What handles what.

Your data

Who we are

NeuralSpark is made by Kaitiaki IT Pty Ltd (ABN 84 697 963 492), Melbourne, Victoria, Australia. This page is our privacy policy: it says what personal information we handle, why, where it goes and how you can reach it. We handle personal information in line with the Australian Privacy Principles. Questions: hello@neuralspark.com.au.

On your computer

Your workspace files, conversations, local app records and designs are stored in your Windows user profile. Folders you connect keep their original files in their original location. API keys and saved connection credentials are protected using Windows account encryption.

Crash reports

If you switch on crash reports in Settings › Data, NeuralSpark sends a short report to our server when part of it stops unexpectedly. A report holds the NeuralSpark and Windows versions, which part stopped and the technical error, with email addresses, user names and keys taken out. It doesn't include your files, conversations, API keys, account or device details, and the address it came from isn't kept. Crash reports are off unless you switch them on, we use them only to fix faults, and they're deleted after 90 days.

With your AI provider

The selected model receives the prompts and file content needed for a request. That provider’s terms, retention settings and charges apply. NeuralSpark does not include an AI model or a bundled allowance. You can also connect a compatible local model server.

Web search that comes with NeuralSpark

When your provider has no web search of its own (DeepSeek, NVIDIA, OpenRouter, a local model or a custom server), NeuralSpark searches with its own built-in browser on your PC: it opens an ordinary search page (Startpage, Bing or DuckDuckGo) over your internet connection and reads the results, as you would. Those searches go from your PC to that search site, not through our servers; picture look-ups for answer cards go from your PC to Bing or DuckDuckGo. The pages a search finds are then read directly from your PC.

Dictation

The microphone in NeuralSpark and NeuralVault starts Windows voice typing. Windows sends what you say to Microsoft’s online speech recognition, under Microsoft’s privacy terms, and types the words where your cursor is. NeuralSpark never receives the audio. Voice typing needs online speech recognition, so switching that off in Windows Settings › Privacy & security › Speech turns voice typing off too. If you switch on Voice input in Plugins instead, NeuralSpark’s microphone recognises your speech on your PC, with a speech model NeuralSpark downloads the first time you use it, and the audio stays on your PC.

In your NeuralSpark account

The account service stores your email, password hash, email-verification records, purchases, licence entitlements and device activations. Activation records include your chosen device name and the installation’s public key. This service manages software access; it is not the storage location for your workspace files.

The app checks your licence with this service when it starts and every six hours, and keeps working for up to seven days without a connection.

We keep account and licence records while you have an account. When you ask us to delete your account, we delete it, except for purchase and tax records, which Australian tax law requires us to keep for five years.

Payments and email

Checkout uses the configured payment processor. NeuralSpark records the order, payment status and entitlement; payment-card entry is handled by checkout. Account confirmation, recovery and purchase emails are sent by our mail service.

Our website

When you visit neuralspark.com.au, our servers and our network provider, Cloudflare, handle the request. That includes your IP address and browser details, which are used to deliver the page and protect it from abuse. The site uses Cloudflare Web Analytics to count page visits and measure how quickly pages load. It sets no cookies, and the site uses no advertising or tracking cookies. Your account page uses one cookie to keep you signed in for up to seven days, and short-lived ones while you sign in with Google or Microsoft. If you use the contact form, we receive your name, email address and message, and use them only to reply.

Where your information goes

We use a small number of services to run NeuralSpark. Some of them store or process information outside Australia:

• Stripe handles payments: your card details go to Stripe, never to us. Stripe may process data in the United States and other countries.
• Cloudflare delivers our website, protects it and measures visits to it.
• Google and Microsoft, only if you choose Continue with Google or Continue with Microsoft.
• Our own servers, in Australia, run your NeuralSpark account, sign-in, licence, emails, updates and crash reports.
• Your AI provider and the services you connect receive what NeuralSpark sends them for your requests, straight from your PC. You choose them, and their own terms apply (see With your AI provider).

We don't sell personal information, and we don't use it for advertising.

Support and removal requests

Diagnostics are stored locally. Review a report before sending it to support. To ask about your account records or request account removal, contact hello@neuralspark.com.au. Do not email passwords, API keys or activation keys.

