Privacy Policy

1. Introduction

OurSpace ("we", "our", "us") is operated by EdwardsApps, with Peter Edwards as the data controller, based in the United Kingdom. This Privacy Policy explains how we collect, use, and safeguard your information when you use the OurSpace application.

This policy is written to meet the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We collect the following types of information:

  • Account Information: Your name, email address, display name, and profile settings (including your preferred colour, country, supermarket preference, and home postcode if you choose to set one)
  • Calendar Data: Google Calendar events and calendar IDs you connect (read-only), plus any event you add inside the app (see Section 6)
  • Financial Information: Bank accounts, direct debits, assets, debts, contracts, and budget data you enter
  • Files You Select: A bank statement PDF selected for the optional AI Statement feature is read locally on your device and is not uploaded. Sanitised text extracted from it is sent for AI analysis. Completed import spreadsheets are uploaded to a document-extraction service — Section 7 explains both processes. You are never required to use either feature
  • Tasks & Lists: Shopping lists, tasks, and household contracts you create, including optional location information you attach to tasks or events (latitude/longitude coordinates for "near me" reminders)
  • Meal Planning: Your written meal preferences and the weekly meal plans, side dishes, and cooking instructions you generate, accept, or edit
  • Recipe Library: The recipes you save (title, description, ingredients, cooking steps, notes), whether you have marked them as favourites, and how often and when they were last put on the plan
  • Household Handbook: The practical notes you choose to write down for people minding your home — for example Wi-Fi details, key-safe or alarm codes, where the stopcock is, pet routines and emergency contacts — together with any guest links you create (who each link is for, when it expires, and how many times it has been opened)
  • Notice Board: Messages, drawings, and links you pin to the shared notice board. Notes are hidden after 24 hours and deleted when the board is next opened
  • Bin Collection Schedules: The bin names, colours, and collection rotations you set up
  • Partner Information: Your partner's email and couple code for linking accounts
  • Push Notification Subscriptions: If you enable push notifications, we store the browser/device endpoint URL provided by your browser so we (and your linked partner) can send you notifications
  • Children's Information (Kids feature): If you enable the optional Kids feature, we store the names, ages, and activity entries (e.g. school pickups, clubs) you enter about your own children. This data is entered by you as a parent — we do not collect it directly from children
  • Local Storage on Your Device: We store small preferences in your browser's local storage (e.g. theme choice, last calendar sync time, kids-feature toggle, the supermarket you are shopping at and the aisle order learned from your trips there) so the app feels fast on next visit. This data stays on your device

3. How We Use Your Information

We use the collected information to:

  • Provide and maintain the OurSpace application
  • Enable partner linking and data sharing between linked accounts
  • Sync your Google Calendar events for display in the app, and store any event you add inside OurSpace itself (see Section 6)
  • Track your household finances, tasks, contracts, and lists
  • Generate the "Catch Up" digest summarising your partner's recent activity (see Section 7)
  • Generate optional AI meal plans, side-dish suggestions, cooking instructions, and birthday gift ideas (see Section 7)
  • Show the Household Handbook entries you have marked as shareable, and your bin days, to anyone who opens a guest link you have created (see Section 4)
  • Read a bank statement PDF locally on your device, remove detected personal and bank identifiers, and analyse the sanitised text to suggest an updated balance and regular payments for your approval (see Section 7)
  • Read a completed import spreadsheet you choose to upload, so we can create the finance records or contracts it lists (see Section 7)
  • Fetch a preview (title, description, and image) of links you pin to the Notice Board — our server requests the linked page to build the preview card, so the linked website receives a standard web request from our server, and its preview image is loaded by your and your partner's browsers
  • Show bin-day reminders in the app, worked out on your device from the collection schedule you enter
  • Send push notifications to you and your linked partner about shared activity (e.g. when your partner adds a shopping item)
  • Convert addresses and postcodes you enter into approximate map coordinates ("geocoding"), via OpenStreetMap's Nominatim service, so we can show events and tasks on a map and calculate distances
  • Send you service-related communications

4. Data Sharing with Your Partner

Important: When you link your account with a partner using the couple code, all your data (calendar events, tasks, shopping lists, meal plans, saved recipes, notice-board posts, bin schedules, Household Handbook entries, financial accounts, contracts, and any Kids data) becomes fully visible to your linked partner. This is a core feature of OurSpace. Only link accounts with people you trust completely.

You can unlink your partner at any time via Settings, which immediately revokes their access to your data going forward.

Household Handbook guest links.

The Household Handbook is the one part of OurSpace you can deliberately show to someone outside your household. When you create a guest link, anyone who has that link can open the page it points to, in any browser, without signing in. The page shows only the handbook entries whose "Show on guest links" switch is on, and — if you chose to include them — your bin collection days. It never shows anything else from your account. The link contains a long random code that cannot be guessed, but it can be forwarded by whoever you send it to, so treat it like a key: create a separate link for each person, give it an end date, and keep anything sensitive (such as an alarm code) off guest links using the switch on the entry.

