Legal

Privacy Policy

Effective 2026-08-01

Group Space is built so the private parts of your group stay private. This policy explains what we collect, what we deliberately cannot see, what we never do, and the choices you have.

This Privacy Policy covers the Group Space website and application (the “Service”), operated by Group Space, LLC, a California limited liability company (“Group Space”, “we”, “us”). It forms part of, and uses the same defined terms as, our Terms of Service. Questions: info@group-space.com or legal@group-space.com.

The short version

Your group’s content (member contact details, messages, event details, and photos and videos) is end-to-end encrypted. We store only encrypted data and do not hold the keys to read it.
We show no ads, use no third-party trackers, do not sell or rent your information, do not build advertising or marketing profiles, and do not apply facial recognition to photos.
Group Space is for parents, not kids: adults hold the accounts and coordinate on behalf of a group. The Service is not directed to children.
You can access, export, and delete your information, and you can delete a group or your account.

1. What we can and cannot see

This is the heart of the policy, so we state it plainly. Group content is encrypted on your device before it reaches our servers, and we do not hold the keys needed to read it. So in the ordinary course we cannot read your group’s messages, contact entries, event details, or photos and videos, and we cannot proactively scan or monitor them.

To make the Service work, some information is readable by us by design and is not encrypted: your name and email address, a group’s name and branding, membership (who belongs to which group), billing records, and operational data (see Section 2). We keep these readable so we can send invitations and notifications, run billing, and operate and secure the Service.

2. Information we collect

Account information

When you create an account we collect your name and email address, authentication data, and, for group owners, billing information. We do not receive the contents of your recovery key.

Group content (end-to-end encrypted)

The substance of your group, member contact details you enter, messages, event titles, places, times and RSVPs, and photos and videos, is encrypted on your device before it reaches us. We store only ciphertext. See our Security overview for how this works.

We do not remove metadata embedded in the files you upload. A photo or video may carry information such as the date, camera, and the GPS location where it was taken. That data is encrypted along with the file, so we cannot read it, but it stays in the file and is shared with your group when they view or download it. If you do not want to share it, remove it before uploading.

Payment information

Subscriptions are purchased through the Apple App Store or Google Play, which process your payment under their own terms; we do not receive or store your payment-card details. We use RevenueCat to manage subscription status and entitlements across platforms, which involves purchase and device identifiers rather than card data. We keep a record of your subscription status and entitlements.

Operational and technical data

To operate and secure the Service we necessarily handle certain data even though we cannot read group content: account email addresses, billing records, group and device identifiers, timestamps, and volume of activity, along with minimal server logs (such as IP address and error diagnostics). We do not use advertising or cross-site tracking technologies.

Communications and reports

If you email us or submit a report through the in-app tool, we keep that communication to respond and to act on it as described in Section 7.

Waitlist

If you join our waitlist, we store the email address you provide for that purpose only.

3. How we use information

To provide, maintain, and secure the Service.
To process payments and manage subscriptions.
To send service-related messages (invitations, notifications, and important notices).
To respond to support requests and act on reports.
To comply with legal obligations and enforce our Terms.

4. What we do not do

We do not sell or rent your personal information. We do not show advertising in the Service, do not use your information or group content to build advertising or marketing profiles, do not apply facial recognition to photos, and do not use your content to train machine-learning models. We share information only as described in Section 5.

We share information only as needed to run the Service:

Service providers (subprocessors) that host our servers, store files, and deliver email and push notifications, under contract and only to provide the Service. A current list is on our subprocessors page.
Apple and Google, for app-store payment processing, and RevenueCat, for subscription management.
Legal reasons, if required by valid legal process or to protect rights, safety, and the Service. Because group content is end-to-end encrypted, we cannot produce readable group content in response to such requests (see Section 11).
Business transfers, if the Service is involved in a merger, acquisition, or sale of assets, subject to this policy and on notice to you.

We do not share your information with advertisers or data brokers.

