Privacy Policy

Last updated: February 25, 2026 · Effective: February 25, 2026

This Privacy Policy describes how PairSpace ("we", "us", "our") collects, uses, stores, and protects your information when you use the PairSpace mobile application ("App"). We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and applicable data protection laws.

    Summary: PairSpace stores your account info and the content you create (notes, expenses, recipes,
    etc.) in Google Firebase. We use analytics to improve the app and AI to power recommendations. We never sell your
    data. You can delete your account and all associated data at any time.
  

1. Data Controller

The data controller responsible for your personal data is:

Name: PairSpace
Email: pairspaceapp@gmail.com
Website: https://pairspaceapp.com

2. Information We Collect

2.1 Account Information

Data	Purpose	Legal Basis
Email address	Account creation, login, partner invitations	Contract performance
Display name	Personalization, shown to your partner	Contract performance
Profile photo	Avatar display (optional, user-uploaded)	Consent
Preferred language	App localization	Contract performance
Google account info	Authentication via Google Sign-In (OAuth tokens used transiently)	Consent

2.2 User-Created Content

All content you create within PairSpace is stored to provide the service. This includes:

Content Type	Data Stored
Notes	Title, body text, tags, creation date
Expenses	Amount, currency, category, description, date, payer
Reminders	Title, due date, recurrence settings
Recipes	Title, ingredients, instructions, images, source URL
Moments & countdowns	Title, date, photos, optional location (latitude/longitude), comments
Goals	Title, description, target/progress values, images
Books & media	Watchlist titles, ratings, status
Gratitude journal	Messages, reactions, replies between partners

2.3 Sensitive Personal Data

PairSpace may collect data classified as special category or sensitive under GDPR:

Mood entries: Emotional state (5-point scale) with optional text notes
Menstrual cycle logs: Flow level, symptoms, and optional notes

This data is collected only with your explicit consent and is processed solely to provide the app's tracking features. It is never shared with third parties, used for advertising, or included in analytics. You may delete this data at any time.

2.4 Automatically Collected Data

Data	Purpose	Collected By
Crash reports (stack traces, device model, OS version)	Bug fixing and stability	Firebase Crashlytics (release builds only)
Screen views, navigation events	Product improvement	PostHog Analytics
App lifecycle events (open, close, background)	Usage patterns	PostHog Analytics
Session replays (screen recordings)	UX improvement and bug reproduction	PostHog Analytics
FCM device tokens	Push notification delivery	Firebase Cloud Messaging

2.5 Payment Information

PairSpace subscriptions are processed entirely by Apple App Store or Google Play Store via RevenueCat. We do not collect, store, or have access to your credit card number, billing address, or other payment details. RevenueCat links your subscription status to your anonymous Firebase user ID.

3. How We Use Your Information

Provide the service: Store and sync your content across devices
Partner features: Enable shared spaces, notifications, and expense splitting
AI recommendations: Generate recipe and media recommendations based on your content (titles and preferences only — no personal identifiers are sent to AI providers)
Push notifications: Notify you about partner activity (new notes, expenses, gratitude entries)
Product improvement: Analyze usage patterns via PostHog to improve the App
Crash reporting: Diagnose and fix technical issues
Communication: Send service-related communications (e.g., account deletion confirmations)

4. Third-Party Services & Data Sharing

We share data with the following third-party services strictly for the purposes described. We do not sell your data.

Service	Provider	Data Shared	Purpose	Privacy Policy
Firebase	Google LLC	Account info, all user content, crash data, FCM tokens	Infrastructure (auth, database, storage, messaging, crash reporting)	Link
PostHog	PostHog Inc.	Screen views, navigation events, session replays, device metadata	Analytics and product improvement	Link
RevenueCat	RevenueCat Inc.	Firebase UID, subscription status	Subscription management	Link
Groq	Groq Inc.	Content titles, preference text (no personal identifiers)	AI-powered recommendations	Link
TMDB	The Movie Database	Search queries	Movie and TV show data	Link
Google Books	Google LLC	Search queries	Book search and details	Link
Pexels	Pexels / Canva	Search queries	Stock imagery for recipes and goals	Link
Nominatim	OpenStreetMap Foundation	Location search text	Geocoding for moments	Link
OpenExchangeRates	Open Exchange Rates	No user data (API key only)	Currency conversion rates	Link

