Back to Spright

Spright — Privacy Policy

Last updated: 18 September 2026

This policy explains what information Spright collects, why we need it, which companies help us handle it, and the choices you have. We’ve tried to write it the way we’d explain it to a friend.

Spright is made by RMexpertise Consultants (Pty) Ltd (Registration No. 2011/002770/07), D’Stellen Estate No. 20, 60 Bredell Rd, Somerset West, 7130, South Africa (“we”, “us”). We are the “responsible party” for your personal information under South Africa’s Protection of Personal Information Act, 2013 (“POPIA”). Spright is offered in South Africa.

Spright is a wellbeing companion, not a medical device, and not a substitute for professional care. Ekō is an AI, not a person, and it can get things wrong. If you’re in danger right now, call 112 from any cellphone in South Africa, or your local emergency number. To talk to someone, call the SADAG Suicide Crisis Helpline on 0800 567 567, any time.

The short version

  1. What we collect
  2. Health information
  3. How we use it
  4. About Ekō
  5. The companies that help us
  6. Information sent outside South Africa
  7. Encryption and security
  8. How long we keep things
  9. Your rights and choices
  10. Spright is for adults
  11. Crisis and emergencies
  12. Changes to this policy
  13. Contact us

1. What we collect

Kept on our servers

Stored with our database provider, Supabase, in Paris, France (see section 5).

WhatDetails
Your accountYour email address and a password, which is stored scrambled (hashed), never as readable text. You can also use Spright with an anonymous account and no email. The name or nickname you give us is saved with your account.
Mood check-insWe save new ones only while ‘My check-ins and journal’ is on, apart from older test versions until 30 September 2026 (see section 2). Turning it off doesn’t delete the ones we already have (see sections 2 and 8). The feeling you choose, its emoji and how strong it is, a wellbeing score, and where the feeling sits on an energy and pleasantness scale. Check-ins saved before 12 August 2026 can also include what you said was behind the feeling and a note you wrote. Unlike your journal, check-ins are not encrypted on your phone first.
Journal entriesWe save new ones only while ‘My check-ins and journal’ is on, apart from older test versions until 30 September 2026 (see section 2). Turning it off doesn’t delete the ones we already have (see sections 2 and 8). What you write in Reflect, and what you save from Thought Capture, Three Good Things and the exam programme. It’s encrypted on your phone before it’s saved, so we only hold scrambled text we can’t read. We can see when each entry was made, and which of those tools it came from.
Safe Space chatsWe save new ones only while ‘Safe Space chats’ is on, so you can read them again. Turning it off doesn’t delete the ones we already have (see sections 2 and 8). Both sides of the conversation while Safe Space is on, encrypted on your phone before they’re saved. We can see when each message was sent and whether it was yours or Ekō’s, but not what it says. Safe Space starts when you tap one of the topics on Ekō’s screen (Self-worth, Relationships or Future), or when Ekō moves into it because a conversation feels heavy. The screen shows “Safe Space” while it’s on.
Emotion notesWe save new notes only while ‘Notes from my chats’ is on, and a new note from a Safe Space chat only while ‘Safe Space chats’ is on too. Turning either off doesn’t delete the notes we already have (see sections 2 and 8). While ‘Notes from my chats’ is on, when you clearly tell Ekō how you’re feeling, Claude writes a short note of it: the feeling, a few themes such as “work” or “sleep”, and how sure it is. We keep the feeling and the themes, never your words, so you can see what keeps coming up in your chats. Notes saved before 16 September 2026 may also include how strong the feeling was (1–10), a wellbeing score (0–100) and how sure Claude was.
Your choices about what Spright keepsEach time you set a switch (after making your account, when you say yes to keeping something as you save it, or in You › What Spright keeps) and each time you delete what’s kept: which switch, whether you turned it on or off or deleted what it covers, the version of the words you saw, where you chose, whether we told you we already had some, your app version and phone type, and when. We use it to follow your choices on every phone and in what Claude is told (see section 5.1), and keep it to show what you chose.
Reports about EkōIf you report one of Ekō’s replies: that reply, the reason you chose, any note you add, and your own message only if you tick the box to include it. Reports are saved unencrypted so we can read them, even if the reply came from a Safe Space chat.
Usage recordsWhich feature you used and when (such as a chat reply, a voice note, a spoken reply, a check-in, a journal entry or an emotion note), how much processing it took, which AI model did the work, its estimated cost, and the voice you picked for Ekō. They never include what you wrote or said. We use them to run fair-use limits, keep Spright affordable and see how Spright is used. People at RMexpertise can see them alongside your account.

