Privacy Policy
We keep only the data Our Space needs to work. Your partner sees only what you choose to share. No ads, no analytics tracking, no selling data.
1. Who is responsible for your data
Qingdong Yang is the controller of your personal data (the data controller under the UK GDPR, and the data user under Hong Kong’s Personal Data (Privacy) Ordinance). Contact hello@our-space.date with any privacy question.
2. What we collect
| Category | What | Where it comes from |
|---|---|---|
| Account | Email, a hashed password, the terms version you agreed to, sign-in sessions | When you sign up and sign in |
| Profile | Name, gender (optional, never shown to your partner), home city, time zone, language, your guess at your partner’s city, the distance between you | You enter it |
| Pairing | Who you’re paired with, since when, the nickname you give them | You and your partner |
| Daily life and plans | Tasks and completions, schedule (private or shared) | You create it |
| Diary and moments | Text, photos, mood, likes, comments | You and your partner create it |
| Chat | Text, photos, view-once messages, couple tasks, read status, mute settings | You and your partner create it |
| Meals | Photos, foods and portions, nutrition totals, notes, cost, daily goals, frequent foods | You log it |
| Us | Special days, meeting places and dates, flight and train legs, checklists, letter and capsule text, send and arrival times | You and your partner create it |
| Signals and push | When signals were sent; the push address and keys your browser creates for a device with notifications on | When you use those features |
| Technical | Request-rate records needed to prevent abuse, error logs | Generated automatically |
We do not collect precise location (GPS), contacts or advertising identifiers, and we use no third-party analytics or ad tracking. Your city is one you pick from a list.
3. How we use it
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Running your account, pairing and features, and showing what you share to your partner | Performing our contract with you |
| Sending account emails such as confirmations and password resets | Contract |
| Sending push notifications for signals and arriving letters | Your consent (turn it off any time) |
| Storing your optional gender | Your consent |
| Weather for your city, time differences and letter routes | Contract |
| Security, abuse prevention, backups and recovery | Legitimate interests |
| Meeting legal obligations | Legal obligation |
We never use your data for advertising or profiling, never sell it and never use it to train AI models. No AI service processes your content at present.
4. What your partner can see
| Item | Visible to your partner? |
|---|---|
| Your name | Yes (they may also use their own nickname for you) |
| Your city, local time and weather | Only while “Show my city to them” is on |
| Your time zone | Yes, so your schedule and tasks follow your own day |
| Gender, email, password | No |
| The nickname you give them | No |
| Schedule | Only blocks marked as shared |
| Today’s tasks | As set for each list |
| Meals | Only meals you share, without cost or notes |
| Diary, moments, chat and everything in Us | Shared by both of you |
| Scheduled letters | Not until they arrive |
| Airmail | They see it’s on the way and can read it once it lands |
| Capsules | They know one exists and who wrote it; neither of you can read it before it opens |
| View once | They can open it once; then the text and photo are deleted from the server |
5. Who receives data
We don’t sell personal data. Only these providers handle the minimum needed to run the service:
| Provider | When | What they receive |
|---|---|---|
| Oracle Cloud Infrastructure (the United Kingdom) | Always | All data lives on this server; the host does not read it |
| Resend (email delivery, US) | When an account email is sent | Your email address, name and the email’s content |
| Apple, Google, Mozilla and Microsoft push services | When a notification is sent, after you turn notifications on | The encrypted notification, which only your device can read |
| Open-Meteo (weather) | When weather is shown | City coordinates, never account details |
| Open Food Facts (packaged food) | When you look up a barcode | The barcode number |
The city list and nutrition database are built into the service, so searching them sends nothing to third parties. If the law requires it, we may disclose data to authorities to the extent necessary, and tell you where the law allows.
6. Where data is stored and transfers
Data is stored on a server in the United Kingdom. You and your partner may live in different places such as the UK and Hong Kong; when your partner views shared content it is sent to where they are. Some providers (such as Resend) are in the United States; for transfers outside the UK we rely on safeguards such as UK adequacy regulations or standard contractual clauses.
7. How we protect it
- HTTPS everywhere; passwords stored only as hashes; sign-in attempts are rate-limited;
- every read checks that you belong to the current pairing, and photos are only sent after a permission check;
- daily backups, with restores tested regularly;
- the operator accesses data only when needed to maintain the service.
No system is perfectly secure. If a breach could affect your rights, we will notify you and the regulator as the law requires.
8. How long we keep it
| Data | Kept for |
|---|---|
| Your account and your own content | While your account exists; deleted at once when you delete your account, with backup copies overwritten within 35 days |
| Backups | One a day, rolling, for up to 35 days |
| View-once messages | Text and photo deleted as soon as they are opened |
| “Clear chat on my side” | Hidden only for you; your partner’s side is unaffected |
| Shared content after unpairing | Unreadable by either of you; deleted when either of you deletes their account |
| Push addresses | Deleted when you turn notifications off or the push service reports them expired |
| Signals | Kept with your account; only signals from the last 12 hours show as a nudge |
9. Your rights
You can exercise these rights at any time. For anything we need to handle, email hello@our-space.date and we will reply within one month:
- Access: get a copy of the data we hold about you;
- Correction: most details can be changed directly in Settings;
- Erasure: delete your account and content yourself in Settings → Delete account;
- Restriction or objection to processing;
- Portability: receive the data you provided in a common format;
- Withdrawing consent: for example turning notifications off, clearing your gender or hiding your city; this doesn’t affect processing before then;
- Complaints: in the UK to the Information Commissioner’s Office (ICO); in Hong Kong to the Office of the Privacy Commissioner for Personal Data (PCPD).
Content you share with your partner (such as chat or diary comments) also contains their personal data, so we take both people’s rights into account when handling such requests.
10. Cookies and local storage
- Sign-in cookie: keeps you signed in; essential for the service;
- Language cookie: remembers the language chosen on this device;
- Browser storage: small preferences such as a pinned day or where you were in the diary;
- Offline cache: the app’s own files, never your private content.
We use no analytics, advertising or cross-site tracking cookies, so there’s no cookie banner.
11. Children
The service is only for adults aged 18 or over. If we learn that a child has created an account, we will delete it.
12. Changes to this policy
We may update this policy. Significant changes will be announced in the app with the date they take effect; if a change involves processing that needs your consent, we will ask again.
13. Contact
Qingdong Yang · hello@our-space.date
Data sources
- Nutrition data: USDA FoodData Central (public domain); Taiwan FDA Food Nutrient Database (Open Government Data License v1).
- Packaged food data: Open Food Facts, under the Open Database License.
- Weather data: Open-Meteo (CC BY 4.0).
- Places from GeoNames (CC BY 4.0).