Privacy Policy

Effective Date: March 1, 2026

Last Updated: March 18, 2026

1. Introduction

Vaunted Labs LLC ("Company," "we," "us," or "our") operates the Spaace It mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

Company: Vaunted Labs LLC
Address: 254 Chapman Rd, Ste 208 #26689, Newark, Delaware 19702, United States
EIN: 32-0843694
DUNS: 144964695
Contact: contact@spaace.it

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address and user ID when you create an account.
  • User Content: Photos you upload for AI redesign processing.
  • AI Generation Parameters: Style preferences, room types, and design parameters you select when generating redesigns.
  • Support Communications: Information you provide when contacting our support team.

2.2 Information Collected Automatically

  • Device type, operating system version, and unique device identifiers.
  • App usage data including features used, session duration, and interactions.
  • Crash reports and performance data.
  • Subscription status and purchase history (managed by Apple via RevenueCat).
  • Attribution and advertising data (via Tenjin).
  • Product analytics and user behavior data (via PostHog).

3. How We Use Your Information

  • To provide and maintain the App, including processing AI-powered redesigns.
  • To manage your account and subscription.
  • To process your uploaded photos through our AI generation pipeline.
  • To improve and optimize the App experience through analytics.
  • To measure advertising effectiveness and attribution.
  • To manage paywall and subscription offerings.
  • To communicate with you about your account, updates, and support requests.
  • To comply with legal obligations.

4. Third-Party Services

We use the following third-party services:

ServicePurposeData Shared
SupabaseAuthentication & data storageEmail, user ID, uploaded photos
FirebasePush notifications & cloud messagingDevice info, push tokens
PostHogProduct analytics & user behaviorDevice info, usage data, anonymized events
TenjinAdvertising attribution & analyticsDevice identifiers, install data, ad interaction data
RevenueCatSubscription managementUser ID, purchase data
SuperwallPaywall management & A/B testingUser ID, device info, subscription status
Runware (AI infrastructure)AI image generation (hosts Gemini, Flux, and other models via ComfyUI)Uploaded photos, generation parameters

5. Third-Party AI Processing Disclosure

Your photos are processed by third-party AI systems. When you use Spaace It's redesign features, your uploaded photos and generation parameters are transmitted to Runware, a third-party AI infrastructure provider. Runware hosts and runs AI models including Google Gemini, Flux, and other large language and image models via ComfyUI pipelines to generate your redesigned images.

By using the App's AI redesign features, you explicitly consent to your photos being sent to these third-party AI services for processing. Your photos are used solely for the purpose of generating your requested redesigns and are not used to train AI models. You may withdraw this consent at any time by discontinuing use of the AI redesign features (see Section 7.3 below).

6. Data Retention

Data TypeRetention Period
Account informationUntil account deletion
Uploaded photosUntil account deletion or 90 days after generation
Generated imagesUntil account deletion
AI generation parametersUntil account deletion
Usage analytics (PostHog)24 months
Attribution data (Tenjin)24 months
Subscription dataAs required by tax/legal obligations

7. Your Rights and Choices

7.1 Account Deletion

You can delete your account and all associated data directly within the App at any time. Upon deletion, we will remove your personal data, uploaded photos, and generated images from our systems within 30 days.

7.2 Data Access and Portability

You may request a copy of your personal data by contacting us at contact@spaace.it.

7.3 Consent Revocation

You may withdraw your consent to data processing at any time:

  • AI processing consent: Stop using the AI redesign features. Previously generated images remain available but no new photos will be sent to third-party AI services.
  • Analytics consent: Contact us at contact@spaace.it to opt out of analytics tracking.
  • Complete data removal: Delete your account in-app to remove all data and revoke all consents.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including encryption in transit (TLS/SSL) and at rest, secure authentication protocols, and regular security reviews. However, no method of transmission over the internet is 100% secure.

9. GDPR — Rights of European Union Users

If you are located in the European Union (including France) or the European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten").
  • Right to Restrict Processing: Request limitation of how we process your data.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests.
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent (see Section 7.3).

Legal Basis for Processing: We process your data based on: (a) your consent, (b) performance of a contract (providing the App services), (c) compliance with legal obligations, and (d) our legitimate interests in improving and securing our services.

To exercise any of these rights, contact us at contact@spaace.it. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority (e.g., CNIL in France).

10. CCPA — Rights of California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

  • Right to Know: You can request details about the categories and specific pieces of personal information we have collected.
  • Right to Delete: You can request deletion of your personal information.
  • Right to Opt-Out: You can opt out of the sale of your personal information.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

We do not sell your personal information. To exercise your rights, contact us at contact@spaace.it.

11. Children's Privacy

Spaace It is rated 4+ on the Apple App Store and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at contact@spaace.it.

12. Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws, including Standard Contractual Clauses where required by the GDPR.

13. We Do Not Sell Your Data

Vaunted Labs LLC does not sell, rent, or trade your personal information to third parties for their marketing purposes.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy within the App or on our website with a new "Last Updated" date. Your continued use of the App after the effective date of the revised Privacy Policy constitutes your acceptance of the changes.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Vaunted Labs LLC
254 Chapman Rd, Ste 208 #26689
Newark, Delaware 19702, United States
EIN: 32-0843694 | DUNS: 144964695
Email: contact@spaace.it