Kept only on your phone (and most of it in your phone’s own backups, if you use them)

Sent to other companies when you use a feature

Your chats, voice recordings and some details go to the companies that help Ekō, but only after you say yes. Section 5.1 lists exactly what each one receives.

Collected automatically

2. Health information

Mood check-ins, journal entries, emotion notes, Safe Space chats and conversations with Ekō can reveal things about your mental health. POPIA treats health information as special personal information, so we ask before keeping any new check-ins, journal entries, emotion notes or Safe Space chats.

After you make an account, Spright asks what it should keep, with three switches, each off until you turn it on:

While a switch is off, we don’t keep anything new of that kind, apart from what you choose to send in a report about Ekō (see section 1), and we don’t share what we already have of that kind with anyone, Claude included. Turning a switch off doesn’t delete what we already have. Until you delete it, it can still show to you in Reflect, on Home and in Ekō’s Safe Space history. You can delete it in You › What Spright keeps, and section 8 says how long it’s kept otherwise. We ask you separately before anything goes to an AI company.

If you used a test version of Spright before 16 September 2026, we kept your check-ins, journal entries, emotion notes and Safe Space chats from that time without asking this first. When Spright asks, it tells you if it already has some.

Test versions of Spright from before 16 September 2026 don’t ask this. Until 30 September 2026, if you haven’t chosen yet, they keep saving your check-ins and journal entries as before. They keep Safe Space chats only if you’ve switched ‘Safe Space chats’ on.

From 16 September 2026, on any version, your recent moods go to Claude only while ‘My check-ins and journal’ is on, and Spright saves new emotion notes only while ‘Notes from my chats’ is on. Older test versions still send your recent moods to Spright with each message, and unless ‘My check-ins and journal’ is on, Spright discards them before anything goes to Claude. Once you’ve chosen, a switch you turned off applies on every version, even if an older version says something was saved.

3. How we use it

We don’t sell your information, we don’t use it for advertising, and we don’t use it to train AI models.

Is giving us information optional? Yes, and no law requires you to give it to us. Without an account (an anonymous one is fine), Spright can’t save anything for you. With every switch in section 2 off, we keep no new check-ins, journal entries, emotion notes or Safe Space chats, apart from what you choose to send in a report about Ekō, and the rest of Spright still works. Without your yes to AI, Ekō and voice notes won’t work, but mood check-ins, your typed journal, calming tools, crisis lines and the SOS shield all will.

4. About Ekō

Ekō is an AI, not a person and not a clinician. It can misunderstand you or get things wrong, and it doesn’t diagnose or treat any condition. No one at Spright reads your chats with Ekō: we don’t save everyday chats, we can’t read the Safe Space chats we keep, and we only see an Ekō reply (and your message, if you choose to include it) when you report it. When Ekō talks back, the spoken reply is deleted from ElevenLabs straight after it’s made (see section 5.1).

To write each reply, Ekō uses Claude, by Anthropic. In the same step, Claude may write an emotion note (we save it only while ‘Notes from my chats’ is on), suggest you speak to a professional, offer a reminder that you confirm with a tap, or move Ekō into Safe Space, its gentler mode, when a conversation feels heavy. Safe Space also starts when you tap Self-worth, Relationships or Future on Ekō’s screen. While Safe Space is on, and ‘Safe Space chats’ is switched on, the chat is saved, encrypted on your phone first. None of this makes decisions about you that have legal or similarly serious effects, and you can always ignore Ekō’s suggestions.

5. The companies that help us

We only share what each company needs to do its job for us. Anthropic, OpenAI, ElevenLabs, Supabase and Sentry may use it only to provide their service to Spright, and to keep that service safe and within the law, under their terms with us.

