Legal · SpaceBox Lite

Privacy Policy

Last updated · 8 Jul 2026 Version 1.0 Read the Terms →

1. Who we are (Controller)

This policy explains how i46, a company incorporated in the Czech Republic, Company ID (IČO) 17614911, registered office Drtinova 557/10, Smíchov, 150 00 Praha, CZ (“i46”, “we”, “us”), handles information in connection with the SpaceBox Lite application (the “Service”).

Contact for privacy matters: legal@i46.cz

2. Our privacy-by-design approach

SpaceBox Lite is built so that we hold as little personal data as possible:

  • End-to-end encryption. Files (“drops”) are encrypted on your device before upload. We store only ciphertext and cannot read, decrypt, or recover the contents of your files. Encryption uses post-quantum key encapsulation (ML-KEM-768) with AES-256-GCM.
  • No-PII senders. A person sending a file (a “Sender”) does not create an account and provides no personal data. Senders are identified only by a pseudonymous identifier derived from a cryptographic key (not from any personal information).
  • Keys stay on your device. Private keys are generated and stored on your device; we never receive them.

3. Information we process

3.1 Host account data. To receive drops, a Host registers an account. This includes your public key, and account/quota state.

3.2 Encrypted content. The encrypted files you receive or send, stored as ciphertext, plus non-content metadata such as file name, size, and timestamp.

3.3 Device-local data (not collected by us). Optional display names, sender nicknames, the selected theme, and your send/download history are stored only on your device and are never transmitted to us or to anyone else.

3.4 Technical/usage data. We do not log or store IP addresses, device identifiers, or crash reports. The SpaceBox service uses no third-party analytics. This website (i46.space) uses Google Analytics, loaded only after you consent via the cookie banner, to measure page usage; it sets no cookies until you accept. IP addresses are processed transiently, in memory only, to rate-limit pairing requests as an abuse-prevention measure, and are never persisted or linked to any account. We store account details (user ID, display name, public key), file metadata (names, sizes, timestamps, sharing state), download and pairing records, and billing/quota records, on our own servers.

3.5 Free-voucher email. If you claim a free storage voucher at beta.i46.space, we collect your email address solely to prevent abuse of the free tier. Paid access keys are handled by our payment processor; keys obtained via a distributor are subject to that distributor's policy.

4. Why we process it (purposes)

  • To provide and operate the Service (deliver and store encrypted drops, manage accounts/quota).
  • To secure the Service, prevent fraud and abuse, and enforce our Terms.
  • To comply with legal obligations and respond to lawful requests.

5. How we share information

We do not sell personal data. We share limited data, and never personal data (as we do not collect any) only with:

  • Authorities, where required by law or to protect rights and safety.

6. Data location and international transfers

SpaceBox Lite operates across distinct system tiers with different data-location characteristics. The tier intended for EU residents/citizens requires off-territory (space-based) or Panama-based infrastructure and is not yet available; accordingly, the Service is not currently offered to EU/EEA users (see the Terms). Data for the currently available systems is processed in the Czech Republic, on infrastructure we operate ourselves: no cloud providers or third-party processors.

7. Retention

Drops are append-only and cannot be deleted through the service by users. Account data is also never deleted. Device-local data persists until you clear it or reset the app.

There is currently no self-service account deletion; contact us to request removal of your account.

8. Security

We use end-to-end encryption, post-quantum cryptography, and role-based access. No system is perfectly secure; because of the end-to-end design, if you lose your private key or device, we cannot recover your data. Keep backups of important keys and files.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict the processing of your personal data, and to obtain a copy of it. To make a request, contact legal@i46.cz

10. Children

The Service is not directed to children under 18, and we do not knowingly collect their personal data.

11. Changes to this policy

We may update this policy from time to time. Material changes will be notified in-app and the “Last updated” date above will change.

12. Contact

i46 · Company ID (IČO) 17614911
Drtinova 557/10, Smíchov, 150 00 Praha, CZ
legal@i46.cz