content.
• Blue Collar Labs Academy inference gateway — runs on hardware we own and operate in New Jersey. Speech-to-text uses faster-whisper (open source). Chat completions use Qwen 2.5 7B (open source) running locally. Neither model is connected to any third-party AI provider.

5. Data retention

Audio is processed in transit and not stored. Transcripts and replies live only in your active session and are discarded when you close the plugin or sign out. Your email and account record are retained until you ask us to delete them.

6. Your rights

You can request deletion of your account and any associated records at any time by emailing privacy@bluecollarlabs.org. We will confirm deletion within 30 days. If you are a California, Virginia, Colorado, Connecticut, or Utah resident, you have additional rights under your state's privacy law and may exercise them via the same email.

7. Children

Spark and the BCL App are not directed to children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided data to us, contact us and we will delete it.

8. Security

Sign-in is JWT-based and traffic is encrypted in transit (TLS 1.2+). The gateway secret that authenticates our edge functions to the inference backend is held server-side and never shipped to the plugin or app.

9. Changes

We will post any material changes to this page and update the effective date above. Continued use of Spark or the BCL App after a change means you accept the updated policy.

10. Contact

Blue Collar Labs Academy
Middletown, NJ
privacy@bluecollarlabs.org