Privacy

Privacy policy

Last updated: 29 April 2026

This is plain-English privacy. The principle is simple: we collect the minimum required to run the service, we don't sell or rent your data, and we don't load any third-party tracking scripts.

Data controller

Finding Space is operated by Darren Skudder, who is the data controller for GDPR purposes. You can reach us at hello@findingspace.app.

What we collect

  • Email and password (hashed) — used to sign you in and recover your account. Stored in Supabase Auth, hashed with bcrypt by Supabase before it ever touches our database.
  • Profile metadata — your role (user, beta tester, admin) and subscription status. Used to gate premium features.
  • Favourites and bet logs — only if you choose to star a team or log a bet. Stored against your account so you can see the same data on every device.
  • Device and platform info — basic data needed to deliver push notifications (device token) and to debug crashes. No advertising identifiers.
  • Referral data — your referral code and referral relationship (who referred whom). Used to track referral program rewards.
  • Server logs — IP address, user agent, request path. Standard infrastructure logging, retained for 30 days for abuse prevention and debugging.

Lawful basis

  • Contract performance — account data, subscription status, favourites, and bet logs are needed to deliver the service you signed up for.
  • Legitimate interest — server logs for abuse prevention and debugging.
  • Consent — push notifications. You explicitly opt in; you can revoke at any time in your device settings.

What we don't collect

  • No location tracking. The app never asks for your location.
  • No contact list, calendar, or photo library access.
  • No third-party analytics SDKs (no Google Analytics, no Mixpanel, no Segment, no Facebook Pixel).
  • No advertising identifiers, no fingerprinting, no cross-site tracking.
  • No microphone, no camera, no health data.

Where your data lives

All user data is stored in Supabase, a hosted Postgres provider. The database lives in the EU region. Authentication is handled by Supabase Auth.

The app itself is hosted on Vercel (for the web build) and distributed via Apple App Store and Google Play (for native).

International transfers

Supabase hosting is in the EU. Vercel's edge network may process requests in multiple regions to serve you faster. Apple and Google process subscription data under their own privacy policies.

Data retention

  • Account data — retained while your account is active. Deleted when you delete your account.
  • Server logs — 30 days.
  • Bet tracking data — retained while your account is active.
  • Referral data — retained for 12 months after payout for tax and accounting purposes.

Third-party services

  • Supabase — database and authentication, EU region.
  • Apple App Store / Google Play — subscription processing.
  • Vercel — web hosting.

No analytics SDKs. No advertising networks.

Subscriptions

Premium subscriptions are processed by Apple (iOS) or Google (Android) via in-app purchase. We never see or store your card details. We receive a subscription receipt that lets us flag your account as premium — that's it.

Your rights

  • Access and export — you can see and export your account data from the in-app /account screen.
  • Deletion — you can delete your account and all associated data from /account at any time. This is permanent and irreversible.
  • Correction — update your profile from /account.
  • Withdraw consent — uninstall the app and delete your account.

Children

Finding Space is 18+ only. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, email us at hello@findingspace.app and we'll delete it.

Cookies and local storage

The web version uses a single first-party cookie to maintain your sign-in session. We also use localStorage for your auth session token and theme preference. No tracking cookies, no third-party cookies, no consent banner needed.

Changes to this policy

If we materially change how we handle data, we'll update this page and notify users in the app. The "last updated" date at the top always reflects the current version.

Contact

Privacy questions, requests, or complaints: hello@findingspace.app