GSPACE Privacy Policy

Data we collect

• Account: email address and password (stored hashed by our sign-in provider; we never see it in plain text). If you sign in with a third-party account, we receive that account's email address and name.
• Profile: display name, ID, status, language and plan (Free, Plus or Pro); profile photo (if you upload one); and custom title (if you set one).
• Friends: friend requests and how they were made, your friend list, your block list, and the invite links and QR codes you create.
• When you invite a friend who hasn't signed up yet by email, we keep their email address to send the invitation. Once they sign up with that address, they receive your friend request.
• Messages: the content of direct and group messages, when they were sent and read, recalled messages, and group names and members.
• Message reactions: the reactions you add to messages (such as 👍) are stored with the message, and chat members can see who reacted with what.
• Call history: when you call a friend, we record who called whom, whether it was voice or video, the start and end times, and whether it was answered, declined or missed, so your friend's phone can ring and show the call status. This record is deleted 10 minutes after the call ends. A missed call leaves a “Missed call” line in the chat. That line is a chat message: it follows the retention rules for messages and is not deleted after 10 minutes. Your Recent calls list is stored only on your own device.
• Calls: call codes, call names (set by the host or an admin), participant names, join and leave times, hosts and admins, the meeting's camera rule (free / cameras on / audio only), when each participant agreed to it, and who can turn on a camera.
• Presence: whether you are online and when you were last seen.
• Reports: who reported whom, the reason, any note, and the reported message as it was at the time.
• Suspensions: if your account is suspended for breaking the terms, we record the reason and when it started. The reason is shown only to you after you sign in, never to other users.
• Requests and feedback: the items you request or your feedback, your account and the time sent, and the country determined from your connection (to check whether the option is available in your region).
• Call usage statistics: for each call, the call code, start and end times, the highest number of people and cameras at the same time, and the host's plan at the time. We do not record the participant list or the host's account.
• One-to-one call minutes: while a one-to-one call you placed is in progress, when it connected, when a camera was turned on, when both of you were connected and when one side dropped, when it ended, and your account, so we can count the voice and video minutes you have left each month. 10 minutes after the call ends, we keep only the total voice and video minutes you have used this month, and the total does not include who you called. We never record anything said in a call.
• Call feedback: the rating, problems and comments you give when a call ends, plus your account, the call code, how many people you saw, how long you were in the call, whether you used the app or the web, and your browser information (user agent).
• Sounds and ringtones: whether the sounds for new messages, people joining or leaving a call, and errors are on or off, and the ringtone you choose for incoming calls.
• Encryption data: each device's public key, and encrypted chat keys (which the server can't open). A passphrase used to confirm it's your device when the app is woken up to answer a call; the server stores only its hash.
• Push notifications: to deliver notifications to your phone, the app registers the push token provided by your phone's operating system to your account. When you turn on call ringing, some phones also register a separate push token just for incoming calls. These are removed when you sign out or delete your account. When GSPACE is updated, we also send a notification about what changed. These are service notices, not ads, and you can turn them off under Update notices in Settings.
• Device IDs: each browser and app you sign in on has its own ID, used to tell apart the devices you're signed in on at the same time (for example, so the same person counts only once in a call).
• Connection logs: our host and providers automatically log IP addresses, browser type and timestamps for security and troubleshooting.
• Usage data from translation components: the built-in translation component on some devices sends it to the operating system provider; see "Security".
• Error reports: crash and error details (error type, app version, device model, OS) are sent automatically so we can fix problems. No message content, call content or personal information.

What we don't do

• We don't record video or audio. Calls are streamed live and not saved, and in-call chat is not stored.
• We don't sell user data, and we don't use advertising or cross-app tracking tools.
• We don't access your contacts, photos or phone location. The camera and microphone are used only during calls and device checks. The camera is also used when you scan a friend's QR code; the image is read on your device and never uploaded. You can turn them off at any time.

How we use data

• To run the service: sign-in, friends, messages, calls and showing who is online.
• For safety: preventing fraud and abuse, handling reports, and limiting unusually heavy activity.
• For necessary notices, such as password reset emails.
• To reply when you write to us.
• To plan service capacity: we use call usage statistics to estimate service costs, reply to requests you send, and use your feedback and call feedback to improve the service.

