Privacy Policy
Creating Space
Effective 20 August 2026. Last updated 14 September 2026.
Creating Space is made by Lightbulb Moment Labs, Inc., a Texas corporation ("we", "us"). This policy explains what the Creating Space app does with your information, what happens when you buy a subscription, and what happens if you write to us through the support form on this website.
Questions: the form at creatingspace.app/support
The short version
The app does not collect anything that identifies you unless you allow it to. Version 1.2.0 asks once whether we may measure whether the advertisements we buy are working, and if you say no, nothing about the app changes.
Creating Space runs on your iPhone. It has no account system, no sign in, and it never shows you an advertisement. Your sessions, your schedules, your streak, your sky, and the words you type stay on your device.
Four things leave, and only one of them can identify you. If you buy or restore a subscription, the transaction and what the App Store says about it go to RevenueCat, which handles purchases for us. The only identifier attached is an anonymous one RevenueCat generates for that install. Your name, your email address, and everything else the app knows about you are never part of it.
We buy advertisements, and version 1.2.0 measures whether they work. We do not show you any. We buy them on Instagram and Facebook, and until now we could not tell an advertisement that brought someone in from one that took our money and did nothing. The first time you open the app after setup is finished, iOS asks whether Creating Space may track you. Meta is told that the app was installed and that it was opened either way, under an anonymous identifier of Meta's own. What the prompt decides is whether Apple's advertising identifier goes with it. Allow it and it does. Decline it, or ignore it, and no advertising identifier is collected, and the app works exactly the same. You can change your answer at any time in iOS Settings, under Privacy and Security, then Tracking. The section "Advertising, and measuring whether ours works" below is the detail.
We measure how far people get through setup, and we collect crash logs. Thirteen screens stand between opening the app and the end of setup, and until now we could not tell a screen that works from a screen where people give up. The app reports a short, fixed list of anonymous events about which of those screens were reached, and it reports a crash log when it crashes. Neither carries anything you typed, and neither is tied to you. The section "Anonymous analytics, and crash reports" below lists every event by name.
And if you write to us, we keep what you wrote. The support form on this website stores your name, your email address and your message, so that we can answer you. That is a web page, not the app. The app has no connection to it and never sends anything to it. The section "When you contact us" below says exactly what is kept, where, and for how long.
If you are signed into iCloud, your progress is backed up to your own private iCloud storage, the same way Notes or Photos work. That is between you and Apple. We cannot see it, and we have no way to reach it.
The rest of this document is the detail behind those paragraphs.
What Creating Space stores on your iPhone
All of this stays on your device unless the iCloud section below says otherwise.
- Your focus sessions. When each one started, how long it was meant to be, how long it actually ran, and whether it finished, ended early, or used your daily pause.
- Your progress. Your streak, the constellations you have filled, the stars you have lit, and your Moon cycles.
- Your protected hours. The schedules you create, including the days, the times, and the words you write in "Creating space to ___". Also a record of the hours your phone actually enforced, which is what the Moon is built from.
- Your app selections. See the Screen Time section immediately below, because this one works differently from everything else.
- Your preferences. Default session length, your two notification switches, your zodiac sign if you chose one, and the shortcut words you save.
Screen Time, and why we cannot see which apps you block
Creating Space uses Apple's Family Controls, Managed Settings, and Device Activity frameworks to block apps during a focus session or a protected window.
When you pick apps to block, iOS does not tell us which apps you picked. It hands the app a set of opaque tokens. A token is not an app name or an identifier with a wrapper on it: there is no way for us to read a name, an icon, or anything else out of it. The app knows only how many apps, categories, and websites you selected. Everywhere a count appears in Creating Space instead of a list of names, that is why.
These tokens:
- never leave your device
- are not included in iCloud sync
- are never transmitted to us or to anyone else
Your Screen Time totals work the same way. When the app shows you how long you have been on your phone, iOS hands those figures to a sandboxed report extension and composites the result into the app's window. Our own code never sees a figure. We cannot read one, store one, or send one anywhere.
Apple requires that information received through Family Controls be used only to provide the blocking you asked for. We go further than that requirement in practice, because we never receive anything identifiable in the first place. This data is never used for advertising or advertising measurement, and is never shared with a data broker.
iCloud sync
If you are signed into iCloud and have iCloud Drive enabled for Creating Space, your progress, your session history, and your Moon cycles sync to your private CloudKit database. This is Apple's infrastructure, tied to your Apple Account.
We have no access to it. A private CloudKit database is readable only by the account that owns it. We cannot query it, export it, or recover it for you.
Not synced, and deliberately so: your Screen Time app selections, your schedules, and your protected hours ledger. These stay on the device that created them.
