FSpaces is an app for planning get-togethers with people you invite: a shared space per event, with a preparation checklist, chat, photos, links and a playlist. This policy explains exactly what we collect, why, and what you can do about it.
The short version. We collect your phone number so you can sign in, plus whatever you and your friends put into your spaces. We use no advertising, no trackers and no crash-reporting SDK. We do use one analytics tool, and only if you say yes to it on a screen that asks you plainly — you can turn it off again at any time, and it never receives anything you write, upload or say. We never access your photo library or your device location. We do not sell your data, and we do not share it with anyone except the five service providers named below.
The data controller is Jean-François Duval, an individual sole proprietor trading as FSpaces, at 1948 Rue du Centre, Montréal, Quebec H3K 1J2, Canada.
Jean-François Duval is also the person in charge of the protection of personal information, whom Quebec's Law 25 requires us to name.
Privacy enquiries and requests: contact@divindudu.dev.
When you first sign in, a screen asks whether we may collect analytics. It is a plain yes or no, it is not part of accepting the Terms, and declining changes nothing about how the app works. You can change your answer at any time in the app under Settings → Privacy.
If you say yes, we record that an action of a given kind happened — that a photo was added, that a space was opened, that an upload failed — together with:
No content, ever. Analytics events cannot carry free text. They never contain a message, a comment, a photo, a video, a link, a song, a checklist entry, a name, a phone number, an email address, a space name, a search term, or the reason chosen when somebody files a report. The only values an event may carry are labels from a fixed list, whole numbers obtained by counting, true/false flags, and identifiers — those our own server generated for your account, for your spaces, and for the things inside them, and one PostHog's software creates on your device to group a single visit's events together.
These events are held by PostHog on European servers, for 12 months. We switch off the location lookup PostHog would otherwise perform from your connection, and PostHog is configured to discard your IP address rather than store it.
| What | Why | Legal basis (GDPR Art. 6) |
|---|---|---|
| Phone number | Creating your account, sending a one-time sign-in code, identifying you to members of your spaces | Performance of a contract — Art. 6(1)(b) |
| Name, email, profile picture | Letting other members recognise you | Performance of a contract — Art. 6(1)(b) |
| Spaces, membership, content | Providing the service itself — this is the app | Performance of a contract — Art. 6(1)(b) |
| Phone numbers you invite | Letting an invited person find the space when they sign up, and preventing the same number being invited to it twice | Legitimate interests — Art. 6(1)(f) |
| Push notification token | Telling you about activity in your spaces | Consent — Art. 6(1)(a), given via the iOS permission prompt |
| Calendar entries | Adding a space to your calendar at your request | Consent — Art. 6(1)(a). Written on your device only; never sent to us |
| Apple Music searches | Finding songs to add to a playlist | Consent — Art. 6(1)(a), given via the iOS permission prompt |
| What Apple Intelligence writes for you | Writing a few sentences about what a space's playlist is, and drafting a space from a sentence you write | Legitimate interests — Art. 6(1)(f). For the note: that playlist's song titles and artists, with the space's vibe and description. For the draft: the sentence you type, and nothing else — no space you belong to and nobody's name. Both are sent to Apple and processed on its Private Cloud Compute, where Apple cannot read them and does not keep them. Nothing about who added which song is included |
| Analytics events | Understanding which parts of the app get used and where they fail, so we know what to fix and what to build | Consent — Art. 6(1)(a), given on the analytics screen in the app and withdrawable in Settings |
| Last-opened day, invitation acceptance times | Counting how many people use FSpaces and how well invitations work, without recording what anyone did | Legitimate interests — Art. 6(1)(f) |
| Sign-in tokens, rate limiting, abuse prevention | Keeping accounts secure and preventing misuse of the code-sending endpoint | Legitimate interests — Art. 6(1)(f) |
| Reports of objectionable content | Reviewing and acting on reports, and keeping a record of enforcement | Legitimate interests — Art. 6(1)(f); legal obligation — Art. 6(1)(c) |
Where we rely on consent, you can withdraw it at any time — by turning off notifications, calendar access or Apple Music access in iOS Settings, and by turning analytics off in the app under Settings → Privacy. Withdrawing consent does not affect processing carried out before you withdrew it.