6. Children and family data

Group Space is built for groups that often involve children, but it is intended for adults who coordinate a group. That makes the following especially important.

Accounts are for adults. We do not knowingly permit children to create accounts or collect personal information directly from children.
Group owners and members are responsible for obtaining any consent required from a parent or guardian before adding a child’s name, contact details, image, or other information to a group. That content is controlled by the group’s members, and, because it is encrypted, is not readable by us.
If you are a parent or guardian and believe a child’s information or images were added to a group without your consent, contact support@group-space.com. We will act on that report as described in Section 7 and work with the group owner to have the information removed.
Schools and educational use. Where a school or district uses the Service, the school directs how student information is used and we act on its instructions. We do not use student information for advertising, do not build profiles for non-educational purposes, and do not sell student information.

7. Moderation and reports

Because group content is end-to-end encrypted, we do not proactively review or monitor it. Reports made through the in-app tool are handled by the group’s owner and administrators. If a matter is reported to us instead, our moderation does not require us to read your content: we can contact the group owner, hide or remove the reported item, and suspend or close the account or group responsible, based on the report and account-level information. Only as a last resort, and only with the group’s voluntary cooperation, may a group owner or administrator grant our team temporary access to the group to review the content in place, or describe or provide it where lawful; that access is optional, can be declined, can be removed by the group at any time, and we remove ourselves once the review is complete. This is described in full in Terms Section 8. We may act on account-level information and the substance of a report even where no one grants us access to the content itself.

8. Data retention and deletion

We keep your information while your account or group is active. You can delete a group or your account at any time; associated data is removed from active systems, and from routine backups within 60 days. Some records may be retained where required for legal, tax, or accounting reasons, or to resolve disputes and enforce our agreements. Encrypted content that we cannot read cannot be restored by us once it is deleted.

9. Security

Group content is end-to-end encrypted and stored as ciphertext; we do not hold the keys. We use administrative, technical, and organizational measures to protect the information we do handle. No method of storage or transmission is completely secure, and we cannot guarantee absolute security. See our Security overview for details.

10. Your rights and choices

You can access, correct, export, or delete your information from your account or by emailing legal@group-space.com. Depending on where you live, you may have additional rights.

You may have rights to access, rectify, erase, restrict, or object to processing, and to data portability, and to lodge a complaint with your supervisory authority. Where processing is based on consent, you can withdraw it at any time.

California (CCPA / CPRA)

You may have rights to know, access, correct, and delete personal information, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined, and we do not use sensitive personal information for purposes that require an opt-out. You will not be discriminated against for exercising your rights, and you may use an authorized agent.

11. Legal requests

We respond to valid legal process. Because we do not hold the keys to group content, what we can produce is generally limited to account and billing information and the operational data described in Section 2. Where we are permitted to do so by law, we will make reasonable efforts to notify an affected account holder before responding to a request for their information.

12. Organizational use and data-protection roles

Where a school, club, league, employer, or other organization uses the Service to manage a group, that organization generally decides what personal information goes into the group and why. For the purposes of the GDPR, the UK GDPR, and similar laws, that organization acts as the controller and we act as its processor with respect to group content and member directory information. Organizations subject to those laws that need a data processing agreement should contact us at legal@group-space.com before deploying, to arrange the data-protection terms that apply.

13. Where your data is processed

Your information is stored and processed in Western North America.

14. Cookies

We use only the cookies necessary to sign you in and keep the Service working, including a session cookie so you stay signed in across the site and the app. We do not use advertising or third-party tracking cookies. Because we do not track you across sites, we treat a browser “Do Not Track” or Global Privacy Control signal consistently with not selling or sharing your information.

15. Changes to this policy

We may update this policy. If we make material changes we will update the date above and, where appropriate, notify you by email or in the Service. Continued use after an update means you accept the revised policy.

16. Contact

Questions about this policy or your data: legal@group-space.com or info@group-space.com, 4744 Telephone Rd. Ste 3 #225, Ventura, CA 93003.