You can switch a link off at any time from the Handbook page, after which it stops working immediately. We record how many times each link has been opened, and when, so you can see it is being used; we do not record who opened it. No handbook data is sent to any AI provider.

5. Third-Party Service Providers (Sub-processors)

We use the following trusted third-party services to operate OurSpace. Each of these may process some of your data on our behalf:

  • Base44 — our application hosting and backend platform. All your OurSpace data is stored on Base44's servers under their security and privacy controls
  • Google — for Google Calendar integration (see Section 6)
  • OpenAI — generates the Catch Up narrative and birthday gift ideas (see Section 7). Only the specific data described in Section 7 is sent
  • Google Gemini, provided through Base44 — analyses text extracted from bank statements after detected names and bank identifiers are removed on your device. The original statement PDF is not sent. Other AI models provided through Base44 generate optional meal plans, side-dish suggestions, and cooking instructions and process import spreadsheets (see Section 7)
  • Google Analytics — counts visits to the website and which pages are opened, only if you accept analytics cookies. It receives no household data (see Section 9)
  • OpenStreetMap / Nominatim — converts addresses and postcodes you enter into map coordinates. We send the address text only, never your account identity
  • Web Push services (provided by your browser vendor, e.g. Google, Mozilla, Apple) — deliver push notifications to your device

We do not sell or share your data with any other third parties except as required by law or with your explicit consent.

6. Google Calendar Integration & Google API Services Limited Use Disclosure

When you connect Google Calendar, OurSpace requests read-only access. We can view your calendar events to display them in the app, but we cannot create, modify, or delete anything in your Google Calendar.

When you add an event using "+ Add Event", it is therefore saved inside OurSpace — where you and your linked partner can both see it — and your Google Calendar is left untouched. Your calendar data is stored securely and only shared with your linked partner as described in Section 4. We do not share your calendar data with any other third parties, and we do not send it to any AI provider or use it to train AI models.

You can disconnect Google Calendar at any time via Settings, and you can also revoke access directly from your Google Account permissions page.

Limited Use Disclosure: OurSpace's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, OurSpace affirms that data received from Google APIs (including Google Calendar data) is:

  • Used only to provide or improve user-facing features that are prominent in the OurSpace app (calendar display, event reminders, and sharing with your linked partner)
  • Not transferred to others except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with the user's explicit consent
  • Not used or transferred for serving advertisements, including retargeting, personalised, or interest-based advertising
  • Not read by humans unless we have obtained your affirmative agreement to view specific messages, for security purposes (e.g. investigating abuse), to comply with applicable law, or where the data has been aggregated and anonymised for internal operations
  • Not used to develop, improve, or train generalised or non-personalised AI and/or machine learning models

7. AI-Powered Features

OurSpace includes optional AI features. Each one sends a deliberately narrow slice of data to an AI provider, described below, and each one only runs when you choose to use it.

We never send your calendar events, your location, or your home postcode to any AI provider. The figures you enter in Finance and Budget are never sent to an AI provider either — with one exception you control: if you use the AI Statement feature, sanitised text extracted from the statement is sent to Google Gemini through Base44. The original PDF remains on your device. That feature, and the limits of automated redaction, are described below.

Catch Up.

The Catch Up digest generates a friendly narrative summary of your linked partner's recent activity, shown at the top of the Home page when you open the app. To produce this summary, we send the following data to OpenAI (a third-party AI provider):

  • Your partner's display name (or, if unset, the local part of their email)
  • A list of items your partner has added, completed, or updated in OurSpace since you last opened the app — for example: task titles, shopping item names, contract names, and budget entry labels

The data is sent solely to generate your Catch Up summary and is subject to OpenAI's Privacy Policy. We do not use it for any other purpose. If you have not linked a partner, Catch Up does not run and none of this data is sent.

Meal Planner.

When you generate meal suggestions, side dishes, or cooking instructions, we send your written meal preferences and the titles, descriptions, and ingredient lists of meals in your current plan to an AI model provided through Base44, our hosting platform. If "Mix in dinners from your library" is ticked when you generate a plan, the titles and the first few ingredients of up to twelve recipes from your Recipe Library are included too, so the model can choose among them; the recipe notes and cooking steps are not sent. Your meal preferences box is free text under your control: only enter what you are comfortable sending to an AI provider (for example, "vegetarian, no mushrooms" rather than medical details). If you never use the Meal Planner, none of this data is sent.

Birthday gift ideas.

When you tap "Suggest a gift" on a birthday, we send that person's first name as you saved it, the age they are turning if known, and the gift details you have noted for them to OpenAI to write a gift suggestion.