Who can see your data

• Friends and people you invite see your name, photo, status and title, but not your email address or ID unless you share them.
• Group members see your name, photo, badge and the messages you send in the group.
• Call participants see your name, video and audio in the call.
• People you block see you as offline and are not told they are blocked.
• In group meetings, your own sign-in email and a reminder not to screenshot, record or share content from others without consent are tiled across your screen as a watermark to discourage leaks. Only you see it.

AI connection (AI services you authorize)

Plus and Pro users can connect GSPACE to an AI service of their own choice. A connection is made only when you yourself select Allow on GSPACE's authorization page; GSPACE never connects an AI service for you.

• Once connected, the AI service you authorized can receive your chat list (the other person's name or the group name, member count and last activity time) and unread counts, your friends' names, titles and online status, and the text of messages and meeting links you ask it to prepare. It never receives anyone's account email address or custom ID. This data is sent to the AI service you chose, which handles it under its own terms and privacy policy.
• Reading message content requires separate consent in My AI and is off by default. End-to-end encrypted messages can't be read by GSPACE's servers, or by the AI service; when on, only messages that aren't encrypted are sent (for example, messages from before encryption was launched). You can turn it off at any time, and it stops immediately.
• AI-prepared messages and meeting invitations are sent in your name only after you tap Send in GSPACE. Before sending, message text is temporarily stored in plaintext on GSPACE's servers so you can review it; this draft is not protected by end-to-end encryption. Drafts become invalid after 30 minutes. Plaintext is cleared when a draft is sent, cancelled, marked failed, or its AI connection is disconnected. Unprocessed expired drafts are cleared when you open the pending list, try to send them, or the next successful cleanup runs, so expiry does not mean physical deletion at minute 30. Cleanup is currently scheduled once a day. Your device encrypts the message when you send it.
• Notes: the AI you connected can save records (such as meeting summaries or to-dos) as notes for you without asking you to confirm. Notes are stored on GSPACE's servers, only you can see them, and you can edit or delete them yourself. For the AI to read your notes, you must separately turn this on in My AI; it's off by default. When on, note content is sent to that AI service. You can turn it off at any time.
• You can disconnect at any time in My AI. After that the AI service can't get new data, but GSPACE can't take back data already sent to it.
• We record authorizations, disconnections, each action the AI takes, and when you send or cancel a message (time, item and result, not message content). We keep these records for 1 year for security and so you can review them in My AI.
• GSPACE never gives your data to an AI service you haven't authorized.

Service providers

To provide the service, we use service providers to store and transmit data on our behalf, and they may only use it as we instruct. Data may be stored or transferred outside Taiwan.

• Third-party sign-in services: only if you choose to sign in with them.
• Payment service provider: only if you choose to open the sponsorship link. Payment happens on the provider's page and we never receive your payment details.
• Cloud database and web hosting providers: store accounts and data, and run the website.
• Real-time audio and video relay service: relays call video and audio; call content is encrypted, so the relay service can't see it.
• Email delivery service: sends necessary emails such as password resets.
• Push notification services (provided by your phone's operating system): deliver notifications to your phone; notifications don't contain message text.
• Error monitoring service: receives error reports.

Security

All connections to the website and app are encrypted.

Call audio, video and in-call chat are end-to-end encrypted. The meeting key needed to decrypt them is created and exchanged only on participants' devices. GSPACE's servers only relay encrypted data and do not store the meeting key.

In the meeting, participants can compare the safety code and the list of people who have received the key with each other, to confirm that the meeting key has not been given to anyone outside that list.

Participant names, call names and the times people join or leave are not covered by end-to-end encryption.

Calls between friends use the same end-to-end encryption as meetings.

On iPhone, if you turn on “Show in phone's Recents” (off by default), the caller's name is saved to Recents in the Phone app and may sync to your other Apple devices through your iCloud account. After you turn it off, new calls are no longer saved.

The GSPACE app always blocks screenshots and screen recording (except while your own add-friend QR code is shown). GSPACE does not collect or store any screen content because of this.

Direct and group text messages are end-to-end encrypted: messages are encrypted on your device before they're sent, and only the devices of the chat's members can decrypt them. GSPACE's servers store only the encrypted content and can't see the message text. Message reactions are encrypted the same way.

In a chat, you can compare the safety code with the other person to confirm that messages haven't been encrypted for anyone outside the member list.

