Skip to main content

The Space App — Privacy Policy (Updated)

Krachi’s Space Technologies Inc.
Address: 7300 Warden Ave
Effective Date: October 11, 2025

Update Summary:
This update adds explicit cookie/consent handling, marketing opt-ins, incident response timelines, and cross-border safeguards.
This policy aligns with GDPR, PIPEDA, and CCPA standards.

1. Cookies, Analytics & Consent​

  • Consent Manager:
    We present a cookie banner that allows users to opt in to analytics and marketing cookies.

    • Strictly necessary cookies are always active.

  • Granularity:
    Users can manage their cookie and tracking preferences anytime via:
    Settings → Privacy.

  • Do Not Track / Global Privacy Control:
    We honor supported privacy signals where technically feasible.

2. Marketing Communications​

  • Opt-in Required:

    • Email, SMS, and push notifications for marketing purposes require explicit user consent.
    • Each message includes an unsubscribe link or an in-app toggle to opt out.

  • Consent Records:
    We maintain logs of:

    • Consent status,
    • Changes to preferences,
    • Timestamps of withdrawals or updates — for audit and compliance.

  • Transactional Messages:

    • System messages related to orders, account security, or customer service are not considered marketing and may still be sent even if marketing consent is withdrawn.

3. Security & Incident Response​

  • Security Controls:

    • TLS 1.3 encryption for data in transit,
    • Encryption at rest,
    • Role-Based Access Control (RBAC),
    • Two-Factor Authentication (2FA) for privileged accounts,
    • Continuous vulnerability management.

  • Breach Notification:

    • Under GDPR, we notify supervisory authorities within 72 hours where required.
    • If a breach poses high risk to users, affected users will be notified without undue delay.

  • Data Minimization:

    • We collect only data required for:
      • Account setup and management,
      • Order fulfillment and delivery,
      • Fraud prevention,
      • Customer support.

4. International Transfers & Legal Bases​

  • Data Hosting:

    • Our primary hosting providers are located in Canada and the United States (AWS infrastructure).

  • Cross-Border Safeguards:

    • Data transfers are protected using:
      • Standard Contractual Clauses (SCCs),
      • Data Processing Agreements (DPAs),
      • Or other equivalent safeguards as per applicable laws.

  • Legal Bases for Processing:

    • Contractual necessity – e.g. order fulfillment,
    • Legitimate interests – e.g. fraud detection, security,
    • Consent – e.g. for marketing and cookies,
    • Legal obligations – e.g. tax and accounting compliance.

5. Your Rights​

Under GDPR, PIPEDA, and CCPA (where applicable), you have the right to:

  • Access your personal data,
  • Rectify inaccuracies,
  • Request erasure ("Right to be Forgotten"),
  • Restrict processing under certain conditions,
  • Data portability (export your data),
  • Object to processing, including direct marketing.

To exercise your rights:

If you continue to use The Space App after the Effective Date, you agree to the terms outlined in this updated Privacy Policy.