Privacy Policy

CAP ("we," "our," or "us") operates the SpaceFixer mobile application (the "App"). This page informs you of our policies regarding the collection, use, and disclosure of information when you use our App.

Who is responsible for your data. For the data described in this policy, CAP is the data controller (under the EU/UK GDPR) and the "business" (under the CCPA/CPRA) responsible for deciding why and how it is processed in connection with the App, except for data collected and controlled directly by Apple (StoreKit) under Apple's privacy policy, where Apple acts as an independent controller/business for that processing. You can reach us using the contact details at the end of this policy.

Summary

SpaceFixer helps you reclaim storage and organize private content on your iPhone: find duplicate and similar photos, clean screenshots and screen recordings, compress photos and videos, convert Live Photos to stills, check for potentially sensitive media, clean similar contacts, search your library by person, measure device/network health, and optionally store selected media, PDFs and contacts in an encrypted Private Vault. Photo, video and contact analysis happens on your device — we do not upload, transmit, or store your photos, videos, contacts, or analysis results on a SpaceFixer server, and we do not have access to your media library or address book. The App shows no advertising.

Information We Collect

Photos and videos

The App requests access to your Photos library so you can review duplicate, similar, screenshot, screen-recording and potentially sensitive media; compress media; convert Live Photos; move items you choose into the Private Vault; and apply only the cleanup actions you confirm. This processing happens on-device; we never see or receive your media.

Contacts

The App requests access to your Contacts to find similar entries, offer encrypted local backups before merges or edits you start in the App, and — if you choose — import selected contacts into the Private Vault. Processing happens on-device; we never see or receive your contacts. Merges and source removals are written only after you confirm them and may propagate through accounts you sync with your device.

Face ID / device authentication

If you protect the Private Vault with Face ID, Touch ID or your device passcode, iOS prompts for that authentication locally. Biometric templates never leave your device and are never available to SpaceFixer. You may instead choose a Vault-only code. A recovery code you set during setup is stored only as part of an on-device recovery envelope so you can regain access after switching devices; it is never transmitted to us.

Private Vault (optional, premium)

If you use the Private Vault, SpaceFixer encrypts the photos, videos, Live Photos, PDF documents and private contacts you select into an app-only container on your device (AES-256-GCM with a key kept in the device Keychain). Vault content is never uploaded or shared with us. Importing from Photos verifies the encrypted copy before iOS asks to move originals to Recently Deleted; declining that system prompt keeps the Photos original (copy saved, original kept). PDF imports from Files are encrypted copies — Files originals are not deleted. Deleting an item inside the Vault is permanent for that encrypted copy. Uninstalling the App without an export removes Vault contents from the device.

Sensitive-content check

An optional on-device check can flag media that may be sensitive so you can review it privately. On supported systems it may use Apple's Sensitive Content Analysis framework and/or a bundled on-device Core ML model. Results stay on the device as review suggestions — never as a statement of identity, legality or certainty — and nothing is hidden, moved, deleted or vaulted unless you confirm it.

Person search

Optional person search compares face crops on-device (including, on supported systems, a bundled identity-embedding model). It is a nearest-neighbour review aid, not Apple's private Photos People identity. Reference photos and match scores are not uploaded.

Device & network health (optional)

If you run a speed test, the App downloads fixed-size files from spacefixer.org/speedtest/ and may upload discard traffic to Cloudflare's public speed-test endpoint. Only aggregate Mbps/ping-style results are kept on your device. No photos, contacts or personal content are included in those transfers.

Purchases and subscriptions

Subscription and lifetime purchases are processed entirely by Apple through StoreKit/the App Store. We do not receive or store your payment details.

No SpaceFixer account

SpaceFixer does not require a SpaceFixer account. We do not collect your name or contact information through the App itself (support email you send us is handled as ordinary correspondence).

How We Use Information

On-device data is used only to operate the features you use (cleanup, compression, sensitive-content review, person search, contacts tools, Vault, storage diagnostics/widget, device health) and to process purchases through Apple. We do not sell your data, show ads, or use your media or contacts to train models on our servers — we operate no media backend.

Children's Privacy

SpaceFixer is not directed at children under 13, and we do not knowingly collect personal information from children.

Data Retention and Deletion

Your media and contacts remain under your control. Items moved to Photos Recently Deleted usually remain recoverable for about 30 days per Apple's behavior. Compression and Live Photo conversion save a new asset first; originals move to Recently Deleted only after you approve Photos' deletion prompt. Vault deletion of an encrypted item is permanent. Local contact backups and Vault data disappear if you uninstall the App or lose device keys without a recovery path you control.

Legal Basis for Processing (EEA/UK Users)

Where the GDPR or UK GDPR applies, our legal bases are contract (to provide the App) and legitimate interests (basic security), balanced against your rights and freedoms.

Your Rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of the limited personal data described here, and to object to or restrict processing. EEA/UK residents may lodge a complaint with their supervisory authority (EEA: edpb.europa.eu; UK: ico.org.uk). California and other U.S. state residents may have rights under applicable state privacy laws. Contact us at the email below to exercise rights.

Third-Party Services

• Apple StoreKit (subscriptions/payments) — apple.com/legal/privacy
• Apple Sensitive Content Analysis (when available and enabled on your device)
• Cloudflare public speed-test upload sink (optional device-health test only; discard traffic) — cloudflare.com/privacypolicy

Your Choices

Revoke Photos, Contacts or Face ID access anytime in iOS Settings → Privacy & Security. You can ignore or decline any cleanup, Vault import or Photos deletion prompt.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

Contact Us

Email: [email protected]
Developer: CAP