Last updated: September 25, 2026. Draft, pending legal review.
We collect only what allspace needs to work: your phone number, the name you give, what you post, the people you choose to add and the choices they make about hearing from you, and records of how the app is used, which never include what you wrote. We never upload your address book; only the people you pick are saved. No ads, no advertising identifiers, no selling of data, no AI reading your posts. No other company or app can reach your data through an API or integration; the only outside companies that handle it are the service providers that run allspace, listed below. You can export your people, topics, posts, and replies, or delete everything, from Settings.
Your phone number identifies you and is where texts are delivered. A friend who offers you a topic gives us your number; if you later sign in with the same number, it is the same record. We store numbers in a standard international format.
Two kinds. The name you give when you sign in, which is shown to the people you share with. And the name a friend picks for you from their own contacts when they add you, which is stored only on that friend's list and is never shown to anyone else, including you.
If you allow it, the app reads your contacts on your phone so you can pick people to add. Your contact list is never uploaded. Only the numbers and names of the people you select are stored, on your own list.
Text, photos, and links you post to a topic; replies between you and the author of a post; hearts on posts. Link previews are fetched by our server for the links you post and stored with the post.
Which topics you accepted and how often you chose to hear about each one; the day you prefer weekly digests; your time zone, taken from your phone or browser each time you open allspace so digests arrive in your morning; whether you chose text or push notifications; and whether you opened a digest, which is stored with your record and used only in aggregate.
The first time you choose a cadence from an invitation link in a browser, we text a code to your number to confirm it is you. Once confirmed, the browser keeps a random identifier in a cookie, and we store a scrambled copy of it with your record, so that browser can show and change your choices without asking again. We forget it a year after it was last used, or when you clear your cookies.
If you block someone or report a post, we store that so we can act on it.
Which features are used and whether the app crashed. The app records events such as creating a topic or choosing a cadence, each as a count or a fixed choice, never the words of a post, a name, or a phone number. Google Analytics for Firebase adds an identifier for this installation of the app (it is not an advertising identifier and changes if you reinstall), your device model, operating system, language, and app version, and an approximate location worked out from your internet address. When you sign in, these events are linked to the internal identifier of your record, never your phone number, and we note the installation identifier on your record so we can delete its events with your account.
Our servers also record events such as sending or opening a digest or changing a cadence, under the internal identifier of your record and never your phone number, whether or not you use the app.
There are no advertising identifiers, and nothing is used for advertising.
We do not use your content to train any AI, and no AI service reads your posts or replies.
This is the part most privacy policies skip, so here it is plainly.
We do not sell your personal information, to advertisers, data brokers, or anyone else, and we do not share it for advertising.
You receive digest texts from our number only if you chose a cadence for at least one topic, on your invitation page or in the app. Signing in or creating a topic never starts them; a topic you create sends you no digest until you choose one. The only other texts we send are ones you ask for: a confirmation code when you tap "Send code" on your invitation page, and a fresh link when you tap "Text me a new link". How often you hear from us is your choice, per topic. Reply STOP to any message to stop all texts from allspace, START to turn them back on, and HELP for help. Message and data rates may apply. Invitations from a friend are sent from that friend's own phone, not from us.
Data is encrypted in transit and at rest. Every read and write is checked against who you are. Web links are scoped to one person and one purpose and expire after 30 days. An invitation link only shows or changes your choices in a browser you have confirmed with a code sent to your number, so the friend who sent it cannot use it as you. Access to production data is limited to what is necessary to run the service.
These apply to everyone, wherever you are.
To exercise a right that Settings doesn't cover, email hello@allspace.app.
If you live in California, Virginia, Colorado, Connecticut, Utah, Oregon, Texas, or another state with a privacy law, you have rights to know, correct, delete, and opt out, and to appeal our decisions about your requests. We do not sell or share personal information for cross-context behavioral advertising, and we do not process sensitive personal information.
allspace is not for children under 13, and we do not knowingly collect information from them. If you believe a child has provided us information, email us and we will delete it.
Your data is processed in the United States, where our service providers operate.
We may update this policy from time to time. We will note significant changes in the app or by text. Continued use after a change means you accept the updated policy.
Email hello@allspace.app. We aim to respond within 48 hours.