SPACE App · Effective July 1, 2025 · Developer: Jakkula Shiva Kumar · shiva547337@gmail.com
How SPACE collects, uses, and protects your personal data.
This Privacy Policy describes how Jakkula Shiva Kumar ("we," "us," "our," or "Developer") collects, uses, discloses, and safeguards your personal information when you use the SPACE mobile application available on the Google Play Store. This Policy applies to all users globally, including EU/EEA (GDPR), California (CCPA/CPRA), and India (IT Act 2000 and DPDPA 2023).
Account Information (email, display name); Profile Information (optional avatar, photo, bio, location); Habit Data (habit names, descriptions, emojis, schedules, completion logs); Social Interaction Data (messages, reactions, nudges, snap photos, captions within shared spaces); User-Generated Content (photos you upload).
With your explicit permission: Location Data (coordinates for Discover features); Usage Data (habit completion timestamps, streak data); Device Information (push notification tokens only).
We do not collect your full name (unless used as display name), use third-party analytics SDKs, collect payment card details (handled by Google Play Billing), or access device contacts, camera roll, or microphone beyond what you explicitly grant.
Performance of a Contract (Article 6(1)(b)) for core features; Legitimate Interests (Article 6(1)(f)) for security; Consent (Article 6(1)(a)) for location data, profile photos, and push notifications; Legal Obligation (Article 6(1)(c)) for applicable laws.
To create and maintain your account; provide core App features (habit tracking, streaks, couple/group spaces, challenges, leaderboards, progress calendars); provide location-based Discover features; display your profile to members of shared spaces; deliver push notifications; enforce our Terms; maintain App security; and comply with legal obligations. We do not use your data for advertising or automated decision-making.
Your data is stored on servers operated by Supabase, Inc. in the Asia-Pacific (Sydney, Australia) region. Supabase is ISO 27001 certified and GDPR-compliant. Profile photos and habit snaps are stored in Supabase Storage backed by AWS S3.
All data in transit is encrypted using TLS. All data at rest is encrypted by Supabase's infrastructure. Access is controlled by Row Level Security (RLS) policies. Authentication uses JWT tokens via Supabase Auth. Habit snap photos automatically expire and are deleted daily.
We do not sell, rent, or trade your personal information. We share data only with: Supabase, Inc. (backend infrastructure); Google LLC (payment confirmation only via Google Play Billing); applicable legal authorities if required by law; and in the event of a business transfer, with prior notification.
Your location coordinates are used exclusively for proximity-based recommendations in the Discover section. They are not used for advertising or sold to third parties. Location collection requires explicit consent via your device's permission system. Revoke permission at any time via device settings.
Snaps are visible to all members of the shared space in which they are posted. Snaps automatically expire at midnight IST daily and are permanently deleted from our servers. Your display name, avatar, and habit activity are visible to other members of spaces you join.
Account data: retained until account deletion. Habit snaps: deleted daily at midnight IST. Profile photographs: deleted upon replacement or account deletion. Push notification tokens: retained until permission is revoked or account deleted. Legal records: up to 7 years where required by law.
All users: access your data; correct your profile; delete your account; disable location sharing; disable push notifications. EU/EEA users: data portability, restriction of processing, withdrawal of consent, and right to lodge complaints with your local Data Protection Authority. California users: rights under CCPA/CPRA. Contact shiva547337@gmail.com to exercise any rights.
Via the App (Settings > Account > Delete Account) or email shiva547337@gmail.com. We will permanently delete your data within 30 days. Certain data may be retained up to 7 years where required by law. Deletion is irreversible.
SPACE is intended for users aged 13 and older. We do not knowingly collect data from children under 13. EU minimum age is 16 (or lower with verifiable parental consent, minimum 13). Contact shiva547337@gmail.com if you believe we have collected data from a child below the applicable minimum age.
Your data is stored in Australia (Supabase's Asia-Pacific data centre). For EU/EEA users, transfers are made in accordance with GDPR requirements, including Standard Contractual Clauses (SCCs) where applicable.
Material changes will be posted at this URL with an updated Effective Date, and communicated via in-app notification or email. Continued use after changes constitutes acceptance.
Developer: Jakkula Shiva Kumar · Email: shiva547337@gmail.com · We will respond within 30 days.