Your photos stay yours.

Your photos and videos never leave your device

This is the core of how SpaceUp works and it has not changed. All scanning, analysis, and organizing of your photos and videos — finding duplicates, similar photos, blurry shots, screenshots, and large videos — happens entirely on your device. Your photos and videos, their contents, and their file names are never uploaded, transmitted, or sent to us or to anyone else. The on-device machine-learning model is bundled in the app and runs locally; it does not send your images anywhere.

When you delete items, they go to your device’s recoverable trash — the Photos app’s Recently Deleted on iPhone, your gallery’s trash on Android (recoverable for up to 30 days) — not to us.

Emails are fetched from Google only when you open the Email Cleaner and are never stored by SpaceUp.

Contacts

SpaceUp can scan the contacts on your device to find duplicate and incomplete contacts. This processing happens entirely on your device: your contacts are never uploaded, transmitted, or shared, and SpaceUp’s analytics and crash reports never contain contact data — only counts (for example, how many duplicates were found).

SpaceUp modifies or deletes contacts only when you explicitly confirm a merge, deletion, or restore. Contact backups you create are stored as .vcf files in SpaceUp’s private storage on your device, are removed if you uninstall the app, and leave your device only if you yourself choose to share or export them.

Contacts access is optional: the feature asks for permission when you first use it, and the rest of SpaceUp works fully without it.

Email Cleaner and your Google account

SpaceUp’s Email Cleaner is an optional feature (available on iPhone) that helps you tidy your Gmail inbox. It works only if you choose to connect a Google account. If you never connect one, none of this section applies and SpaceUp never touches your email.

How SpaceUp accesses your Google data

• You connect Gmail through Google Sign-In, Google’s own sign-in screen. SpaceUp never sees or stores your Google password.
• SpaceUp requests access to your Gmail mailbox (Google’s https://mail.google.com/ scope) so it can count, list, display, move to Trash, and — only when you explicitly ask — empty the Trash of your emails. Google also shares your email address and basic profile with any app using Google Sign-In; SpaceUp reads and keeps only your email address, to show which account is connected. SpaceUp does not read or store your name, photo, or any other profile field.
• All requests go directly from your iPhone to Google’s servers. SpaceUp has no server of its own, and no SpaceUp system ever receives your emails or your Google access token.

How SpaceUp uses your Google data

Everything the Email Cleaner does with your email happens for features you can see and operate on screen:

• Counting and listing emails in Gmail’s own categories (Promotions, Social, Updates, Forums, Spam), emails unread for over a year, and your most frequent senders. Categories are Gmail’s — SpaceUp does not analyze or classify your emails.
• Showing an email’s full content only when you open that specific email in the app.
• Moving emails you select to Gmail’s Trash, where Gmail keeps them recoverable for 30 days. SpaceUp never permanently deletes emails as part of cleaning.
• Emptying Gmail’s Trash only when you tap “Empty Trash” and confirm the permanent deletion yourself. This is a separate, explicit action.
• Unsubscribing from mailing lists using the unsubscribe information senders include in their own emails (the List-Unsubscribe header). One-click unsubscribes are sent from your phone directly to the sender; other links open in your browser.

SpaceUp does not use your Google data for advertising, for building profiles, to train artificial-intelligence or machine-learning models, or for any purpose other than the features described above.

How SpaceUp stores your Google data

• Your access token is stored in the iOS Keychain on your device by Google’s Sign-In library. It never leaves your phone.
• Your email address (the connected account) is stored in the iOS Keychain on your device.
• Email counts and a sender ranking from your latest scan are cached on your device so the screen fills instantly next time. Emails’ contents, subjects, and sender addresses are never written to disk by SpaceUp; the app holds them in memory only while you’re looking at them.
• Filter keywords you type and the unsubscribe status per sender (“Unsubscribed” / “Page opened”) are stored on your device as preferences.
• Nothing is stored on any SpaceUp server, because there is none.

How SpaceUp shares your Google data

SpaceUp does not share, transfer, or sell your Google user data to anyone. Our analytics (Firebase) receive only counts and feature-usage events — for example, that a scan completed with 847 promotions, or that 25 emails were moved to Trash. Analytics never receive email contents, subjects, sender names, addresses, or message identifiers.

Disconnecting and deleting

Tap Disconnect in the Email tab or in Settings. SpaceUp then revokes its own access with Google and deletes the token, your email address, the cached counts, and the per-sender unsubscribe statuses from your device. You can also remove SpaceUp’s access at any time from your Google Account at https://myaccount.google.com/permissions. Because SpaceUp holds no copy of your email anywhere, there is nothing else to delete.