NeuralSpark for iPhone

The iPhone app connects to NeuralSpark on your own PC. Your conversations, your AI provider keys and your files stay on that PC; the phone shows them and sends your messages and answers back.

The relay. Your phone and your PC reach each other through NeuralSpark's relay (relay.neuralspark.com.au, run by Kaitiaki IT in Sydney). They seal everything they send each other with keys only they hold, so the relay passes it along without being able to read it. The relay knows a random ID for your phone and one for your PC, which ones are paired, and when they connect.

Notifications. If you allow notifications, Apple gives your phone an address for them, and the relay keeps it so it can ask Apple to show a notice. The relay knows only what kind of thing waits (an OK, a question, a plan, or a finished task) and how many, never what it is about. Turn notices off in the app's Settings or remove the phone on your PC, and the address is no longer used.

Photos, files and location. A photo, file or location you add to a message goes, sealed, to your PC, and from there to the AI provider you use, like anything else you send in NeuralSpark. The app uses your photo library, camera or location only when you go to add something, and only with your permission.

Speaking. When you speak a message, Apple's speech recognition turns it into words, on the iPhone itself where the iPhone can. That is Apple's service, covered by Apple's privacy policy.

Face ID is checked by your iPhone. NeuralSpark only learns whether it passed.

Kaitiaki IT does not collect anything else from the app: no analytics, no advertising, and no tracking.

Your privacy rights

Seeing, correcting or deleting your information

You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account. Email hello@neuralspark.com.au from the email address on your account. We'll reply within 30 days, at no charge.

Data breaches

If we find that personal information we hold has been lost or accessed without permission in a way that could seriously harm you, we'll tell you as soon as we can, say what happened and what you can do.

Complaints

If you're unhappy with how we've handled your personal information, email hello@neuralspark.com.au and we'll respond within 30 days. If you're not satisfied with our answer, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Children

NeuralSpark is not meant for children. You must be 18 or older to create an account or buy a licence, or have a parent's or guardian's permission.

Changes to this page

When we change this page, we update the date at the top. If a change affects how we use information we already hold, we'll say so in NeuralSpark before it applies.

Security reports

Report a suspected vulnerability to hello@neuralspark.com.au. Include the affected version and steps to reproduce without customer files, passwords or API keys. We do not claim an independent security certification.

Connections and permissions

You choose which project folders and SSH servers to connect. Disconnecting a folder removes the app’s connection and its retained unsaved drafts; it does not delete the original project files.

In Can edit files, the commands Chat and Code run can change files only in your workspace and the folders you opened. In Full access, and in the Terminal you open yourself, commands run with your Windows account's own permissions. Remote commands use your SSH account’s permissions.

Connectors you add keep their sign-in values in the same Windows-protected storage as your API keys.

Before the first SSH connection, verify the server’s host fingerprint. Credentials are stored on your PC and are not included with the software download.

Git

You connect Git accounts in Settings › Connections › Git: GitHub, GitLab, Bitbucket, Azure DevOps, your own server (Gitea, Forgejo, GitLab, Bitbucket Data Center or GitHub Enterprise), any Git server over HTTPS, SSH, or a shared folder.

A browser sign-in is handled by Git Credential Manager, which comes with NeuralSpark and keeps it in Windows Credential Manager; removing the account in NeuralSpark leaves that sign-in in Windows until you remove it there. A token or password you type is kept in NeuralSpark's Windows-protected storage. Neither is ever written into a repository link, a command, a log or Git's settings, and neither is shown to the model: the app itself talks to your Git host. Git in the model's shell and in the Terminal never signs in, so pushing, pulling and cloning go through NeuralSpark's Git tools.

In Read only, nothing is changed. In Can edit files, every push, new repository and pull request asks you first and names the commits and the server. In Full access it does not ask. Force pushes are never made. Every commit and push is checked for keys, tokens, secret settings files and files too large for Git servers, and anything found stops it; a scheduled Git automation pushes without asking, but stops on the same check.

When you type a server's address, NeuralSpark looks at it without sending any sign-in. A certificate Windows does not trust is shown with its fingerprint and trusted only if you say so. Look for Git on this PC only reads folders on this PC and sends nothing.

