SPACEPLANT SI — PRIVACY POLICY
Last updated: October 13, 2026.
SpacePlant SI is provided by SpacePlant Corporation. Contact garbarzjacob@gmail.com with privacy questions or requests.
On-device intelligence and local work
SI uses Apple Foundation Models for supported intelligent workflows on compatible devices. Notes and generated plans are stored locally by the imported-plan workflow. That workflow preserves original notes and source references. Device backups and services you enable may have their own handling of this information.
Optional usage analytics
Share usage analytics is off by default. If enabled, SI sends feature-use categories, onboarding experiment assignments, offer outcomes and verified purchase-environment events to Google Analytics for Firebase. The SI event projection excludes note text, media, health information and generated content. Google's SDK processes installation identifiers and technical metadata and may derive coarse geographic information. Events can be associated with an installation even when no name is provided. SI denies advertising-storage, advertising-user-data and advertising-personalization consent and disables IDFV collection. You can turn analytics off on the home screen; SI disables collection and resets the local SDK analytics identity. This does not itself delete data already received by the service. The current Google Analytics property retains event-level data for 2 months and user-level data for 14 months, with the user retention period reset on new activity. These controls do not apply to most standard aggregate reports. Contact us with a deletion request; we will explain the applicable process and any information needed to locate the records.
Optional planning-module analytics
The planning module has a separate explicit analytics choice. When enabled and allowed by its release upload policy, it can send planning workflow and experiment events to the SpacePlant hosted endpoint at https://event-planner-ai-pro.garbarz.chatgpt.site/api/app-growth. That module has its own consent and upload controls. The current hosted database stores daily aggregate counts by event category, surface, release, signal and intelligence contract, plus aggregate advertising and site-funnel metrics. Those tables do not contain installation IDs, note text or customer contact fields. Aggregate rows can remain available for long-term product analysis; they cannot be selected for deletion by an installation ID. Hosting providers also process technical network-request information.
Optional connections and sync
Fleet/team cloud sync is off by default in SI. Its Settings screen names the uploaded record categories and lets you configure the destination and fleet access code. If you configure and enable fleet/team sync, route coordinates, ride and operational records, contact names and phone numbers, destination addresses, names entered for delivery proof, notes and selected proof photos can be sent to the configured backend. These connections are distinct from local model inference. Review the destination and information involved before enabling them. Turning sync off or deleting local data does not remove records already uploaded. The live fleet Worker audit found no deletion endpoint or scheduled expiry handler. Turning sync off does not start an automatic cloud-deletion process; backend operators control retained cloud records. Contact us with privacy requests for a SpacePlant-hosted workspace; we may need workspace/job references and authorization verification. For a destination you configure, contact its operator. The current SI release does not configure Seller's Supabase or CloudKit sync.
Purchases
Apple processes subscription payments. SI uses StoreKit transaction and entitlement information to provide purchased access and restore purchases. SI does not receive your payment card details. When optional analytics is enabled, SI records purchase outcomes for conversion measurement.
Maps and speech
Maps, place searches and directions use Apple MapKit services and may contact Apple. Location access is controlled by device permissions. Current SI speech wrappers require on-device recognition and decline unsupported recognition instead of falling back to remote processing. Creator transcription can download optional speech-model files from a model-hosting service. Those downloads involve network requests to that service; the transcription engines process selected audio locally. Supported Apple speech features may require language assets managed by the operating system.
Permissions and choices
Device permissions govern access to selected device information and features. Grant only permissions you want to use. Local storage, optional analytics, optional external connections and Apple purchase records have different controls; turning off one does not delete the others.