Google API Services User Data Policy — Limited Use

SpaceUp’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, SpaceUp: uses Google user data only to provide the user-facing Email Cleaner features described above; does not transfer that data to anyone; does not use it for advertising of any kind; does not use it to train generalized AI or ML models; and no human at SpaceUp reads your data — SpaceUp’s developers have no technical means to do so, since the data never leaves your device.

What we collect

To keep the app stable and understand how it’s used so we can improve it, SpaceUp uses two Google Firebase services — Firebase Analytics and Firebase Crashlytics. These collect a limited amount of data, described below. This data is transmitted off your device to Google, who processes it on our behalf as our service provider.

App activity (usage events). We log a small, fixed set of in-app events — for example, that a scan was started or completed, that a cleanup finished, how many items were cleaned, and how many bytes were freed. These events contain only counts, byte totals, and fixed category labels (such as which feature was used). They never include your file names, file paths, or any image or video content.

Crash logs and diagnostics. When the app crashes or misbehaves, Crashlytics collects technical diagnostic information (such as the type of error, device model, operating system version, and app state at the time) so we can find and fix the problem. These reports do not contain your photos, videos, file names, or personal content.

Device identifiers. On Android, Firebase collects device identifiers, including your device’s Advertising ID (AD_ID); we use it to measure and optimize our advertising campaigns that promote SpaceUp, and to support analytics. On iPhone, SpaceUp does not request tracking permission and does not access the advertising identifier (IDFA). On both platforms, Firebase collects a device-scoped app-instance identifier so that analytics events can be grouped by installation.

Approximate location. Firebase Analytics infers an approximate, coarse location (for example, country or region) from your device’s IP address. We do not collect precise or GPS location.

Email address of a connected Google account (Email Cleaner only; stored on your device). It identifies which account the Email Cleaner is connected to and is never transmitted to us — see Email Cleaner and your Google account above.

We do not collect your name, email address, contacts, accounts, or precise location, and SpaceUp does not require you to create an account. Contacts are read on your device only, as described under Contacts above, and are never collected by us or transmitted off your device; a connected Google account’s email address is likewise stored on your device only.

Subscriptions and purchases

SpaceUp offers optional paid subscriptions. Payments are processed entirely by Google Play (Android) or Apple’s App Store (iPhone) — we never receive or store your payment card details.

To manage subscriptions, we use RevenueCat (RevenueCat, Inc.), a service provider that processes purchase information on our behalf. When you make or restore a purchase, RevenueCat receives and processes:

• Purchase history (which subscription you bought, when, its renewal and trial status)
• A randomly generated, anonymous app user ID that identifies your app installation — not your name, email, or Google account
• Basic device information (device model, OS version, app version, locale)

RevenueCat processes this data solely to provide subscription management to us and does not sell it or use it for its own advertising. See RevenueCat’s privacy policy at https://www.revenuecat.com/privacy for details.

We also record subscription events (such as a purchase or trial start) in our analytics as counts and plan types only — never linked to your identity, and never including payment details.

How we use this data

We use the data above to:

• keep the app stable by diagnosing and fixing crashes;
• understand which features are used so we can improve the app;
• measure and optimize advertising campaigns that promote SpaceUp.

Sharing

We do not sell your data, and we do not share it with third parties for their own purposes. Google processes the data described above on our behalf as our service provider, under Google’s terms. We have not enabled Google’s data-sharing features (such as sharing with other Google products, benchmarking, or ads personalization). RevenueCat, Inc. — subscription and purchase management — acts as our service provider; your purchase data is collected, not shared for third parties’ own purposes, and is processed under RevenueCat’s terms. Google (Gmail API, Google Sign-In) provides the optional Email Cleaner connection: your Gmail data is exchanged directly between your device and Google under Google’s own terms, and we neither receive it nor share it with anyone.

Encryption

All data collected by the app is encrypted in transit using TLS.

Your choices and rights

• Advertising ID: On Android you can reset or limit your Advertising ID at any time in your device settings (Settings → Privacy → Ads, or Settings → Google → Ads), including opting out of ad personalization. On iPhone there is nothing to reset, because SpaceUp does not use the advertising identifier (IDFA); you can still limit tracking system-wide in Settings → Privacy & Security → Tracking.
• Request deletion: You can request that we delete the data associated with your app installation — including analytics, crash, and purchase-related data — by emailing support@spaceupapp.com. We will action your request.
• Stop collection: Uninstalling SpaceUp stops all further data collection by the app.

Data retention

We retain analytics and diagnostic data only as long as needed for the purposes above, in line with Google Firebase’s retention controls, after which it is deleted or anonymized.

Children

SpaceUp is not directed to children under 13, and we do not knowingly collect data from children under 13.

Changes to this policy

We will update this policy if our data practices change — for example, if we add new features. Material changes will be reflected here with an updated date.

Contact

Questions about this policy or your data: support@spaceupapp.com