PRIVACY POLICY

1- Age requirements

2- Why Do we Collect data ?

When you request server processing of a scan, we use the photos and related scan data to create and deliver your 3D model, manage the request, protect the service and carry out the technical checks and reprocessing described in section 4. Scan content is not used for advertising or direct marketing.

3- Data that may be collected

App usage

Technical Data

Messages

Advertising attribution

If you accept the relevant privacy setting, installation and transaction information and Apple's advertising attribution data may also be sent to our advertising measurement service to measure the performance of our Apple Ads campaigns.

Scans processed by our server

If your scan is processed by our server, the photos and the scan data needed to create your 3D model are sent to us after you confirm the transfer in the app. These include the selected photos, image dimensions and camera calibration, and the relative positions and orientations of the camera. Our server generates the resulting 3D model and its textures. This paragraph applies only when you choose to send a scan for server processing.

To authenticate your installation, control access to its processing requests, manage usage limits and diagnose technical problems, we also process technical installation and request identifiers, authentication proofs, the device family, the app version, IP addresses used for security checks, processing status and counters. These technical records may be linked to the same installation; they should not be understood as fully anonymous data.

If you enable notifications about processing completion, a notification device token and the information needed to deliver that notification are also processed. The notification does not contain your scan photos or your 3D model.

4- Privacy of your scans

Private server processing

Before a new scan is sent for server processing, the app explains the transfer and asks you to confirm it using “Send and process”. You can select “Later” or return to your plans without sending the new scan. Your approval covers that scan and the transfers, resumptions and retries needed to process the same scan; it does not automatically authorise sending future scans.

Server processing does not publish your scan and does not create a public web-viewer link. Access is restricted to your authenticated installation and to authorised personnel and service providers where necessary to operate, secure and support the service. Photos are transferred over an encrypted HTTPS connection.

Retention of server processing data

• Your photos and scan data are stored on our server to create your 3D model. After successful processing, the source photos remain stored for technical verification and possible reprocessing, with an expiry date 7 days after processing ends.
• An incomplete upload expires after 24 hours without transfer activity.
• Each completed or failed processing request expires 7 days after it finishes. Its remaining photos, scan data, results and processing logs are then scheduled for deletion. Downloading a result does not extend this period.
• A separate technical reprocessing request has its own expiry date, 7 days after that processing ends. Photos used for that request may therefore remain after the original request expires.
• Separate technical processing and installation records remain after scan files are deleted and are not currently subject to automatic expiry. These records do not contain the scan photos or models. You can request their deletion using the contact details below.
• A limited history of processing times and workload statistics is kept to estimate completion times. It does not contain scan photos, models or installation identifiers.

Expired processing requests are no longer accessible through the app. Files are removed by periodic automatic cleanup, so physical deletion may occur after the expiry time.

These time limits apply to server processing, not to copies stored on your device or scans that you separately publish in the web viewer. Leaving an upload screen pauses transfers from your device; closing the app or returning to the list does not cancel processing already submitted to the server or delete data already transferred. To request deletion of server-held scan data or withdraw permission for further processing, contact dpo@tasmanic.com. We may need information that allows us to identify the relevant request.

Optional web sharing

5- Our Partners

Service providers and tools

- Matomo
We use Matomo software on our own analytics server for the usage measurement described in section 3.

- Amazon Web Services (AWS)
We use AWS infrastructure to host the servers that process scans and temporarily store the related photos, scan data and results on our behalf. Learn more about AWS data privacy.

6- Opt-out

The collection of personal data in the app depends on your consent through a 'pop-up' shown at the first launch of the app.
You can give or withdraw your consent at anytime in the app itself : in the menu on the main page, open the 'privacy settings'.
You can select 'On' to allow the collection of personal data or 'Off' to disallow the collection of personal data.
Click 'OK' to submit your new settings.
Then force the app to close (more info)
Then restart the app.

Your choice to send a scan for server processing is separate, as described in section 4. To request deletion of data already sent, contact dpo@tasmanic.com.

7- Payments

Apple Store In-App Payments

8- Additional rights in the EEA or Switzerland

Depending on the applicable data protection law, you may request access to your personal data, correction, deletion, restriction of processing, or portability, and may object to certain processing. Where processing relies on your consent, you may withdraw it at any time without affecting the lawfulness of earlier processing. These rights are subject to the conditions and exceptions provided by law.

You may also complain to your competent data protection authority, including the CNIL in France. Use the contact details in section 11 to exercise your rights.

For requests under the GDPR, we respond without undue delay and normally within one month. If the law permits an extension because of the complexity or number of requests, we will inform you within that month; the extension may be up to two additional months.

9- CCPA Consumer Rights (Additional California Privacy Rights)

California Children Under 16

Your Rights Regarding Personal Information.

California consumers may have the right to know and access the personal information collected about them, its sources, purposes and disclosures; request deletion or correction; opt out of sale or sharing for cross-context behavioural advertising; limit certain uses of sensitive personal information; and receive equal treatment when exercising these rights. Legal conditions and exceptions apply.

The twice-per-12-month limit applies to free requests to know, not to every privacy request. Requests to know, delete or correct generally receive a response within 45 calendar days. Where permitted, this may be extended by a further 45 days with notice.

Personal information that have been collected in the past 12 months

Starting version 2.1 of the app, and above:

Prior to version 2.1 of the app:

Sale of personal information and Opt-out

Starting version 2.1 of the app, and above:

Prior to version 2.1 of the app:

Personal information disclosed for a business purpose

Starting version 2.1 of the app, and above:

Prior to version 2.1 of the app:

10- Changes to our privacy policy and practices

11- How to Contact Us

For a request concerning a scan sent for server processing, please indicate that your request relates to server processing and provide the information available in the app that helps us locate the relevant scan or processing request. Please do not email the scan photos unless we specifically request them for your support case.