Privacy Policy
Effective date: March 2026
1. Overview
SpaceReserve ("the App") is designed with privacy in mind. We collect the minimum data necessary to provide and improve the service. This policy complies with the EU General Data Protection Regulation (GDPR) and applicable data-protection laws.
2. Data Stored on Your Device
SpaceReserve stores the following data locally on your device:
- Venue data: Floor plans, spaces, and their configurations.
- Booking data: Guest names, phone numbers, party sizes, times, and notes.
- Settings: Your venue name, working hours, and app preferences.
If you enable iCloud Sync, this data is also stored in your private iCloud container under your Apple ID. We do not have access to your iCloud data.
3. Analytics & Crash Reporting (Opt-In Only)
If you choose to opt in, SpaceReserve uses Firebase Analytics and Firebase Crashlytics (provided by Google) to collect:
- Usage data: Which screens you visit and which features you use (e.g. number of bookings created). This data is anonymous and aggregated — it cannot identify you or your guests.
- Crash reports: Technical information about app crashes including device model, OS version, and stack traces. This helps us fix bugs faster.
What we do NOT collect through analytics:
- Guest names, phone numbers, or booking details.
- Your venue name or business information.
- Precise location data.
- Any personally identifiable information (PII).
Analytics and crash reporting are disabled by default. You are asked for explicit consent when you first use the app, and you can change your choice at any time in Settings > Privacy.
Firebase's data processing is governed by Google's Firebase Privacy Policy. Data processed by Firebase may be transferred to servers outside the EU; Google provides adequate safeguards under GDPR (Standard Contractual Clauses).
4. Data We Do Not Collect
- We do not collect personal data on our servers.
- We do not use advertising SDKs or sell data to advertisers.
- We do not share, sell, or transfer your booking or guest data to third parties.
- We do not track your location.
5. Legal Basis for Processing (GDPR)
Under the GDPR, our legal bases for processing data are:
- Consent (Art. 6(1)(a)): Analytics and crash-report data is only collected after you explicitly opt in.
- Contract performance (Art. 6(1)(b)): Local data storage is necessary to provide the reservation-management service you use.
- Legitimate interest (Art. 6(1)(f)): Processing subscription receipts to verify your plan status.
6. Your Rights (GDPR)
If you are in the European Economic Area (EEA), you have the right to:
- Withdraw consent for analytics at any time (Settings > Privacy).
- Access your data — all booking data is visible within the app.
- Delete your data — use Settings > Data & Backup > Delete Guest Data, or Settings > Reset All Data.
- Data portability — export your bookings as CSV from Settings > Data & Backup.
- Lodge a complaint with your local data-protection authority.
7. Subscription Data
Subscription purchases are processed entirely by Apple through the App Store. We receive only a transaction receipt to verify your subscription status. We do not have access to your payment information.
8. Local Notifications
With your permission, SpaceReserve sends local notifications about upcoming reservations. Notification data never leaves your device.
9. Data Storage & Security
All data is stored in an encrypted Core Data store on your device. Sensitive preferences (e.g. consent state, authentication flags) are stored in the iOS Keychain. Backups (CSV exports) are saved to locations you choose. We recommend enabling device passcode and biometric authentication for additional security.
10. Data Retention
Local booking data is retained until you delete it. If you withdraw analytics consent, no further analytics data is collected. Previously collected anonymous analytics data cannot be linked back to you and is retained by Firebase according to Google's standard retention policies.
11. Children's Privacy
SpaceReserve is a business tool not directed at children under 16. We do not knowingly collect data from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected in an updated effective date above. If we make material changes to how we handle analytics data, we will re-request your consent.
13. Contact
For questions about this Privacy Policy or to exercise your data-protection rights, contact us at ivo.g.sft@gmail.com.