This Privacy Policy explains how Sparklet, Inc., doing business as Med Toolkit (“we”), collects, uses, and protects information when you use med·toolkit (the “Service”). We aim to collect only what we need to run the Service and to be clear about how it is used.
1. Information we collect
Information you provide
- Account information — your email address and a hashed password. We store passwords using one-way hashing and never in plain text.
- Content you submit — the outlines, prompts, table summaries, and other inputs you provide to generate results.
- Payment information — processed by our payment provider (Stripe). We receive transaction metadata (amount, currency, status) but not your full card number.
Information collected automatically
- Usage data — actions you take in the Service, features used, and records of billable usage.
- Technical data — IP address, device and browser information, and sign-in history, used for security and diagnostics.
Please do not submit protected health information (PHI) or data that identifies real patients. The Service is designed for synthetic, marginal-only data and research writing.
2. How we use information
We use the information above to:
- Provide, maintain, and improve the Service and generate the results you request.
- Verify sign-ups, authenticate logins, and secure accounts.
- Process payments, credit, and unlocks, and keep your billing history.
- Detect, prevent, and investigate abuse, fraud, and security incidents.
- Communicate with you about your account and important Service changes.
3. AI processing & subprocessors
To generate results, the content you submit may be sent to third-party model providers and infrastructure acting as our subprocessors. We share only what is needed to perform the requested task. Representative providers include:
- Large-language-model providers that generate text and analysis.
- Cloud hosting and database providers (including Amazon Web Services).
- Amazon SES for transactional email (such as verification codes).
- Stripe for payment processing.
We do not sell your personal information, and we do not use the content you submit to train our own models.
5. Data retention
We keep account information for as long as your account is active and as needed to provide the Service. We retain transaction and billing records as required for legal, accounting, and audit purposes. You may request deletion of your account as described below; some records may be retained where the law requires it.
6. Security
We use technical and organizational measures to protect your information, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Your rights & choices
Depending on where you live, you may have rights to access, correct, export, or delete your personal information, or to object to certain processing. To exercise these rights, contact us at hello@med-toolkit.com. You can also update your profile and manage payment history from within your account.
8. Children
The Service is not directed to children under 18, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.
9. International transfers
We operate the Service using infrastructure primarily located in the United States. If you access the Service from outside the United States, your information may be transferred to and processed in countries whose data-protection laws differ from those of your country.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate.
11. Contact
For privacy questions or requests, email hello@med-toolkit.com.