Privacy Policy

1 Overview

AR is an iOS SaaS platform that allows you to scan real-world objects with your iPhone camera to create 3D/AR models and use them in your business.

This Privacy Policy explains what personal data is collected when you use the app, how it is processed, and what rights you have. By using the app, you agree to this policy.

2 Data We Collect

Sign in with Apple Authentication

We use Sign in with Apple for authentication. During this process, the following data is processed:

• Sign in with Apple account identifier and the internal AR Support ID assigned to your account
• Email address (only if provided by Apple and not hidden by the user)
• Display name (if previously set)

Your raw Apple ID and Apple account password are never stored by AR. The AR Support ID is a Supabase user UUID used to identify your account for support, subscription sync, and account deletion.

Usage Data

• Scan count (for monthly or lifetime quota tracking)
• Selected business sector (e-commerce, retail, portfolio, etc.)
• Subscription plan and status
• Last seen timestamp (for session management)

3D Model Data (Plan 3 only)

• USDZ 3D model files created from your scans
• Model name, category, and creation date
• Call-out (label) content you add to models
• Cloud storage path for each model

Plan 1 and Plan 2 users' models are stored only on-device; they are never uploaded to the servers.

Automatically Collected Data

• Device model and iOS version (for camera/AR compatibility checks)
• App version number
• Crash reports (for debugging only; contain no personal identifiers)

3 How We Use Data

Collected data is used solely for the following purposes:

• Creating and verifying your account
• Managing your subscription plan and tracking scan quotas
• Providing cloud backup, QR, and AR embed services (Plan 3)
• Notifying you about subscription cancellation or payment issues
• Fixing app errors and maintaining security
• Complying with Apple App Store requirements

4 Data Storage

AR uses the following services for its infrastructure:

• Supabase (PostgreSQL): User account and subscription data. Servers are hosted in EU data centers.
• Cloudflare R2 (Plan 3 only): Cloud storage for 3D model files, distributed via global CDN.
• Apple StoreKit 2: Subscription and payment processing. Payment details never reach AR servers — processed solely by Apple.

Your data is retained as long as your account remains active. Upon cancellation, our data deletion policy applies as described below.

5 Third-Party Services

AR uses the following third-party services:

• Apple (Sign in with Apple, StoreKit): Identity and payments. Apple's privacy policy: apple.com/legal/privacy
• Supabase: Database and authentication infrastructure. supabase.com/privacy
• Cloudflare: Content delivery network and cloud storage. cloudflare.com/privacypolicy

These services are subject to their own privacy policies. AR is not responsible for the data practices of these third-party providers.

6 Subscription & Payment

All payment transactions are processed through the Apple App Store (StoreKit 2). Credit card numbers, bank account details, or any financial information are never processed or stored on AR servers.

Subscription management (cancellation, plan changes) is done through iPhone Settings → Apple ID → Subscriptions.

7 Your 3D Model Data

The 3D models you create belong to you.

• Plan 1 / Plan 2: Models are stored only on your device. They are not uploaded to the servers. Deleting the app will delete your models.
• Plan 3: Models are uploaded to Cloudflare R2 and made accessible via QR codes and AR embed links. Upon subscription cancellation, the Data Deletion policy applies.

8 Data Deletion Policy

After subscription cancellation (Plan 3):

• Immediately: Your account enters the grace period.
• Day 7: QR links and AR embed codes are deactivated. In-app models are locked.
• Day 30: All model files in Cloudflare R2 and related metadata are permanently deleted.

Account deletion:

You can initiate permanent account deletion directly in the app from Settings → Delete Account Permanently. After confirmation, AR deletes your Supabase authentication account, profile data, model metadata, and Cloudflare R2 model files. If you have an active App Store subscription, billing must be managed separately in Apple subscription settings.

9 Children's Privacy

AR is not directed to children under 13 years of age (or the minimum age required under applicable law). The app does not knowingly collect personal data from children. If AR becomes aware that such data has been collected, AR will delete it immediately.

App Store age rating: 4+ (no restricted content)

10 Your Rights

Depending on your jurisdiction, you may have the following rights:

• Right of access: Learn what personal data we hold about you
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of all your data
• Right to data portability: Receive your data in a structured format
• Right to object: Object to certain data processing activities

To exercise your rights, please contact us at the address below.

11 Contact

For privacy-related questions or requests:

This policy may be updated from time to time. Material changes will be announced via in-app notification. You can always access the current policy on this page.