Draft, pending legal review. This page is not final and may change before Space Maker launches. Last updated November 10, 2026.
Data Protection
This page describes how Voiie Inc. protects the information you trust to Space Maker by Voiie. It adds to thePrivacy Policy and describes what is in place today. No system is perfectly secure, so please read it as a description of our measures and not a promise that nothing can ever go wrong.
1. Security measures
Protecting data in transit and at rest
- Encrypted connections. The app, the web viewer and this site talk to our servers over encrypted connections (TLS). This site tells browsers to use only encrypted connections (HTTP Strict Transport Security).
- Encrypted at rest. Our database and your backups are stored on Google Cloud (Firestore and Cloud Storage in the United States), which encrypts stored data.
- Optional end-to-end encryption. If you turn on "Protect cloud backups with a password", each file is encrypted on your device before it uploads (AES-256-GCM, with a key made from your password using PBKDF2-SHA256 with 600,000 rounds). We never receive your password or your key, and we can't recover it. The web viewer opens these files in your browser and never sends the password to us.
- The vault. Vault items are encrypted on your device with a key kept in the device's secure storage, behind Face ID, Touch ID or your passcode. Your vault PIN is never stored, only checked. Vault items are not uploaded.
- Backup integrity. Uploads use upload links that our servers create for one file at a time, and each file's checksum and size are verified before it counts as backed up. Restores use links that work for 15 minutes.
Controlling access
- Your data is tied to your account. Our database and storage rules allow you to read only your own data. Changes to plans, devices and space are made by our servers, not by the app.
- Sign-in without passwords from us. You sign in with Apple or Google. We don't store a password for your Space Maker account.
- Extra check for the web. The web viewer asks for a code sent by text message to the phone linked in the app, and asks again after 12 hours.
- Device limits. An account can have up to 5 active devices, and changing devices is limited to 3 times in 30 days. Backups can only be uploaded from an active, registered device.
- Limited staff access. Only Voiie staff with an @voiie.com account, signed in with Google and given a role, can use our admin tools, and the owner decides who gets a role. Every change a staff member makes is recorded in an action log with who made it and when.
- Least data. We don't keep your name or email in our own database, we have no analytics SDK and no ad tracking, and sign-in history entries are removed after 180 days.
2. Service providers (subprocessors)
These companies process personal information for us. They may use it only to provide their service to us.
| Provider | What it does for Space Maker | Information involved | Where |
|---|---|---|---|
| Google LLC Firebase and Google Cloud | Sign-in (Firebase Authentication), database (Cloud Firestore), backup storage (Cloud Storage), servers and scheduled jobs (Cloud Functions), push messages (Cloud Messaging), crash reports (Crashlytics), text messages for the web viewer, reCAPTCHA, and website hosting (Firebase Hosting) | Account and sign-in data, phone number (if linked), devices, plan data, backups, crash reports, and standard server logs | United States |
| Apple Inc. | Sign in with Apple, payments and subscriptions (App Store), and push notifications (Apple Push Notification service) | Your Apple sign-in details (name and email, or Apple's relay address, if you share them), purchase records, and push tokens | Worldwide, set by Apple |
| Mobile carriers and messaging partners | Deliver the text message code for the web viewer, through Google | Your phone number and the code | Depends on your carrier |
If we add or change a provider that processes personal information, we will update this list.
3. Where data is processed
Space Maker is operated from the United States, and your information is processed and stored there (Google Cloud and Firebase in us-central1), even if you live elsewhere. If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on our providers' data processing terms, which include standard contractual clauses, for the transfer of your information to the United States. You can ask for a copy of the safeguards by emailing privacy@spacemakerapp.com.
4. How long we keep data
| What | How long |
|---|---|
| Account, plan, devices and push tokens | While your account exists; deleted when you delete your account |
| Backups (files and records) | Until you delete them or delete your account (see the Terms for what happens after a plan ends) |
| Sign-in history entries | 180 days, then removed automatically |
| First and last-known sign-in summary | While your account exists |
| Phone number for the web viewer | Until you unlink it or delete your account |
| Purchase records unlinked from you | Kept after account deletion, for accounting, fraud prevention and to refuse a second claim on the same purchase |
| Free-plan device code | Kept after account deletion, to stop the free plan from being restarted |
| Staff action log (details removed after deletion) | Kept |
| Crash reports | A limited time, under Google's settings |
For what is deleted and what is kept when you delete your account, see the Privacy Policy.
5. If something goes wrong
- We watch our systems and look into anything unusual. If we find a security incident, we work to contain it, find out what happened, and fix it.
- If an incident puts your personal information at risk, we will tell the people affected and the authorities, as the law requires, without unreasonable delay. The notice will say what happened, what information was involved, what we are doing and what you can do.
- Where the law sets a deadline (for example 72 hours to notify a data protection authority under European law, or "the most expedient time possible" under California law), we follow it.
6. What you can do
- If you use a backup password, make it long and unique, and keep it somewhere safe. We can't recover it, and anyone who has it can open your backups.
- Keep your devices and apps up to date, and protect your phone with a passcode.
- Never share your sign-in, your phone codes or your vault PIN. We will never ask you for them.
- Sign out any device you no longer use, in Settings → My Devices.
7. Reporting a security problem
If you think you found a security problem, please email support@spacemakerapp.com with the details. Please don't access, change or delete other people's data, don't disrupt the Service, and give us a reasonable time to fix the problem before you share it. We will look at it quickly and tell you what we find.
8. Contact
Questions about data protection: privacy@spacemakerapp.com. By mail: Voiie Inc.,116 E Live Oak Ave, #1017, Arcadia, CA 91006.