Privacy Policy

Effective date: August 10, 2026

This policy explains what information Space collects, why, and what control you have over it. We've tried to write it in plain language rather than legalese.

Who we are

Space ("Space", "we", "us") is operated by Dana Glick, based in Portugal. If you have any questions about this policy or your data, contact us at hello@spaceapp.me.

What Space is

Space is a mobile app for signaling relational availability to a small, chosen circle of people. When you turn Space on, the people in your circle can see that you're open to connecting. Space is not a social network or a messaging app — the actual connection happens outside the app.

Information we collect

We collect only what the app needs to work:

Account information. When you sign up, we collect your email address and a password. If you choose to sign in with Google, we receive basic Google account information instead — your name, email address, and profile picture. We do not receive your Google password.

Profile information. Your display name, an optional phone number, an optional profile photo, your connection-type preferences (call, video, in person), and your visibility settings.

Your circle and contacts. The people you add to your circle, and any tags you apply to them. To help you find people you already know who are on Space, the app can check phone numbers — only from the contacts you specifically choose to share, never your whole address book — against existing Space users to look for matches. The numbers are sent to our server over an encrypted connection, used only to perform the match, and then discarded. We don't store them, and we don't contact or keep any record of people who aren't already on Space. We keep only the connections you choose to add to your circle.

Availability signals. When you turn Space on, we record the duration you chose, the connection types you enabled, which part of your circle can see it, and when it expires.

Activity data. Records of notifications sent between users, and when someone in your circle taps call, video, or in person on your Space Card — along with timestamps. This is what makes the core loop work.

Push notification data. If you enable notifications, we use a device push identifier (through our notification provider) so we can deliver alerts to your devices.

Technical data. Basic technical information your device sends when it connects — such as IP address, browser or device type, and server logs — which we use to host the app, keep it secure, and diagnose problems.

How we use your information

We use your information to:

• Create and manage your account
• Show your availability to the circle members you choose
• Deliver notifications you've asked for
• Email you about your account and the service
• Let you find and connect with people you know
• Keep the app secure and working properly

Under the GDPR, our legal bases for processing are: performing our contract with you (running the app you signed up for), your consent (for example, push notifications and contact matching), and our legitimate interests (keeping the service secure and functioning). You can withdraw consent at any time.

We send emails about your account and the service on the basis of our legitimate interest in keeping you informed. Every one of them has an unsubscribe link, and opting out has no effect on your account.

We do not sell your personal data, and we do not use it for advertising.

Google Sign-In

If you choose to sign in with Google, we receive your name, email address and profile picture from your Google account. We use this only to create and identify your Space account, and to show your name and photo to the people in your circle. We do not receive or store your Google password.

Space's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to develop, improve or train generalized AI or machine-learning models. We transfer it only where that policy allows: to run or improve the features you can see in Space, to investigate abuse or a security problem, to comply with the law, or as part of a merger or sale of Space, where we would tell you first.

Cookies and local storage

Space uses your device's local storage and a small number of essential cookies to keep you signed in and remember basic app state (like a pending invite). These are necessary for the app to work — without them you couldn't stay logged in. We don't use advertising cookies, and we don't track you across other websites or apps.

Who we share it with

We share data only with the service providers that help us run Space. Each processes data on our behalf:

• Supabase — database, sign-in, and file storage. Your data is hosted in the European Union (Stockholm).
• Google — Google Sign-In (only if you choose to sign in with Google), and the inbox that receives any email you send to hello@spaceapp.me.
• OneSignal — delivering push notifications.
• Cloudflare — hosting the app, serving it securely, and forwarding email sent to our address to that inbox.
• Resend — sending our emails to you. Emails are sent from Resend's Ireland region, but Resend is a US company and stores account data, email metadata and delivery logs in the United States. See the section below on international transfers.

We may also disclose information if required by law.

Where your data is stored and international transfers

Your core account and app data is stored in the European Union. Some of our providers (such as our notification, sign-in, and hosting providers) are based outside the EU, which means some data may be processed outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep your data

We keep your information for as long as your account is active. Your activity records — availability signals, notification logs, and connection taps — are kept while your account is active so the app works, and are deleted when you delete your account. Phone numbers used for contact matching are never stored (see above).

When you delete your account, your data is permanently removed from our live systems right away. Copies may remain in routine encrypted backups for up to 30 days before they're overwritten. We keep limited records for longer only where the law requires it.

Your rights

If you're in the EU/EEA (or a region with similar laws), you have the right to:

• Access the personal data we hold about you
• Correct data that's wrong or incomplete
• Delete your data ("right to erasure")
• Port your data to another service
• Object to or restrict certain processing
• Withdraw consent at any time

To exercise any of these, contact us at hello@spaceapp.me. You also have the right to complain to a data protection authority — in Portugal, the Comissão Nacional de Proteção de Dados (CNPD); EU users may also contact their local authority.

Deleting your account

You can delete your account and all associated data at any time in the app, under Settings → delete account. This permanently erases your profile, circle, availability history, and activity records.

You can also remove people from your circle at any time, which stops you both from seeing each other's availability.

Security

We take reasonable measures to protect your information, including encrypted connections and access controls. No system is perfectly secure, but we work to keep your data safe.

Children

Space is for adults and older teens. It is not intended for anyone under 16, and by using it you confirm you're at least 16. We don't knowingly collect data from children under 16 — if you believe a child has given us their information, contact us at hello@spaceapp.me and we'll remove it.

Changes to this policy

If we make material changes to this policy, we'll update the effective date above and, where appropriate, notify you in the app.

Contact

Questions about your privacy or this policy? Email us at hello@spaceapp.me.