Not covered by encryption: who messages whom, when messages are sent and read, group names and members, and call history; message drafts prepared through an AI connection that haven't been sent yet; notes saved by an AI; message content you attach when you report a message; and older messages sent before end-to-end encryption was introduced.

Notifications handed to phone push notification services don't contain message text.

When you report a message, your device attaches that message's content to the report and sends it to us to handle.

Chat translation and Traditional/Simplified Chinese conversion happen on your device, and message content is never sent to GSPACE's servers for translation. Chinese conversion uses an open-source tool and runs on your device. Other languages use the translation built into your device or browser and are translated locally. The original text is kept, and translations are held only in your device's memory: they are never saved or uploaded. The first time you translate a language, your device may need to download that language's translation pack from the operating system provider. You can turn translation off in Settings, or turn it off for a specific chat.

• Phones and tablets: translation is handled on your device by the translation component built into the operating system, and the original text and translations don't leave your device. The component may connect to the operating system provider from time to time for updates and language packs, and may send usage and performance data about the component (for example device model, OS version, app version, an app or per-installation identifier, and the languages translated) so that the translation component's provider can diagnose, maintain and improve its service. This data doesn't include your messages or translations.
• Desktop browsers: translation uses the browser's built-in local translation. The translation model is downloaded to your computer and translation happens inside the browser. If you use "Translate this page" on your browser's toolbar yourself, that's the browser provider's cloud translation service, not part of GSPACE's translation, and the content is sent to that service.

How long we keep data

• Account and profile: kept until you delete your account, or until you haven't signed in for the period you choose (1, 3, 6 or 12 months; 6 by default). We email you before then, and signing in once resets the clock.
• Notes: kept until you delete them or delete your account.
• Messages: until you recall them (possible within 24 hours of sending) or delete your account. Deleting your account deletes the messages you sent. When everyone leaves a group, the group and its messages are deleted.
• Call history: deleted 10 minutes after the call ends. The “Missed call” line in the chat follows the retention rules for messages. Your Recent calls list is stored on your own device and is cleared from that device when you sign out or delete your account.
• Sound and ringtone settings: kept until you delete your account.
• Call records (codes, names, participants, times): used to track time limits, headcount and the meeting's camera rule, and names are shown on the call screen; no longer linked to you after you delete your account.
• Reports: kept, including the reported content at the time, to handle safety and legal issues; no longer linked to your account after you delete it.
• Suspension records: until the suspension is lifted or the account is deleted. You can still delete your account yourself while suspended.
• Requests, feedback, call feedback and call usage statistics: deleted after 1 year. Requests, feedback and call feedback are no longer linked to your account after you delete it.
• One-to-one call minutes: the times of each call are deleted 10 minutes after it ends; only this month's total minutes are kept, and last month's totals are deleted on the 1st of each month (Taiwan time). They are also deleted with your account.
• Connection logs: kept for 1 hour by our host and 1 day by our database provider, then deleted automatically by them; Connection logs may show that an IP address placed or received a call at a certain time, but contain nothing said in the call. Error logs are kept for 90 days and record only how many devices failed to ring, not who called whom. Call notifications are delivered through Apple and Google and carry only a call ID, not names. Our database currently has no automatic backups.
• Error reports: deleted after 30 days.

These retention periods do not apply where the law or a competent authority requires us to keep data.

Your rights

Under Taiwan's Personal Data Protection Act, you can ask to look up, view or get a copy of your personal data, correct or add to it, stop its use, or delete it.

• You can do most of this yourself in GSPACE Settings: change your name, photo, ID (once) and status, or delete your account (immediate and permanent).
• How to delete your account is also explained on the Delete account page.
• For anything else, email hello@gspace.fun. We reply to requests to look up, view or copy data within 15 days, and handle corrections, stopping use and deletion within 30 days. If necessary, each period may be extended once (by up to 15 more days for look-up requests and up to 30 more days for the others), and we'll tell you why.

Without required data such as an email address, you can't create an account or use GSPACE.

Minors

Minors should use GSPACE with the knowledge and consent of a parent or guardian.

If you are a parent and believe your child has given us personal data without your consent, email hello@gspace.fun and we will help delete it.

Cookies

We use only necessary cookies: to keep you signed in and to remember your language. There are no advertising or analytics cookies.

Changes

If this policy changes in an important way, we will announce it on the website and in the app and update the date at the top.

Contact

For any privacy question, email hello@gspace.fun.