Privacy Policy
Last updated: February 12, 2026
1. Introduction
VoiceBeam GmbH ("we", "us", "our") operates the ImSpace mobile application and the website imspaceapp.com (collectively, the "Service"). This Privacy Policy explains what personal data we collect, how we use it, the legal bases for processing, and your rights regarding that data.
We are committed to protecting your privacy. ImSpace is designed to collect only the minimum amount of data necessary to provide the Service.
Controller: VoiceBeam GmbH is the data controller within the meaning of the EU General Data Protection Regulation (GDPR).
2. Data We Collect
When you use ImSpace, we collect and store the following data:
- Account information — provided through Sign in with Apple (unique identifier and optional relay email address)
- Photos you upload — images you choose to transform within the app (temporarily processed; see section 5)
- Generated images — the stylized images created through the Service (stored based on your cloud storage preference; see section 6)
- Purchase history — records of subscriptions and credit pack purchases
- Credit balance — your current credit count
We do not collect your real name, phone number, location data, device identifiers for advertising, contacts, or browsing history.
3. Lawful Bases for Processing (GDPR)
We process your personal data on the following legal bases:
- Contract performance (Art. 6(1)(b) GDPR) — Processing your photos, managing your account, maintaining your credit balance, and delivering generated images are necessary to perform the contract between you and us (the Service).
- Legal obligation (Art. 6(1)(c) GDPR) — Retaining purchase records and invoicing data as required by German tax and commercial law.
- Legitimate interest (Art. 6(1)(f) GDPR) — Ensuring the security and stability of the Service, preventing abuse, and improving performance. Our legitimate interest is balanced against your rights and does not override them.
- Consent (Art. 6(1)(a) GDPR) — If we enable optional analytics on the website, we will obtain your consent before collecting any data. You may withdraw consent at any time.
4. How We Use Your Data
Your data is used exclusively to provide and improve the ImSpace service:
- To process and transform your uploaded photos into stylized images
- To manage your credit balance and subscription status
- To enable you to view and download your generated images
- To provide customer support when requested
- To maintain the security and stability of the Service
We do not use your data for advertising, profiling, or any purpose other than providing the core features of the app.
5. How We Process Photos
When you create an image, we temporarily upload your photo to our servers to generate your result. We process images using cloud infrastructure hosted in Sweden (Azure Sweden Central). Depending on the style and settings you select, your photo may be routed to different image-generation models hosted on this infrastructure.
Your original photo is deleted from our processing servers shortly after generation (typically within a few hours). We do not retain your original photos beyond the time necessary for processing.
6. Cloud Storage Toggle
Cloud storage of generated images is optional. You can control this in the app settings:
- Cloud storage enabled (default): Your generated images are stored securely in your cloud account so you can access them across sessions.
- Cloud storage disabled: We do not keep a cloud copy of your generated images. You can still save results locally on your device.
Regardless of your cloud storage preference, the following data always remains stored in the cloud: your account identifier, purchase history, and credit balance. Temporary uploads for processing also occur regardless of this setting.
7. Where Your Data Is Processed
Your data is processed and stored in the following regions:
- Image processing (inference): Microsoft Azure, Sweden Central (EU)
- User records, purchase history, and cloud image storage: Google Cloud / Firebase, which may be located in the EU or North America depending on traffic and infrastructure routing
- Website hosting: Vercel (servers may be located outside the EU; see section 12)
All data is transmitted over encrypted connections using HTTPS/TLS. We follow industry-standard security practices to protect your data from unauthorized access.
8. Third-Party Processors
ImSpace uses the following third-party services as data processors or subprocessors:
- Microsoft Azure — Cloud compute and inference for image generation (Sweden Central). Role: processor.
- Google Cloud / Firebase — Authentication (Firebase Auth), database (Firestore), cloud storage (Firebase Storage), and serverless functions (Cloud Functions). Data may be stored in the EU or North America. Role: processor.
- Sign in with Apple — Account authentication. Role: independent controller.
- Apple App Store — Subscription and in-app purchase management. Role: independent controller.
- Vercel — Hosting the imspaceapp.com website. Role: processor.
VoiceBeam GmbH is the data controller. All vendors listed above that act as processors are bound by data processing agreements.
We do not share your personal data with any other third parties. We do not sell your data. We do not use advertising networks or tracking services within the app.
9. Data Retention
We retain your data for the following periods:
| Data type | Retention period |
|---|---|
| Uploaded photo (original) | Deleted after processing (typically within a few hours) |
| Generated images (cloud) | Until you delete them, or until you delete your account |
| Account identifier | Until you delete your account |
| Purchase records | 10 years after the transaction (German tax law requirement) |
| Credit balance | Until you delete your account |
10. Data We Do NOT Collect
For clarity, ImSpace does not collect or store:
- Location data or GPS coordinates
- Device identifiers for advertising (IDFA)
- Contacts from your address book
- Browsing history or app usage analytics within the app
- Financial or payment information (handled entirely by Apple)
11. Website Analytics
The ImSpace website (imspaceapp.com) may use Vercel Web Analytics to measure aggregate page views and visitor counts. This analytics service does not use cookies and does not collect personal data. No analytics or tracking is performed within the ImSpace app itself.
12. International Data Transfers
Image processing takes place within the European Union (Azure Sweden Central). Account data and cloud-stored images are hosted on Google Cloud, which may be located in the EU or North America depending on infrastructure routing.
Where data is transferred outside the EU/EEA (including via Google Cloud or website hosting through Vercel), we ensure adequate protection through:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions where applicable
You may request details about the specific safeguards in place by contacting us at info@voicebeam.de.
13. Cookies
The ImSpace website does not use cookies for functionality. If website analytics are enabled, they operate without cookies. The ImSpace app does not use cookies.
14. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access (Art. 15) — You can request information about the personal data we hold about you. You can also view your stored data within the app.
- Right to rectification (Art. 16) — You can request correction of inaccurate data.
- Right to erasure (Art. 17) — You can delete your entire account at any time from within the app. Upon deletion, all your data is permanently removed from our servers (except data we are legally required to retain).
- Right to restriction of processing (Art. 18) — You can request that we restrict the processing of your data under certain circumstances.
- Right to data portability (Art. 20) — You can download your generated images at any time from within the app.
- Right to object (Art. 21) — You can object to processing based on legitimate interests.
- Right to withdraw consent (Art. 7(3)) — Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at info@voicebeam.de.
Right to lodge a complaint: If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.
15. Children's Privacy
ImSpace is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, please contact us and we will promptly delete it.
16. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically. If we make material changes, we will make reasonable efforts to notify you (for example, through the app or by email). Continued use of the Service after changes constitutes acceptance of the updated policy.
17. Contact Us
If you have questions about this Privacy Policy, your data, or wish to exercise your rights, please contact us at:
VoiceBeam GmbH
Email: info@voicebeam.de