We do not sell your personal data, and we do not disclose it for advertising. We use five service providers, each acting on our instructions:
| Provider | What they receive | Where |
|---|---|---|
| Twilio Inc. | Your phone number, to send your one-time sign-in code | United States |
| Apple Inc. | Your push token and notification contents, for delivery; Apple Music search terms; map search terms for venue lookup; to write the note above a space's playlist, that playlist's song titles and artists together with the space's vibe and description; and, to draft a space, the sentence you type into the drafting assistant | United States and global |
| Slack Technologies | An alert when somebody files a report, so we see it quickly. It carries identifiers only — which report, space, reporter and reported account, the reason chosen, and whether a note was left. Never the message, photo, note text, name or picture | United States |
| Fly.io Inc. | Hosting for our servers, database and uploaded files | Toronto, Canada |
| PostHog Inc. | Only if you consented to analytics. The analytics events described in section 2: the name of the action, the fixed technical labels, counts, your account identifier, and the identifiers of the spaces concerned and of the things acted on inside them. Never your content, your name, your phone number or your email. Configured to discard your IP address rather than store it | European Union |
We may also disclose data where we are legally required to, or where it is necessary to establish, exercise or defend legal claims.
Other members see what you share. Everything you put into a space is visible to every member of that space. Anyone holding a space's invite code can join it and see the content in it. Treat the invite code as you would a key.
Our servers and your uploaded files are located in Canada. Transfers of personal data from the European Economic Area to Canada are covered by the European Commission's adequacy decision for Canadian organisations subject to PIPEDA, which means your data receives protection the Commission considers equivalent to the GDPR — no additional safeguards are required for this transfer.
Analytics events, where you have consented to them, are held on PostHog's European infrastructure and stay in the European Union in the ordinary course of the service. PostHog Inc. is incorporated in the United States, so its staff may reach data held in the EU in order to support and maintain the service; that access is governed by the Standard Contractual Clauses in our data processing agreement with PostHog.
Sending your phone number to Twilio involves a transfer to the United States. This transfer relies on the safeguards Twilio maintains for European personal data, which are the European Commission's Standard Contractual Clauses and, where applicable, certification under the EU–US Data Privacy Framework. Push notification delivery through Apple, and report alerts to Slack, rely on equivalent safeguards.
When you delete your account, the following happens immediately and permanently: your profile is erased; your memberships, messages, comments, reactions and checklist entries are deleted; the photos, videos and link preview images you uploaded are deleted from storage, including from spaces belonging to other people; any spaces you host on your own are deleted along with everything in them; and any preparation-checklist items you had claimed are released so the group can pick them up again.
We also ask PostHog to erase any profile it holds for you, along with every analytics event recorded against it. We send that request whether or not you ever allowed analytics. The profile is removed straight away; PostHog deletes the events shortly afterwards, on its own schedule.
One deliberate exception: if you host a space that other people have joined, we will not let you delete your account until you delete that space or it is removed. Deleting it would destroy photos and songs that other members contributed, and that is not ours to do on their behalf.
Under the GDPR you have the right to:
To exercise any of these, write to contact@divindudu.dev. We will respond within one month. We will ask you to confirm control of your registered phone number before acting on a request, to make sure we are not handing your data to someone else.
If you are in Quebec, you have comparable rights under Law 25 and PIPEDA, and may complain to the Commission d'accès à l'information du Québec or to the Office of the Privacy Commissioner of Canada. Elsewhere in Canada, PIPEDA applies and the Office of the Privacy Commissioner of Canada is the authority to complain to. If you are in California, you have rights of access, deletion, correction and to opt out of "sharing" under the CCPA/CPRA — we do not sell or share personal information as those terms are defined.
FSpaces is for people aged 16 and over. You may not create an account if you are under 16.
We chose 16 because it is the age European data protection law sets by default for consenting to a service like this one. Setting it there means nobody needs a parent or guardian's permission to use FSpaces, and we never have to ask anyone to prove their age. A parent or guardian who believes their child has signed up anyway may write to contact@divindudu.dev and we will delete the account and its content.
No system is perfectly secure. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours of becoming aware of it — and, where Quebec residents are affected, the Commission d'accès à l'information — and notify you directly where the risk is high.
If we change this policy we will update the date at the top. Where a change materially affects how we use your data, we will tell you in the app or by notification before it takes effect, so you have a chance to object or delete your account.
Jean-François Duval
1948 Rue du Centre
Montréal, Quebec H3K 1J2
Canada
contact@divindudu.dev
Your use of FSpaces is also governed by our Terms of Service.