Last Updated: July 28, 2026
Security is core to how Sparai is built. This page explains the practical measures we take to keep your account and data safe.
1. Authentication
Sparai has no passwords to steal or leak. Sign-in is handled entirely through Firebase Phone Authentication with a one-time code sent to your number — every login is verified freshly, and we never store or see the code itself.
2. Data in Transit & at Rest
All traffic between your device and our servers is encrypted over HTTPS/TLS. Profile and training data is stored in a managed Supabase Postgres database with row-level security enabled, and all writes go through authenticated server-side routes rather than directly from the app.
3. Payments
Subscription payments are processed by Razorpay, a PCI-DSS compliant payment gateway. Sparai never sees or stores your card, UPI, or netbanking credentials — that information never touches our servers.
4. Access Controls
Administrative access to production data is restricted, logged, and limited to what's needed to operate the service. Service credentials (database keys, signing keys) are kept server-side only and are never shipped to the browser.
5. Reporting a Concern
If you believe you've found a security issue or vulnerability, please email us immediately at spar.ai.support@gmail.com with details — we take these reports seriously and will respond promptly.