SpaceState / Background

App privacy

This policy covers the SpaceState apps for iPhone and Mac, their widgets and the SpacePush server at push.grafixmafia.net. For this website, see the website privacy page.

In short: the apps have no account, no tracking, no ads and no third-party analytics SDKs. They only connect over encrypted HTTPS.

Controller

Markus Müller, email: maps@grafixmafia.net

Space status

The apps ask the SpacePush server for the status of the spaces you selected. The server learns which space is requested and keeps that space up to date for a few minutes. It uses your IP address only during the connection and to limit requests per minute; it is not stored. The web server in front of it writes no access logs.

If SpacePush cannot be reached, the apps ask the SpaceAPI directory and the spaces’ endpoints directly. Those servers then see your IP address, and their own privacy policies apply.

Notifications

If you turn on notifications, SpacePush receives:

• the device token Apple issues for notifications to your device,
• the spaces and rooms you want notifications for,
• the token’s environment (development or App Store) and the platform (iOS or macOS).

SpacePush stores this to send you notifications through the Apple Push Notification service (APNs). A notification contains only the space’s name and its status. The token is not linked to any name or account.

The apps renew the registration on every launch. If you turn notifications off, the apps delete the registration right away. A registration not renewed for 60 days, for example because the app was deleted, is removed automatically; tokens Apple reports as invalid are removed at once.

Usage statistics

So we can see how many devices use the apps, the apps send their app version and operating system version and mark the first request of each day, week and month. SpacePush only adds these marks up. There is no identifier that would recognise a device, and no IP addresses. The daily counters are kept for about 14 months. Widgets send no marks.

On your device

The apps store your selection, your settings and the statistics periods last reported on your device. This data does not leave the device and is deleted when you delete the app.

Hosting

SpacePush runs at Uberspace in Germany.

Legal bases and your rights

Processing for status and notifications provides the features you use in the app (Art. 6(1)(b) GDPR). The usage statistics rely on our legitimate interest in running and planning the service (Art. 6(1)(f) GDPR); they contain no data that can be attributed to you.

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a data protection authority. As we store no data that can be attributed to a person, we can usually only give information about a device token if you tell us the token. You can delete your registration yourself at any time by turning off notifications in the app.

The apps and the server are open source; what they send and store is in the source code of SpaceState and SpacePush.