5.1 The companies that help Ekō

Nothing goes to these three companies until you say yes. Chat and voice are separate choices, and you can switch either off at any time in You › AI and your data. If you’d rather not, mood check-ins, your typed journal, calming tools, crisis lines and the SOS shield all work without them.

Claude, by Anthropic

Anthropic, PBC · United States

What it does
Writes Ekō’s replies, and the emotion notes Spright saves while ‘Notes from my chats’ is on (see section 1).
What it receives
Everything you say to Ekō, typed or spoken, in Safe Space too, with the recent messages before it so Ekō can follow the conversation. Also your nickname, the feelings from your last five mood check-ins (only while ‘My check-ins and journal’ is on), today’s date, whether Safe Space is on, your choices about what Spright keeps (see section 2), whether you’ve saved a professional to your Care Team (never who), and the country you chose in Spright, so Ekō only offers crisis lines you can actually dial.
What happens after
Anthropic’s commercial terms say it doesn’t train its AI on what Spright sends. Anthropic normally deletes it within 30 days. If its automated safety systems flag a conversation as breaking its usage rules, it can keep that conversation for up to 2 years and a safety score for up to 7 years. It also keeps things longer where the law requires.
When
Only after you say yes to talking with Ekō.

OpenAI

OpenAI · United States

What it does
Turns your voice recordings into text, when you talk to Ekō by voice or record a journal voice note.
What it receives
The recording, and nothing else about you.
What happens after
OpenAI says it doesn’t use what Spright sends to train its models, and doesn’t keep recordings sent for transcription. Spright doesn’t keep your recordings on its servers either.
When
Only after you say yes to using your voice.

ElevenLabs

ElevenLabs · United States

What it does
Turns Ekō’s replies into speech, when Ekō talks back.
What it receives
The text of Ekō’s reply, which can include your name or things you told Ekō, and the voice you picked for Ekō. Never your recordings.
What happens after
Spright has switched off the ElevenLabs setting that would let it use what Spright sends to train its models, and deletes each spoken reply from its ElevenLabs history straight after it’s made. ElevenLabs may keep related logs for debugging and moderation.
When
Only after you say yes to using your voice.

5.2 The companies that run Spright

Supabase

Supabase Pte. Ltd. (Singapore) · your data is stored in Paris, France

What it does
Our database, sign-in and backend, and the online check on iPhone. Your data is stored in Paris. The requests that go to Anthropic, OpenAI and ElevenLabs pass through Spright’s backend on Supabase, which runs in Paris too. On the way there, they enter Supabase’s network at the point nearest to you, which may be outside France.
What it holds
Everything listed under “Kept on our servers” in section 1, and the technical logs.

Sentry

Functional Software, Inc. · crash reports are stored in Frankfurt, Germany

What it does
Crash and error reporting.
What it receives
Your phone model, operating system and app version, a code that identifies your phone, technical details of what went wrong (the text of an error can occasionally contain your account’s ID number), and when the app opens and closes. Not what you write or say.
When
Only after you’ve told Spright you’re 18 or older, and only while You › Error reports is on. It’s on unless you turn it off, and your choice counts whether or not you’re signed in. While it’s on, reports go to Sentry when the app crashes, freezes or hits an error, and each time it opens and closes. Turning it off stops this straight away, with two small exceptions: on iPhone, one last open-and-close record can still be sent as it switches off, and on Android, a freeze, a saved report or an open-and-close record from while it was off, or from before you told Spright your age, can be sent once reports start.

Apple and Google

United States

What they do
The App Store and Google Play deliver Spright to your phone, under their own privacy policies. Reminders use your phone’s own notifications and are scheduled on your phone.

If you tap to call or email someone, visit a helpline’s website or share your export, Spright opens your phone, email, browser, WhatsApp or share app. Spright doesn’t send anything itself, and those apps’ own policies apply.

6. Information sent outside South Africa

The companies that help us are outside South Africa:

France and Germany are covered by the EU’s data-protection law, which gives protection comparable to POPIA. The United States has no general data-protection law that gives the same protection as POPIA. That’s why nothing goes to Anthropic, OpenAI or ElevenLabs until you say yes, and why we only use companies whose terms limit what they can do with your information. Supabase (a Singapore company) and Sentry (a US company) handle Spright’s data under their terms with us.

