Privacy Policy for Spaces

Last Updated: July 7, 2026

Welcome to Spaces! We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how Spaces ("we," "our," or "us") collects, uses, discloses, and safeguards your information when you use our mobile or web application.

Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use the application.

1. Information We Collect

We collect information about you in three main ways: information you provide directly, information collected automatically, and information from our integrated third-party developer libraries.

A. Information You Provide to Us

• Account Data: When you sign up, we collect your name, email address, username, and authentication credentials.

• Profile Information: You may choose to provide additional information, such as a profile picture, biography, or custom display settings.

• User-Generated Content: This includes the posts, comments, threads, messages, and media you voluntarily upload or share within the communities on Spaces.

B. Information Collected Automatically

• Log and Usage Data: We track your activity within the app, including the spaces you join, content you interact with, and the time/date of your actions.

C. Data Collected via Third-Party Developer Tools (SDKs)

We integrate specific third-party Software Development Kits (SDKs) to handle secure authentication and analyze application performance:

• Mobile & Device Identifiers (Firebase Analytics): Firebase (a Google service) automatically collects specific mobile identifiers (e.g., Android Advertising ID and Apple Advertising Identifier / IDFA), cookies, or similar technologies to analyze user interactions. This includes tracking app installations, session durations, and in-app navigation events.

2. How We Use Your Information

We use the information we collect to maintain, improve, and secure our platform. Specifically, we use it to:

• Create, manage, and securely authenticate your user account.

• Facilitate community discussions, interactions, and content sharing.

• Monitor and analyze usage trends via analytics to improve the UI/UX design and functionality of Spaces.

• Enforce our community guidelines, detect fraudulent behavior, and maintain platform security.

• Send you essential account updates or technical notifications.

3. How Your Information is Shared

Because Spaces is a community platform, your public profile and user-generated content are visible to other users by default. We do not sell your personal data or user-generated content to third-party advertisers.

A. Third-Party Service Providers (Data Processors)

We share limited data with trusted third-party infrastructure and analytics partners who act as data processors to help us run the app:

• Google / Firebase Analytics: Used to collect pseudonymous app usage data, crash logs, and performance metrics.

Google’s data practices are governed by the Google Analytics Terms of Service. To understand how Google specifically processes and protects your data, please review their official policy: How Google uses information from sites or apps that use our services.

B. Legal Compliance and Business Transfers

• Legal Compliance: We may disclose your information if required by law, court order, or to protect the safety and rights of our users or the public.

• Business Transfers: If Spaces undergoes a merger, acquisition, or sale of assets, your information may be transferred to the successor company as a business asset.

4. International Data Transfers (GDPR Compliance)

Spaces transfers, stores, and processes your information outside of the European Economic Area (EEA) and the United Kingdom (UK), primarily to servers located in the United States. When transferring your data, we utilize Standard Contractual Clauses (SCCs) approved by the European Commission, or rely on recognized data transfer frameworks (such as the EU-U.S. Data Privacy Framework) to ensure your data receives an equivalent level of protection.

Lawful Basis for Processing (EEA/UK Users)

If you are located in the EEA or UK, we process your personal data under the following legal bases designated by the GDPR:

• Performance of a Contract: To create your account, authenticate your login via Auth0, and provide the core community features of Spaces.

• Legitimate Interests: To secure our platform, detect fraud, and analyze platform performance via Firebase Analytics, provided these interests do not override your fundamental privacy rights.

• Consent: For optional features or promotional communications, which you can withdraw at any time.

5. California Privacy Disclosures (CCPA Compliance)

Pursuant to the California Consumer Privacy Act (CCPA), as amended, this table details the categories of personal information Spaces has collected and disclosed over the past 12 months:

"Do Not Sell or Share My Personal Information" Notice

Spaces does not exchange your personal data for money. However, using third-party analytics tools like Firebase can technically constitute "sharing" data for cross-context behavioral tracking under California law.

• Global Privacy Control (GPC): Spaces automatically detects and honors browser-level universal opt-out signals (GPC). If your browser transmits a GPC signal, we will automatically disable behavioral tracking for your session.

• Non-Discrimination: We will not deny you services, change prices, or provide a lower quality of service if you choose to exercise your privacy rights.

6. Your Rights and Choices

Depending on your geographic location (such as the EU, UK, or California), you hold specific statutory rights regarding your data:

• Right of Access, Portability & Knowledge: The right to request copies of your personal data in a structured, machine-readable format, and to know what categories of data we collect.

• Right to Rectification: The right to request that we correct inaccurate or incomplete data.

• Right to Erasure ("Right to Be Forgotten"): You can request the deletion of your account. Upon deletion, your personal profile data will be removed from our primary databases and our Auth0 tenant instance. Some anonymized community posts or comments may remain visible to maintain conversation continuity.

• Right to Restrict or Object to Processing: The right to limit how we process your data or object to our legitimate interest analytics.

7. How to Opt-Out of Analytics Tracking

We respect your choice regarding tracking. You can completely opt-out of data collection by Firebase Analytics at any time through your device's native hardware and operating system controls:

• iOS Users: Navigate to Settings > Privacy & Security > Tracking and disable tracking permissions for Spaces.

• Android Users: Navigate to Settings > Privacy > Ads and select "Delete advertising ID" or toggle "Opt out of Ads Personalization".

Disabling these identifiers stops Firebase from tracking your cross-context app behavior without affecting your core login stability or account features managed by Auth0.

8. Children's Privacy

Spaces is intended for users who are at least 13 years old. We do not knowingly collect personal data from children under 13. Spaces does not knowingly "sell" or "share" the personal information of consumers under 16 years of age without affirmative authorization. If we discover that a minor has provided us with personal information without required parental consent, we will delete it immediately from our servers and third-party systems.

9. Data Security

We implement industry-standard security measures (including TLS/HTTPS encryption in transit and AES-256 encryption at rest) designed to protect your personal information from unauthorized access, loss, or alteration. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Contact Us

If you have any questions or wish to exercise your data rights (such as a GDPR or CCPA deletion request), please contact us at:

Email: spaces@genesiscomp.net