If you are not signed into iCloud, Creating Space works exactly the same, entirely locally. It does not nag you about it and does not treat it as an error.
Sync uses Apple's own silent notification system to tell your devices that something changed. That is Apple infrastructure between Apple and your device. We do not operate a push server and never send you a message through one.
Purchases, and the companies besides Apple involved in them
Creating Space sells subscriptions.
We use RevenueCat to manage them. It is used for purchases and for nothing else, and no other part of Creating Space touches it. The app carries two other third party frameworks, PostHog and Meta's, and both are described in the sections below. RevenueCat and PostHog exchange nothing about you. RevenueCat and Meta do exchange something, and it is the paragraph titled "What RevenueCat passes on" below.
What RevenueCat receives. When you buy, restore, or renew, it receives the purchase transaction and what the App Store reports about it: which product, when, whether it is still active, and whether it is in a trial. We can see those purchase records in RevenueCat's dashboard.
What it does not receive. The identifier attached is an anonymous one RevenueCat generates for that install. The app never calls their logIn method, because there is no account to log in to. Your name, your email address, your sessions, your schedules, your streak, your sky, and the words you type are never sent to RevenueCat, or to us, or to anyone else.
What RevenueCat passes on. When a trial starts, when a trial converts, and when a purchase or a renewal happens, RevenueCat tells Meta, so that a subscription can be matched to the advertisement that led to it. That travels from RevenueCat's servers to Meta's. Your phone does not send it and is not involved in it. Why we do this at all is the section "Advertising, and measuring whether ours works" below.
What we declare to Apple. Our App Store privacy labels list four things, and two of them changed in version 1.2.0 because of that advertising measurement.
| Data type | Linked to you | Used to track you |
|---|---|---|
| Device ID | Yes | Yes |
| Purchases | Yes | Yes |
| Product Interaction | No | No |
| Crash Data | No | No |
Device ID means Apple's advertising identifier, and it is collected only if you allow the prompt. Purchases moved with it, because a purchase that can be matched to an advertisement counts as tracking in Apple's sense of the word, even though the record RevenueCat holds still carries no name and no email address. Product Interaction is the setup measurement and Crash Data is the crash logs, and neither is linked to you or used to track you. Those declarations and this policy say the same thing, deliberately.
RevenueCat processes this for us under their own privacy terms. Apple handles the payment itself, and neither we nor RevenueCat ever see your payment details.
Anonymous analytics, and crash reports
We could not see any of the thirteen setup screens, which meant we could not tell a screen that works from a screen where people give up. So the app reports a small, fixed list of events to PostHog, an analytics service run by PostHog, Inc. Our data is held in PostHog's United States cloud.
This is the entire list. The app has no way to send anything else.
| Event | What it means |
|---|---|
onboarding_step_reached | Which setup screen was reached, by its internal name |
onboarding_finished | Setup was completed |
screen_time_answered | Apple's Screen Time dialog was allowed or declined |
starter_schedule_created | A first schedule was made during setup |
starter_schedule_skipped | That step was skipped instead |
paywall_shown | The subscription offer was displayed |
purchase_started | A purchase was begun, and which plan |
purchase_completed | A purchase finished, and which plan |
purchase_cancelled | Apple's payment sheet was dismissed |
purchase_restored | A previous purchase was restored |
Every event carries technical context about the device it came from: the app version, the device model, the iOS version, the screen size, the language, the time zone, and whether the phone was on wifi or cellular.
What these events cannot carry. In the code an event is a fixed list of choices rather than free text, so there is no way for your first name, what you want to create space for, the words on a schedule, your Lock Screen words, or your app selections to be attached to one. That is a property of how the app is built, not a promise about how carefully we use it.
No one is identified. PostHog is given a random identifier that the app generates on your device. It is not your Apple Account, not the advertising identifier described in the next section, and not your device's identifier for vendors. We never tell PostHog who you are, because we do not know. Delete and reinstall the app and the old identifier is gone.
We do not record your screen. PostHog offers session replay, which records what a user sees and does. It is switched off in Creating Space and always has been. So are PostHog's automatic screen tracking, its surveys, and its handling of push notifications.
Crash reports. When the app crashes it sends the crash log to the same PostHog account so we can find the fault. A crash log is a technical snapshot of the program at the moment it failed: which line of code was running, the other work in progress, and the software loaded at the time. It contains nothing you typed.
There is no switch to turn this off. We would rather say so plainly than imply a control that does not exist. Deleting the app ends all reporting from your phone.
Advertising, and measuring whether ours works
Creating Space shows you no advertisements. There is no advertisement anywhere in the app, there never has been, and nothing in this section changes that. What changed in version 1.2.0 is that we now measure whether the advertisements we buy are worth buying.
