Privacy Policy

Effective: July 31, 2026

Inspan is a workspace for notes, tasks, places, and, as these features become available, contacts, conversations, and teams. This policy explains what data Inspan processes and the choices available to you.

1. Who is responsible for your data

Inbook Co., Ltd., 25/76 Moo 6 Bophut Koh Samui, Suratthani, Thailand, operates inspan.io and is responsible for the personal data described in this policy (“Inspan”, “we”, “us”). Privacy questions and requests can be sent to inspan.apps@gmail.com.

2. Data we collect

Account and profile data

When you create or use an account, we process an account identifier, email address, username, authentication provider, and, when supplied by you or your sign-in provider, your name and profile image. Authentication is provided through Firebase Authentication and may include email/password, Google, or Apple sign-in.

Your content

We store information you create in Inspan, such as notes, tasks, saved places and coordinates, folders, and other workspace content. When contacts, conversations, and teams are available, this may also include contact connections, messages, team names, memberships, roles, permissions, invitations, and content or activity in shared spaces.

Location

If you select “Use current location”, Inspan asks the operating system for location permission and uses your location to position the map or select a place. We do not request location in the background. Coordinates are stored with your content only when you choose to save a place or map point.

Technical, security, and diagnostic data

Our servers and service providers may process IP addresses, connection and request metadata, timestamps, app and operating-system versions, device type, and security logs. Firebase Crashlytics may receive crash traces, diagnostic identifiers, device characteristics, app version, and related technical data so that we can identify and fix failures.

Local device and browser data

Inspan stores authentication state, interface preferences, server-routing information, and navigation state on your device or in browser storage. Native apps may also keep a local cache of workspace data for faster loading. Browser or operating-system controls can clear this data, although doing so may sign you out or reset preferences.

Support communications

If you contact us, we process your message, contact details, and any diagnostic information you choose to provide.

3. How we use data

• to create and authenticate accounts and route them to the correct Inspan server;
• to store, synchronize, search, and display your content;
• to enable contacts, invitations, conversations, teams, and permissions when those features are available;
• to provide optional location features at your request;
• to keep the Service secure, prevent abuse, and investigate failures;
• to provide support and communicate important service or policy changes;
• to comply with law and enforce our Terms of Service.

4. Legal bases

Where data-protection law requires a legal basis, we process data as necessary to provide the Service under our contract with you; for our legitimate interests in security, reliability, support, and improvement; with your consent for permissions or optional processing where consent is required; and to comply with legal obligations. You may withdraw consent through the relevant device, browser, or in-app setting, without affecting earlier processing.

5. Analytics, diagnostics, and advertising

We currently use crash diagnostics to maintain reliability. We do not currently use third-party advertising networks or sell personal data. If we introduce product analytics, we will update this policy and the relevant App Store and Google Play disclosures before or when collection begins, and we will request consent or offer controls where required. We will not use workspace content for targeted advertising.

6. When data is shared

• With people you choose. Content and profile information are visible to contacts, conversation participants, or team members according to the sharing and permission choices you make.
• With service providers. We use infrastructure and technology providers to operate the Service, including Google Firebase for authentication and crash diagnostics. They process data for us under their applicable terms and safeguards.
• Map services. Map tiles are loaded from OpenStreetMap services, which receive technical request data such as your IP address. Opening a place in Google Maps is optional and takes you to Google’s service.
• For legal and safety reasons. We may preserve or disclose data when reasonably necessary to comply with law, protect users, investigate fraud or abuse, or defend legal rights.
• Business changes. Data may be transferred as part of a merger, acquisition, financing, reorganization, or sale of assets, subject to this policy and applicable law.

We do not sell your personal data or share it for cross-context behavioral advertising.

7. International processing

Inspan and its providers may process data in countries other than yours. Firebase Authentication is operated from the United States, while other Firebase services may use global infrastructure. Where required, we rely on appropriate contractual or legal safeguards for international transfers.

8. Retention and account deletion

We keep account data and private workspace content while your account is active and as needed to provide the Service. Operational logs and support records are kept only as long as reasonably necessary for security, troubleshooting, legal obligations, or dispute resolution. Google states that Crashlytics generally retains crash traces and associated identifiers for 90 days before beginning deletion.

You can delete your account from Settings → Delete account. Instructions are also available on our account deletion page. Deletion removes your account and private database from active Inspan systems. Firebase authentication data is also deleted.

When collaboration features are available, content solely owned by you will be deleted. Contributions that form part of a shared team record may instead be deleted or de-identified so that other members do not lose content they control. Content created by other people remains theirs. Limited records may be retained where required by law, to resolve disputes, or to protect the Service.

To prevent a deleted identity or username from being reassigned and accidentally associated with old records, we retain a minimal deletion record containing the account identifier and previous username. This record is not used to recreate the account or for marketing. Backup copies, where maintained, are isolated from normal use and expire according to the applicable backup cycle.

9. Security

We use reasonable administrative, technical, and organizational safeguards, including encrypted network connections and access controls. Firebase states that Firebase Authentication and Crashlytics encrypt data in transit and at rest. No service can guarantee absolute security, so please use a strong password and protect access to your devices and sign-in providers.

10. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or obtain a copy of personal data; object to certain processing; withdraw consent; and complain to a data-protection authority. You may update some profile data in the Service and control location permission in your device or browser settings.

To exercise a right, contact inspan.apps@gmail.com. We may need to verify that you control the relevant account. We will not discriminate against you for exercising a privacy right.

11. Children

Inspan is not directed to children under 13, or a higher minimum age where local law requires it, and we do not knowingly collect their personal data. If you believe a child has used Inspan contrary to this section, contact us so we can investigate and take appropriate action.

12. Changes to this policy

We may update this policy as Inspan develops or legal requirements change. We will post the updated version and effective date here and provide additional notice when a change materially affects your rights or how we use personal data.

13. Contact

Inbook Co., Ltd.
25/76 Moo 6 Bophut Koh Samui, Suratthani, Thailand
Privacy questions, requests, and complaints: inspan.apps@gmail.com.