Privacy Policy
Effective Date: March 1, 2026
Last Updated: March 18, 2026
1. Introduction
Vaunted Labs LLC ("Company," "we," "us," or "our") operates the Spaace It mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.
Company: Vaunted Labs LLC
Address: 254 Chapman Rd, Ste 208 #26689, Newark, Delaware 19702, United States
EIN: 32-0843694
DUNS: 144964695
Contact: contact@spaace.it
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address and user ID when you create an account.
- User Content: Photos you upload for AI redesign processing.
- AI Generation Parameters: Style preferences, room types, and design parameters you select when generating redesigns.
- Support Communications: Information you provide when contacting our support team.
2.2 Information Collected Automatically
- Device type, operating system version, and unique device identifiers.
- App usage data including features used, session duration, and interactions.
- Crash reports and performance data.
- Subscription status and purchase history (managed by Apple via RevenueCat).
- Attribution and advertising data (via Tenjin).
- Product analytics and user behavior data (via PostHog).
3. How We Use Your Information
- To provide and maintain the App, including processing AI-powered redesigns.
- To manage your account and subscription.
- To process your uploaded photos through our AI generation pipeline.
- To improve and optimize the App experience through analytics.
- To measure advertising effectiveness and attribution.
- To manage paywall and subscription offerings.
- To communicate with you about your account, updates, and support requests.
- To comply with legal obligations.
4. Third-Party Services
We use the following third-party services:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Authentication & data storage | Email, user ID, uploaded photos |
| Firebase | Push notifications & cloud messaging | Device info, push tokens |
| PostHog | Product analytics & user behavior | Device info, usage data, anonymized events |
| Tenjin | Advertising attribution & analytics | Device identifiers, install data, ad interaction data |
| RevenueCat | Subscription management | User ID, purchase data |
| Superwall | Paywall management & A/B testing | User ID, device info, subscription status |
| Runware (AI infrastructure) | AI image generation (hosts Gemini, Flux, and other models via ComfyUI) | Uploaded photos, generation parameters |
5. Third-Party AI Processing Disclosure
Your photos are processed by third-party AI systems. When you use Spaace It's redesign features, your uploaded photos and generation parameters are transmitted to Runware, a third-party AI infrastructure provider. Runware hosts and runs AI models including Google Gemini, Flux, and other large language and image models via ComfyUI pipelines to generate your redesigned images.
By using the App's AI redesign features, you explicitly consent to your photos being sent to these third-party AI services for processing. Your photos are used solely for the purpose of generating your requested redesigns and are not used to train AI models. You may withdraw this consent at any time by discontinuing use of the AI redesign features (see Section 7.3 below).
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Account information | Until account deletion |
| Uploaded photos | Until account deletion or 90 days after generation |
| Generated images | Until account deletion |
| AI generation parameters | Until account deletion |
| Usage analytics (PostHog) | 24 months |
| Attribution data (Tenjin) | 24 months |
| Subscription data | As required by tax/legal obligations |
7. Your Rights and Choices
7.1 Account Deletion
You can delete your account and all associated data directly within the App at any time. Upon deletion, we will remove your personal data, uploaded photos, and generated images from our systems within 30 days.
7.2 Data Access and Portability
You may request a copy of your personal data by contacting us at contact@spaace.it.
7.3 Consent Revocation
You may withdraw your consent to data processing at any time:
- AI processing consent: Stop using the AI redesign features. Previously generated images remain available but no new photos will be sent to third-party AI services.
- Analytics consent: Contact us at contact@spaace.it to opt out of analytics tracking.
- Complete data removal: Delete your account in-app to remove all data and revoke all consents.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
8. Data Security
We implement appropriate technical and organizational security measures to protect your personal data, including encryption in transit (TLS/SSL) and at rest, secure authentication protocols, and regular security reviews. However, no method of transmission over the internet is 100% secure.
9. GDPR — Rights of European Union Users
If you are located in the European Union (including France) or the European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data ("right to be forgotten").
- Right to Restrict Processing: Request limitation of how we process your data.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent (see Section 7.3).
Legal Basis for Processing: We process your data based on: (a) your consent, (b) performance of a contract (providing the App services), (c) compliance with legal obligations, and (d) our legitimate interests in improving and securing our services.
To exercise any of these rights, contact us at contact@spaace.it. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority (e.g., CNIL in France).
10. CCPA — Rights of California Residents
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:
- Right to Know: You can request details about the categories and specific pieces of personal information we have collected.
- Right to Delete: You can request deletion of your personal information.
- Right to Opt-Out: You can opt out of the sale of your personal information.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
We do not sell your personal information. To exercise your rights, contact us at contact@spaace.it.
11. Children's Privacy
Spaace It is rated 4+ on the Apple App Store and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at contact@spaace.it.
12. Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws, including Standard Contractual Clauses where required by the GDPR.
13. We Do Not Sell Your Data
Vaunted Labs LLC does not sell, rent, or trade your personal information to third parties for their marketing purposes.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy within the App or on our website with a new "Last Updated" date. Your continued use of the App after the effective date of the revised Privacy Policy constitutes your acceptance of the changes.
15. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Vaunted Labs LLC
254 Chapman Rd, Ste 208 #26689
Newark, Delaware 19702, United States
EIN: 32-0843694 | DUNS: 144964695
Email: contact@spaace.it