Creating Space is a small independent app, and we pay for its advertisements out of what it earns. Until version 1.2.0 we could not tell an advertisement that brought someone in from one that took our money and did nothing, which meant we were guessing with the app's own revenue. This is how we stop guessing.
The prompt, and what it decides. The first time you open the app after setup is finished, iOS shows Apple's App Tracking Transparency prompt and asks whether Creating Space may track you across apps and websites owned by other companies. It never appears during setup, and never on first launch. Your answer decides everything in this section:
- If you allow it, the app collects your advertising identifier, which is the identifier iOS keeps for exactly this purpose, and sends it to Meta alongside the events below.
- If you decline it, or ignore it, no advertising identifier is collected and none is sent. The install and open events below still go to Meta, under Meta's own anonymous identifier and with nothing of Apple's attached to them. Every part of the app works identically. Nothing is withheld and nothing is degraded.
You can change your answer whenever you like, in iOS Settings, under Privacy and Security, then Tracking. Turning it off there stops the collection from that point forward.
What Meta receives. Creating Space uses Meta's Facebook SDK for iOS. It receives that the app was installed and that it was opened, an anonymous identifier it generates on your device, and your advertising identifier if you allowed the prompt. Separately, from RevenueCat's servers rather than from your phone, it receives that a trial started, that a trial converted, or that a purchase or a renewal happened. Together those are enough to say that an advertisement led to a subscription, which is the only question we are asking.
What Meta does not receive. Nothing you typed, and nothing about what you do inside the app. Not your first name, not what you are creating space for, not the words on a schedule or on your Lock Screen, not your app selections, not your sessions, not your streak, and not your sky. Your Screen Time selections and totals are never used for advertising or advertising measurement, as the Screen Time section above says.
What we do not do with any of it. We do not sell it and we do not rent it to data brokers. We do not buy information about you from anyone. We do not show you advertisements inside Creating Space, and we have no plan to.
Meta handles what it receives under its own privacy terms. What Meta does with it beyond answering our question is governed by those terms and not by this policy.
What Creating Space does not do
These are statements about the app's code as it exists today, not aspirations. The support form on this website is covered separately, below.
- No analytics about what you do inside the app. We measure how far people get through setup and we collect crash logs, both described above and both anonymous. Nothing measures your use of the app after that: we do not know how many sessions you ran, which screens you opened, or how long you spent anywhere.
- No tracking unless you allow it. The app asks once, through Apple's own prompt, and takes no for an answer. Decline it and no advertising identifier is collected, nothing Apple gave us goes to Meta, and nothing we hold is used to track you across apps or websites. Allow it and the advertising identifier goes to Meta for one purpose, which is measuring whether the advertisements we buy are working. That is the whole of it, and it is described above.
- No advertisements inside the app, and no data sold or rented to data brokers. Ever. We buy advertisements elsewhere and we measure them, which is a different thing and is described above.
- No account. No email address, no password, no name, no phone number. The app never asks for any of it, and nothing you do in the app is ever tied to a message you send us through the website.
- Three third party SDKs, and this is all of them. RevenueCat for purchases, PostHog for the anonymous setup analytics and crash reports, and Meta's Facebook SDK for iOS for the advertising measurement. All three are described above. Every other framework in the app is Apple's own.
- No servers behind the app. The app's network activity is Apple's iCloud sync between your device and your Apple Account, the purchase traffic that goes to Apple and RevenueCat when you buy or restore a subscription, the anonymous events and crash logs that go to PostHog, and the install and open events that go to Meta. That is the whole list. The one database we do run holds messages from the support form on this website, it is described below, and the app never touches it.
If any of that changes, this policy will be updated before the change ships, and the "Last updated" date at the top will tell you.
When you contact us
Everything above is about the app. This section is about creatingspace.app/support, which is a web page, not part of the app.
If you send us a message through that form, we store what you put in it:
- Your name, whatever you choose to type there.
- Your email address, so we can reply. That is the only thing we use it for.
- What the message is about, meaning which of the three options you picked.
- Your message.
- Your iPhone model and iOS version, if you fill that field in. It is optional and the form says so.
We store nothing you did not type. The page sets no cookies, runs no analytics, and loads nothing from anywhere else. The only request it makes is the one that sends your message. We do not record your IP address, we do not record which pages you looked at, and there is no tracking pixel anywhere on this site.
Where it is stored. In a Postgres database hosted by Supabase, on servers in the United States. Supabase holds it for us and does not use it for anything of their own. Like any host, they keep their own infrastructure logs. Nobody else has access.
