PRIVACY POLICY

1. Introduction and Scope

This Privacy Policy ("Policy") governs the collection, processing, storage, and disclosure of personal information by the operators of Convert in AR ("Company," "we," "our," or "us") in connection with your use of the Convert in AR mobile application and any related services (collectively, the "Service").

This Policy applies to all users of the Service regardless of the method of access or geographic location. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by the terms of this Policy. If you do not agree with this Policy, you must immediately discontinue use of the Service.

This Policy is incorporated by reference into our Terms of Service and should be read in conjunction therewith.

2. Categories of Personal Information Collected

We collect personal information in the following categories, as necessary to provide the Service:

2.1 Identity and Authentication Data

When you register for or access the Service through a third-party authentication provider, we receive and process certain identity information, which may include:

• Your registered electronic mail address
• Your display name or profile name as associated with your authentication account
• A unique persistent identifier assigned to your account within the Service
• Authentication credentials and session tokens necessary to maintain your authenticated session

We do not receive or store your authentication provider password at any time.

2.2 User-Generated Content and Digital Assets

In the course of using the Service's core functionality, you may create, upload, or generate digital content, including but not limited to:

• Three-dimensional models generated through device scanning functionality
• Three-dimensional models derived from image processing features
• Three-dimensional model files and associated assets uploaded by you
• Unique identification codes generated for the purpose of sharing your content

Such content is stored on our secure infrastructure and associated with your account for the purpose of providing the Service. You retain ownership of all content you create or upload.

2.3 Device Permissions and Sensor Data

The Service requests access to certain device capabilities and hardware sensors solely as required to deliver its core functionality:

• Camera: Required exclusively for scanning physical objects and capturing imagery for processing
• Photo Library: Required exclusively for accessing user-selected files for upload or processing

Access to these device capabilities is used solely for the stated purposes and is not used for monitoring, surveillance, or any secondary purpose. You may revoke these permissions at any time through your device settings, which may limit certain Service functionality.

2.4 Technical and Operational Data

We may automatically collect certain non-personally identifiable technical data to maintain, improve, and secure the Service, including:

• Aggregated, anonymized usage and interaction data
• Crash reports and diagnostic information
• Device type, operating system version, and application version

Such data is not linked to your identity and is used solely for operational and improvement purposes.

3. Legal Basis and Purposes of Processing

We process your personal information on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms of Service, including account management, content storage, and Service delivery.
• Legitimate Interests: Processing necessary for our legitimate operational interests, including fraud prevention, security, service improvement, and abuse detection, where such interests are not overridden by your rights.
• Legal Obligation: Processing required to comply with applicable laws, regulations, or lawful governmental orders.
• Consent: Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

We do not process your personal information for advertising, marketing profiling, or sale to third parties under any circumstances.

4. Disclosure of Personal Information

4.1 Third-Party Service Providers

We engage reputable third-party service providers to support the operation of the Service. Such providers are contractually bound to process your information solely on our instructions, in accordance with this Policy, and in compliance with applicable data protection laws. Categories of providers include:

• Authentication providers (including Apple Inc. and Google LLC), whose own privacy policies govern their data practices
• Secure cloud infrastructure and storage providers operating in compliance with recognized international security standards
• Analytics and diagnostics providers processing only anonymized, aggregated data

4.2 Legal and Safety Disclosures

We may disclose your personal information to governmental authorities, regulators, or law enforcement agencies where required by applicable law, court order, or legal process, or where we reasonably believe such disclosure is necessary to protect the rights, property, or safety of the Company, our users, or the public.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will provide notice of any such transfer and any material changes to this Policy.

4.4 No Sale of Personal Information

We do not sell, rent, trade, or otherwise transfer your personal information to third parties for commercial or marketing purposes. We do not permit third-party advertising networks to collect information about you through the Service.

5. Data Security and Integrity

We implement and maintain administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, destruction, or loss. These measures are designed to reflect the sensitivity of the information we process and the current state of technology.

All data transmissions between your device and our systems are protected using industry-standard transport layer encryption. Access to personal information within our organization is restricted to personnel who require it to perform their job functions and are bound by confidentiality obligations.

While we take commercially reasonable steps to protect your information, no method of electronic transmission or storage is completely secure. In the event of a security breach affecting your personal information, we will notify you as required by applicable law.

6. Data Retention

We retain your personal information for as long as your account remains active or as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

Upon account deletion, we will delete or anonymize your personal information within a commercially reasonable period, except where retention is required by law or necessary to protect our legal rights. Certain anonymized or aggregated data may be retained indefinitely for operational or analytical purposes.

7. User Content Sharing and Public Accessibility

The Service enables you to generate shareable identification codes linked to your three-dimensional content. You acknowledge and agree that any content associated with a shared code may be accessible by any person who obtains that code, and that such content may be rendered on third-party devices and platforms not operated by us.

You are solely responsible for determining what content you choose to share and with whom. We strongly recommend that you do not share content containing sensitive, private, or personally identifiable information. You may revoke shared access at any time by deleting the associated content from within the Service.

8. Your Privacy Rights

Subject to applicable law, you may have the following rights with respect to your personal information:

• Right of Access: The right to request a copy of the personal information we hold about you.
• Right of Rectification: The right to request correction of inaccurate or incomplete personal information.
• Right of Erasure: The right to request deletion of your personal information, subject to certain legal exceptions.
• Right to Restrict Processing: The right to request that we limit the processing of your personal information in certain circumstances.
• Right to Data Portability: The right to receive your personal information in a structured, commonly used, machine-readable format.
• Right to Object: The right to object to processing of your personal information based on our legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, the right to withdraw consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact us using the information provided in Section 11. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.

9. Account Deletion

You may permanently delete your account and all associated personal information at any time by navigating to Settings > Account > Delete Account within the Application.

Upon initiating account deletion, all personal information associated with your account, including user-generated content and stored assets, will be permanently and irreversibly removed from our systems within a commercially reasonable period. Deletion cannot be undone and we will not be able to restore your account or content following deletion.

Alternatively, you may submit a deletion request by contacting us at the address provided in Section 11.

10. Children's Privacy

The Service is not directed to, and we do not knowingly collect personal information from, individuals under the age of thirteen (13), or the applicable age of digital consent in your jurisdiction. If you are a parent or guardian and believe that a minor has provided us with personal information without your consent, please contact us immediately using the information in Section 11.

Upon receiving such notification, we will take prompt steps to delete the relevant personal information from our records. We reserve the right to restrict access to the Service to individuals who cannot demonstrate they meet the applicable minimum age requirements.

11. International Data Transfers

Your personal information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction. Where we transfer personal information internationally, we implement appropriate safeguards in accordance with applicable law to ensure your information receives adequate protection.

12. Amendments to This Policy

We reserve the right to modify this Policy at any time to reflect changes in our practices, legal requirements, or the Service. Material changes will be communicated to you through the Service or by other appropriate means prior to the changes taking effect. The "Last Updated" date at the top of this document reflects the most recent revision.

Your continued use of the Service following notification of material changes constitutes your acceptance of the amended Policy. If you do not agree to the amended Policy, you must discontinue use of the Service.

13. Contact and Data Controller Information

If you have questions, concerns, or requests regarding this Policy or our data practices, or wish to exercise your privacy rights, please contact us at:

We are committed to working with you to resolve any concerns regarding our handling of your personal information.