5. Data Storage & Security

Cloud storage: All data is stored in Google Cloud (Firebase) servers. Firebase provides encryption at rest and in transit.
Data location: Data is stored in the Firebase project's default region. This may involve data transfers outside the EU, governed by Google's Standard Contractual Clauses.
Local storage: Preferences (theme, language) are stored locally on your device using SharedPreferences. An offline cache (up to 100 MB) is maintained by Firestore for offline access.
App Check: We use Firebase App Check to prevent unauthorized API access.
Credentials: Passwords are managed by Firebase Authentication and are never stored in our application database.

6. Data Retention

Data	Retention Period
Active account data	Retained while your account is active
Deleted account — PII	Cleared immediately upon deletion request (email, name, tokens)
Deleted account — content	30-day grace period, then permanently deleted
Crash reports	90 days (Firebase Crashlytics default)
Analytics data	Per PostHog retention settings (currently 12 months)
Shared space content	Retained while at least one partner maintains access

7. Your Rights

Under the GDPR, CCPA, and applicable data protection laws, you have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate personal data (you can edit your profile in the App)
Erasure: Delete your account and all associated data (Settings → Delete Account)
Portability: Request an export of your data in a machine-readable format
Restriction: Request that we limit processing of your data
Objection: Object to processing based on legitimate interests
Withdraw consent: Withdraw consent for optional processing (e.g., mood tracking, analytics) at any time

To exercise any of these rights, contact us at pairspaceapp@gmail.com. We will respond within 30 days.

For California Residents (CCPA)

We do not sell personal information
We do not use personal information for cross-context behavioral advertising
You have the right to know what personal information is collected, request deletion, and opt out of any future sale

8. Children's Privacy

PairSpace is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly. If you believe a child has provided us with personal data, please contact us at pairspaceapp@gmail.com.

9. Cookies & Tracking

The PairSpace mobile app does not use cookies. Our analytics provider (PostHog) uses device-local identifiers to track sessions. Session replays are used by our team for debugging and UX improvement only.

If you access PairSpace via a web browser, standard web technologies (local storage, session storage) may be used for functionality.

10. International Data Transfers

Your data may be transferred to and processed in countries outside of your country of residence, including the United States (where Google Cloud, PostHog, and Groq operate). These transfers are governed by:

Google's Standard Contractual Clauses (SCCs) for Firebase
PostHog's Data Processing Agreement
Our agreements with other service providers that include appropriate safeguards

11. Session Replays

PairSpace uses PostHog session replays to understand how users interact with the App and to identify usability issues. Session replays capture screen content during your use of the App. These recordings are:

Stored securely on PostHog's servers
Accessible only to PairSpace developers
Used solely for product improvement and bug reproduction
Not shared with any third parties
Automatically deleted per our analytics retention policy

If you wish to opt out of session replays, contact us at pairspaceapp@gmail.com.

12. AI-Powered Features

PairSpace uses AI (Groq LLM) to provide recipe and media recommendations. When you use these features:

Only content-related data (recipe titles, movie titles, preference text) is sent to the AI provider
No personal identifiers (name, email, user ID) are included in AI requests
AI processing occurs on Groq's servers via encrypted API calls
AI responses are not stored by Groq beyond the duration of the request
You may choose not to use AI features — they are optional and clearly marked

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

Update the "Last updated" date at the top
Notify you via the App or email
Provide a summary of key changes

Continued use of PairSpace after changes take effect constitutes acceptance of the updated policy.

14. Contact Us

For privacy-related questions, data requests, or concerns:

Privacy email: pairspaceapp@gmail.com
General support: pairspaceapp@gmail.com
Support page: https://pairspaceapp.com/support.html
Website: https://pairspaceapp.com

If you believe your data protection rights have been violated, you also have the right to lodge a complaint with a supervisory authority in your country of residence.