What we use it for. Answering you, and understanding what people are having trouble with so we can improve the app. Nothing else. We do not send marketing email, we have no mailing list to add you to, and we will never sell, rent, or share what you send with anyone.
What it is not connected to. Nothing here is linked to anything in the app, to your iCloud, or to your purchase record at RevenueCat. There is no identifier in common, because the app has none to share.
How long we keep it. Until the request is resolved, and no more than twelve months after that.
Getting it removed. Ask through the form at creatingspace.app/support and say so in the message. We will delete it and the address you sent it from, and we will confirm when it is done. You do not need to give a reason.
Other things the app touches
- Motion. The sky moves when you tilt your phone. That uses CoreMotion, it is read and used to draw the current frame, and it is never recorded or transmitted. You can turn it off in Settings and drag the sky with a finger instead.
- Notifications. If you allow them, Creating Space schedules a daily nudge locally on your device. Nothing about it involves a server, and the content is the same for everyone.
- Purchases. Creating Space sells subscriptions and a one time lifetime purchase. Payment is handled entirely by Apple and billed to your Apple Account. We never see your card number, your billing address, or anything else about how you paid. What RevenueCat receives is described in the purchases section above.
Children
Creating Space is not directed to children under 13, and you must be at least 13 to use it. Where your local law sets a higher minimum age for consenting to digital services, that age applies instead.
We do not knowingly collect personal information from children under 13. We collect nothing that identifies anyone of any age, so there is nothing for us to hold, but if you believe a child has provided information to us in some way, tell us through the form at creatingspace.app/support and we will look into it.
Your rights, and the honest limits of them
Depending on where you live, you may have rights to access, correct, export, or delete personal information a company holds about you. Laws that grant these rights include the GDPR in the UK and EU, and the CCPA and CPRA in California.
Unless you have written to us, we hold nothing that identifies you. The app creates no account, and nothing in it carries your name or your email address, so for anyone who has not used the support form there is nothing for us to hand over, correct, or delete. That is not a refusal. It is the consequence of an app with no accounts.
The one record that does exist is your purchase history at RevenueCat, held against an anonymous install identifier rather than against you. Because it is anonymous, we cannot look it up from your name or your email address. If you want it deleted, send the transaction identifier from your App Store receipt through the form at creatingspace.app/support and we will delete the record it matches. Deleting it does not cancel your subscription, which is managed in your Apple Account settings.
The anonymous events and crash logs at PostHog have no identifier that could be matched to you, not even a transaction number, so unlike the purchase record we genuinely cannot find yours in order to delete it. That is a consequence of collecting them anonymously rather than a refusal.
Meta holds the install and open events from the app and the subscription events from RevenueCat, under its own anonymous identifier, and if you allowed the tracking prompt it holds your advertising identifier alongside them. Ask through the form at creatingspace.app/support, include the transaction identifier from your App Store receipt if you have one, and we will send the deletion request to Meta and to RevenueCat together. You can also stop it yourself at any time by turning tracking off in iOS Settings, under Privacy and Security, then Tracking. That ends the collection from that moment, though by itself it does not delete what was sent before.
If you have written to us through the support form, we hold that message and the address you sent it from, and your rights apply to it in full. Unlike the purchase record, this one has your name on it and we can find it. Use the form at creatingspace.app/support to see it, correct it, or have it deleted, and give us the address you originally wrote from so we can match it.
To remove your data, which lives on your device and in your own iCloud:
- Delete the app from your iPhone. That removes everything stored locally.
- Remove the iCloud copy in iOS Settings, under your name, then iCloud, then Manage Account Storage, then Creating Space.
We cannot do either of these for you, because we cannot reach your device or your iCloud account.
If you are in the EEA or UK and want to complain about how we handle data, you may contact your local supervisory authority.
How long we keep things
Data on your device is kept until you delete the app or reset it from within the app. Data in your private iCloud is kept until you remove it, under Apple's terms. We keep no copy of either one.
Purchase records at RevenueCat are kept for as long as the app sells subscriptions, because they are what tells the app whether yours is still active. Ask us and we will delete yours, as described above.
Anonymous events and crash logs are held in our PostHog account under PostHog's retention settings.
What Meta holds for advertising measurement is kept under Meta's own retention rules, which we do not set. Ask us and we will send them a deletion request, as described above.
Messages sent through the support form are kept until the request is resolved, and no more than twelve months after that.
Changes to this policy
If this policy changes, the new version will be posted at creatingspace.app/privacy with a new "Last updated" date. Material changes will also be surfaced in the app.
Contact
Lightbulb Moment Labs, Inc. Whitefish, MT, United States creatingspace.app/support