AI Statement (bank statement analysis).

This feature is entirely optional and only runs when you choose a file and tap "Analyse statement". If you never use it, none of the following applies to you.

When you use it, PDF.js reads the statement inside your browser. The original PDF is not uploaded or stored by OurSpace. Before anything is sent, automatic redaction removes detected names, sort codes, account numbers, IBANs and card numbers. Only the remaining statement text is sent through Base44 to Google Gemini 3 Flash, which returns a suggested closing balance and payments that appear to be regular.

Automatic redaction reduces disclosure but cannot guarantee that every unusually formatted identifier will be detected. Transaction dates, merchant names, references, amounts and balances remain in the sanitised text because they are needed for analysis. The text sent to Gemini is subject to Base44's and Google's applicable processing and retention terms; OurSpace does not use it or the result to train its own model.

The result is used only to show suggestions for your review. No account balance is changed and no payment is created until you select the relevant suggestion and press "Apply". AI extraction can be inaccurate, so you should check each value against the original statement.

Spreadsheet import.

When you use the "Import" button in Finance or Contracts, the completed workbook you upload is sent to Base44's document-extraction service to be turned into rows of data. It is processed only to create the records you have listed in it.

The original statement PDF remains on your device; its sanitised text is disclosed to Base44 and Google only to produce the requested analysis. Import spreadsheets are disclosed to Base44's extraction service and are not made available to your linked partner. We do not use submitted content to train an OurSpace model, but we cannot independently promise that every sub-processor applies zero retention or zero training unless confirmed in its applicable terms. You can delete your account to request removal of associated data as described in Section 11.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including encryption in transit (HTTPS) and access controls on our backend platform. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Cookies and Analytics

OurSpace sets no analytics or advertising cookies unless you accept them. When you first visit the website we ask, and nothing is loaded and no request is made to Google until you choose “Accept”. Choosing “Reject” is recorded on your device and we do not ask again.

If you accept, we use Google Analytics 4 to understand how many people visit and which pages get used. It sets first-party cookies (_ga and _ga_…) that last up to two years, and sends Google:

  • The page address you are on — the path only. Query strings are deliberately stripped before sending, because a notification tap can carry the notification’s wording in the URL
  • The page title, the referring site, and basic device and browser information
  • Your IP address, which Google uses to derive an approximate location. Google states that Google Analytics 4 does not log or store IP addresses; that is Google’s undertaking rather than something we can independently verify

What Analytics never receives: anything you keep in OurSpace. Your name, email address, tasks, calendar events, lists, meal plans, notice-board posts, children’s details, financial accounts, contracts and bank statement data are never sent to Google Analytics. It is not used for advertising, remarketing or profiling — advertising storage is switched off permanently in our configuration, and we do not sell or share analytics data.

Storage we use without asking. Signing in, keeping you signed in, remembering your theme and remembering this cookie choice all rely on storage on your device that is strictly necessary to provide the app you asked for. Under UK PECR these do not require consent, and they are never used to track you across other websites.

The App Store and Google Play builds do not run this web tag. The native wrapper those builds are made with (provided by Base44) reports its own basic app-usage events, such as an app screen being opened, to Google. It carries no household content, and it is not something we can switch on or off from inside OurSpace.

You can change your mind at any time, here or by clearing cookies in your browser:

10. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data we hold
  • Correct inaccurate or incomplete data
  • Delete your account and all associated data (via Settings → Delete Account)
  • Restrict or object to certain types of processing
  • Data portability — request a copy of your data in a structured format
  • Unlink your partner account at any time
  • Disconnect Google Calendar integration
  • Accept or reject analytics cookies, and change that choice at any time (see Section 9)
  • Disable push notifications via Settings or your device's notification controls

To exercise any of these rights, contact us using the details in Section 14. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data correctly.

11. Data Retention

We retain your data for as long as your account is active. If you delete your account, all your data (including any Kids information and links to your partner) will be permanently removed from our systems. Backups may take up to 30 days to fully purge.

12. Children's Privacy

OurSpace is intended for adult users (16 years and older in the UK). We do not knowingly collect personal information directly from children.

If you choose to enable the optional Kids feature, you may enter limited information about your own children (such as names, ages, and activity schedules) so you and your partner can co-ordinate childcare and logistics. This data is provided by you as the parent or guardian, stored securely under your account, and shared only with your linked partner. You can remove any children's data at any time via the Kids section.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to the app or to legal requirements. We will notify you of material changes by posting the updated Privacy Policy in the app and updating the "Last updated" date below.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights under UK GDPR, please contact:

Peter Edwards (Data Controller)
EdwardsApps
Email: peter@edwardsapps.co.uk

Last updated: 1 September 2026