Privacy Policy

1. What we collect and why

2. What stays on your device

• Photo scanning. Space Maker looks through your photo library on your device to find duplicates, similar photos, screenshots, blurry photos and large videos. Nothing is uploaded for this.
• Contacts. Duplicate contacts are found on your device. Contacts are never uploaded.
• Camera. Used to take photos and videos straight into your vault and, if you turn it on, for break-in photos. Those pictures are stored inside the vault on your device.
• Face ID and Touch ID. Used only to unlock the vault. Apple handles it, and we never receive your face or fingerprint data.
• Vault. Vault files are encrypted on your device and never leave it.

3. Backups and the vault

• Where. Cloud backups are stored in Google Cloud Storage in the United States (us-central1), encrypted at rest by Google.
• Optional password. If you turn on "Protect cloud backups with a password", your files are encrypted on your device before they upload. We never receive your password or your key. If you forget the password, we can't recover it for you. Choose a long password: anyone who has it can open your backups.
• Without the password option. Google encrypts the files at rest, and Voiie can recover them if you lose access to your account.
• Who can see them. Our access rules limit your backups to your account. We don't sell your data, and we don't look at what's in your backups.
• Deleting. You can delete single backups, one device's backups, or everything by deleting your account.

4. Sign-in history and your devices

Sign-in history. When you sign in or open the app, our server records the time and event, your IP address, your device's user agent and language header, your device model, operating system version and app version, your language and time zone, how you signed in, your random device ID, and whether the request came from a verified app. We keep each entry for 180 days and then it is removed automatically. We also keep the first and the last-known entry, in one summary, for as long as your account exists. A small number of Voiie staff can see this to protect accounts and help you.

Your devices. For each device signed in to your account, up to 5 at a time, we keep a random device ID, the name you give it, its type and model, system and app version, when you last used it, its status (active or signed out), the size of its backups, and its push token if you allowed notifications.

5. The web viewer and your phone number

Space Maker Cloud on the web (spacemakerapp.com/cloud) lets you see your backups in a browser. To protect them, it sends a code by text message to a phone number you link in the app (Settings → Web access). That number is held by Google Firebase Authentication, together with your account, and is used only to send you codes. Google and mobile carriers deliver the text message, and carrier rates may apply. The web viewer asks for the code again after 12 hours. If you use the web viewer with a backup password, the password is used only in your browser to open your files. It is never sent to us. Google's reCAPTCHA protects the code step from abuse and uses information from your browser under Google's own privacy policy.

6. What we don't do

• We don't show ads or work with ad networks.
• We don't use the advertising ID (IDFA) and don't track you across other companies' apps and websites, so there is no tracking prompt.
• We don't include an analytics SDK in the app. We don't collect product-usage analytics. Sign-ins and app opens are logged on our own server only, as described in section 4.
• We don't sell your personal information, and we don't share it for cross-context behavioral advertising.
• We don't use your backups, photos or files to train models, build profiles or show you anything.

7. Who we share information with

We share information only with the companies that help us run Space Maker, under terms that let them use it only for us, and when the law requires it.

• Google LLC (Firebase and Google Cloud). Sign-in, our database, backup storage, our servers, crash reports, push messages, text messages for the web viewer, reCAPTCHA, and website hosting.
• Apple Inc. Sign in with Apple, purchases and subscriptions, and push notifications.
• Legal and safety. We may disclose information if we believe in good faith that the law requires it, to protect people's safety, to stop fraud or abuse, or to enforce our terms. If we are involved in a merger, sale or similar change, your information may move to the new owner, who must honor this policy.

The full list, with where each is used, is on the Data Protection page.

8. How long we keep information

9. This website and cookies

The Space Maker website has no ads, no analytics and no third-party trackers, and doesn't set cookies. Our hosting provider, Google Firebase Hosting, keeps standard server logs (such as IP address and pages requested) for security and operation. The web viewer keeps you signed in using your browser's storage, which is needed for it to work, and the phone code step uses Google reCAPTCHA, which can set its own cookies under Google's policy.

10. Your choices and rights

• In the app. Delete your account (Settings → Account → Delete account), delete one device's backups or sign out a device (Settings → My Devices), unlink your phone (Settings → Web access), and turn off Photos, Contacts, Camera and notifications in your device settings.
• Ask us. You can ask to know what we hold about you, to correct it, or to delete it, by following Data Requests. We answer within 45 days.
• California. If you live in California, see the California Privacy Notice for your rights and how to use them.
• Europe, the UK and similar places. You may have the right to access, correct, delete, restrict or object to our use of your personal information, to receive it in a portable form, to withdraw consent, and to complain to your data protection authority. We rely on these reasons: to provide the Service you ask for (contract), our legitimate interests in security and preventing abuse, your consent (for example notifications and camera access), and legal duties.
• We don't treat you differently for using your rights.

11. Where information is processed

Space Maker is run from the United States. Your information is processed and stored in the United States (our Google Cloud and Firebase services are set up in us-central1), including if you are in another country. Where the law requires a legal basis for sending information abroad, we rely on our providers' data processing terms and standard contractual clauses.

12. What happens when you delete your account

When you delete your account in the app (you sign in again first), we delete or remove the link to you from the following:

• your account, plan record and sign-in (Firebase) account, and your phone number if you linked one;
• your devices, including push tokens;
• all your backups: the files and their records, including unfinished backup sessions;
• your sign-in history and the first and last-known summary;
• any free plan upgrade, extra space or note a staff member added to your account;
• App Store notification records and purchase records, which are unlinked from you (the link ID is cleared);
• details in our staff action log about your account (the details are removed).

What we keep after you delete your account:

• Purchase records, unlinked from you. Apple's own transaction identifiers, product, dates and status, kept without any link to you or your account. We keep them for accounting, to prevent fraud and to refuse a second claim on the same purchase. Apple keeps its own records of your purchases.
• The free-plan device code. A one-way scrambled code and counter, so that a new account on the same device can't restart the free plan.
• Staff action log entries keep the action, the time and the staff member's name, without details about you, and a random account ID that no longer points to anyone.
• Crash reports held by Google, which are not linked to you, until Google removes them.
• Copies we must keep to follow the law or settle a dispute, if any.

Deleting your account does not cancel your Apple subscription. Cancel it in your Apple account settings. Deleted data can't be restored. Copies in backups of our own systems are replaced as those systems rotate.

13. Children

Space Maker is not directed to children under 13, and we don't knowingly collect personal information from them. You must be at least 13 to use it. If you believe a child under 13 gave us information, email privacy@spacemakerapp.com and we will delete it.

14. Keeping information safe

We protect information with encryption in transit and at rest, access rules, device limits and limited staff access. No system is perfectly secure, so we can't promise absolute security. See the Data Protection page for the measures in place and how we handle a security incident.

15. Changes to this policy

If we change this policy in a way that matters, we will post the new version here with a new "Last updated" date, and, for material changes, tell you in the app or by email before the change takes effect where the law requires it.

16. Contact

Privacy questions and requests: privacy@spacemakerapp.com. Other questions:support@spacemakerapp.com. By mail: Voiie Inc., 116 E Live Oak Ave, #1017, Arcadia, CA 91006.