Google

What NeuralSpark asks Google for. In the app, Sign in with Google (Settings › Connections › Google) asks for your name, email address and profile picture, to show which account is connected, and for access to the Google Drive files NeuralSpark makes for you and the ones you choose in Google's file picker, to read, change and design them. It does not ask for access to the rest of your Drive. On your NeuralSpark account page, Continue with Google asks only for your name, email address and Google account ID, to create your NeuralSpark account or sign you in to it.

How NeuralSpark uses it. NeuralSpark reads or changes a Google file only when you ask for it in a conversation, and only to do what you asked. Your name, email address and picture show which Google account is connected; on the account page, your email address and Google account ID identify your NeuralSpark account. NeuralSpark does not sell Google user data or use it for advertising, and does not use Google Workspace API data to develop, improve or train generalised AI or machine-learning models.

Who receives it. Google's answers come straight from Google to your PC. To do what you ask, the content needed for your request goes from your PC to the AI provider you chose (see Your data). NeuralSpark sends Google user data only to OpenAI, Anthropic, xAI and Meta Muse's standard tier, whose API terms say they do not train AI models on what they receive; to Google's own Gemini API, where Google's terms apply (on Gemini's free tier Google may use what it receives to improve its products; on a paid plan it does not); or to a model running on your own computer or local network. It never sends Google user data to any other AI service, including DeepSeek, Meta Muse's discounted Contributor tier, NVIDIA and OpenRouter: while one of those is chosen, NeuralSpark's Google tools are switched off, and a conversation that already contains Google content is not sent to it. Apart from the name, email address and Google account ID used to sign in to your NeuralSpark account, Google user data does not reach NeuralSpark's own servers.

How it is protected. Everything between your PC, Google and your AI provider travels over encrypted HTTPS. The sign-in Google gives NeuralSpark is stored only on your PC, in the same Windows-protected storage as your API keys, and is never written to plain files or logs. Account-page sign-in uses Google's standard secure sign-in (OAuth with PKCE); your NeuralSpark account details are kept on NeuralSpark's account server, reached only over HTTPS and administered only by NeuralSpark.

How long it is kept, and deleting it. The content of a Google file you work on stays on your PC as part of that conversation until you delete the conversation; NeuralSpark keeps no other copy. What your AI provider keeps is set by its own API terms. Signing out in Settings › Connections › Google removes the Google sign-in from your PC and asks Google to cancel it, and you can remove NeuralSpark's access at any time in your Google Account, under Security › Third-party apps and services. Your NeuralSpark account's email address and Google account ID are kept while you have the account; email hello@neuralspark.com.au to have the account deleted (purchase records the law requires us to keep are kept for that time only).

Microsoft. Continue with Microsoft on your account page asks Microsoft only for your name, email address and Microsoft account ID, to create your NeuralSpark account or sign you in to it. They are used, protected, kept and deleted the same way.

NeuralSpark's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your licence and updates

Every NeuralSpark licence is a permanent Windows software licence for one person on up to two PCs at a time. It includes 3, 6 or 12 months of updates from the day your purchase is confirmed, depending on what you chose. Add 6 or 12 months of updates whenever you like: they start when your current updates end, or today if they have ended, and include the releases you missed. Nothing renews automatically and there is no charge for time you skipped.

When updates end, NeuralSpark keeps working with every release your licence covers, and your account lists the releases you can download. Newer releases need current updates.

To move to another PC, deactivate NeuralSpark in the app on the old PC when you can, or remove the old PC in your account. Removing PCs is limited to three times in any 30 days. A removed PC stops receiving updates straight away.

Refunds are not offered for change of mind. Your rights under the Australian Consumer Law are not affected: if NeuralSpark has a major failure, you can choose a refund or a replacement, and if it has a problem that isn't a major failure, we'll fix it within a reasonable time or you can ask for a refund. The full terms are in the NeuralSpark Terms. A refunded licence is cancelled on every PC.

Licences bought before October 2026 keep exactly what they were sold with. LLM API usage is separate from the software licence and is billed by your provider. Current prices and purchase details are shown in your account before payment.

Your licence is covered by the NeuralSpark Terms.

Product help

Chat's designer exports PDF with real text, editable PowerPoint, pictures and web pages. Cowork creates editable Office files.

Before installing an update, keep a backup of important work. A Documents entry pointing to an original file is not a backup of every previous version of that file.

For assistance, email hello@neuralspark.com.au with the app version, the task you were doing and the visible error. Your account provides activation, device management and eligible downloads.