7. Encryption and security

No system is perfectly secure. If a security breach affects your information, we’ll tell you and the Information Regulator, as POPIA requires.

8. How long we keep things

WhatHow long
Account, check-ins, emotion notes, journal entries and Safe Space chatsUntil you delete your account, or ask us to delete them. You can also delete your check-ins and journal entries, your emotion notes or your Safe Space chats in You › What Spright keeps, and keep your account. Turning a switch off doesn’t delete them. If your account has no email, they’re also deleted after 12 months without being used (see the last row).
Your choices about what Spright keepsUntil your account is deleted.
Reports about Ekō and usage records12 months, then deleted automatically. If you delete your account sooner, they’re deleted then.
BackupsDeleted information leaves our backups within 30 days.
Everyday chats with EkōNot saved on our servers. Anthropic normally deletes what it receives within 30 days, and Spright deletes Ekō’s spoken replies from ElevenLabs straight after they’re made.
Voice recordingsNot saved on our servers. On your phone, Spright deletes your recording before it’s sent to be turned into text, and Ekō’s spoken reply as soon as it stops playing. A recording that fails is deleted too, and so is a journal voice note you close without sending. If Ekō is still listening when you go to another screen, leave Spright or lock your phone, Spright stops listening, deletes the recording and sends nothing. A journal voice note is deleted the same way if you leave Spright or lock your phone while you’re recording it. A recording can still be left behind if the app closes part-way. Spright deletes it the next time it starts up after being fully closed. OpenAI doesn’t keep recordings sent for transcription, and Spright deletes Ekō’s spoken replies from ElevenLabs straight after they’re made (see section 5.1).
Crash reportsKept by Sentry for up to 90 days, then deleted. Deleting your account doesn’t remove them sooner.
Technical logsRequest and sign-in logs are kept by Supabase for 7 days, then deleted. The record of your current sign-in (IP address and device type) stays while you’re signed in and is removed when your account is deleted.
Things kept only on your phoneUntil you delete them in the app, or delete the Spright app. Voice recordings, Ekō’s spoken replies and Spright’s copy of a data export usually go much sooner (see section 1). On iPhone, your app PIN and the key that unlocks your journal stay in the phone’s keychain even after you delete the app. Deleting your account removes your exam programme, your AI choices, the copy of your choices about what Spright keeps, the SOS pause, and a date of birth that shows you’re 18 or older from your phone, but not the rest, and reminders you’ve set may keep appearing until you delete the app.
Accounts without an emailDeleted, with everything linked to them on our servers, after 12 months without being used. If you started adding an email but didn’t confirm it, the account is kept until you delete it in the app.

We keep limited records for longer only if the law requires it.

If you use Spright without an email, the only way to delete your data yourself is inside the app, because we have no way to confirm the account is yours. Please use You › Delete my account before signing out or removing Spright. Otherwise, the account and everything linked to it on our servers is deleted after 12 months without being used, and if you come back after that, it won’t be there. If you started adding an email but didn’t confirm it, the account is kept until you delete it in the app.

9. Your rights and choices

10. Spright is for adults

Spright is for people aged 18 and older. When you first open it, we ask your date of birth and keep the answer encrypted on your phone. If it shows you’re under 18, we won’t create an account for you, and Spright remembers that answer on your phone. Signing out clears an answer that shows you’re 18 or older, so Spright asks again. If you believe a child is using Spright, contact us and we’ll delete their information.

11. Crisis and emergencies

Spright shows crisis helplines and lets you reach people you trust, but it is not an emergency service. It doesn’t monitor you, and Ekō can’t call for help on your behalf. If you’re in danger, call 112 from any cellphone in South Africa, or your local emergency number.

12. Changes to this policy

When we change this policy, we’ll update the date at the top. If we change what goes to AI companies, who receives it, or why, we’ll ask you again in the app before anything more is shared. If we change what Spright keeps about your mental health, why, or who can see it, we’ll ask you again in the app before keeping anything more.

13. Contact us

For privacy questions, or to use any of your rights, contact our Information Officer:

RMexpertise Consultants (Pty) Ltd
D’Stellen Estate No. 20, 60 Bredell Rd, Somerset West, 7130, South Africa
Email: spright@rmexpertise.co.za