Privacy Policy

1. Introduction & Scope

This Privacy Policy explains how Brooks Forsyth ("Developer", "we", "us", or "our") collects, uses, processes, and protects information when you download, install, or use the Reclaim AR iOS application (the "App") and when you visit our companion website at brooksforsyth.dev (the "Site").

We designed Reclaim AR to respect your personal privacy. The App's core purpose is to assist you in organizing and decluttering physical spaces through augmented reality (AR) visual guidance and artificial intelligence. We collect and process only the minimal information strictly necessary to provide and maintain these services.

2. Information We Collect and How We Use It

The following table outlines the data categories, processing locations, purposes, and retention characteristics associated with Reclaim AR:

Camera Data and Biometric Integrity

Reclaim AR requires camera access (NSCameraUsageDescription) exclusively to provide spatial augmented reality functionality and visual clutter detection.

• No Biometric Data: Reclaim AR does not use facial recognition, TrueDepth facial geometry, iris scanning, voiceprints, or any biometric identification technologies.
• Incidental Imagery: The App is designed to evaluate inanimate objects and surface clutter. While incidental imagery of people or surroundings may be present in camera frames, such imagery is never used to identify, monitor, or profile individuals.
• No Surveillance or Background Recording: Camera capture operates solely while the App is actively in the foreground and you have initiated a scan or verification session. The App never records audio or captures imagery in the background.

3. Apple App Store & Privacy Manifest Declarations

In compliance with Apple's App Store Review Guidelines (specifically Guideline 5.1.1 — Data Collection and Storage and Guideline 5.1.2 — Data Use and Sharing) and iOS Privacy Manifest requirements (PrivacyInfo.xcprivacy):

• Tracking Disclosure (NSPrivacyTracking = false): Reclaim AR does not track users. We do not link data collected from the App with third-party data for advertising or advertising measurement purposes. We do not access Apple's Identifier for Advertisers (IDFA).
• Tracking Domains (NSPrivacyTrackingDomains): Our App contains an empty tracking domain list because zero network requests are directed to ad networks or data brokers.
• Required Reason APIs (NSPrivacyAccessedAPITypes): Reclaim AR accesses the UserDefaults API under Apple-approved reason code CA92.1 solely to store local in-app configuration settings and cache verified Pro subscription state on-device.
• No Data Sold: We never sell, rent, or lease any user data or spatial imagery to third parties.

4. Multimodal AI Processing & Subprocessors

To translate visual clutter into actionable 3D coordinates, Reclaim AR utilizes advanced multimodal vision APIs provided by enterprise cloud infrastructure (e.g., Google Gemini API and Groq API).

When you perform a scan or an auto-verification trigger occurs, a single captured frame is transmitted via encrypted HTTPS (TLS 1.3) to the API endpoint. The model evaluates the image to identify clutter items, generate brief descriptive labels, and output normalized bounding box coordinates.

Subprocessor Safeguards:

• Equal Protection: In accordance with Apple App Store Guideline 5.1.1(i)(b), all third-party service providers are contractually bound to maintain data protections and confidentiality standards equal to or greater than those outlined in this Privacy Policy.
• No Model Training on User Data: Under standard enterprise and developer API terms, frame payloads transmitted for inference are processed ephemerally in memory to generate API responses. They are not used to train or fine-tune public foundation models without explicit user consent.
• No Permanent Remote Archiving: Reclaim AR does not maintain cloud database servers or persistent image stores. Once coordinate JSON is returned to your device, the remote request lifecycle concludes.

5. In-App Purchases & Subscriptions (StoreKit 2)

Reclaim AR offers optional paid premium features ("Pro" tier) via auto-renewable subscriptions (monthly, annual) or a lifetime purchase.

• Payment Processing: All purchase transactions, renewals, and refunds are handled exclusively by Apple Inc. through the App Store and Apple Media Services.
• No Financial Data Collection: The Developer does not receive, collect, process, or store your credit card number, debit card number, bank account details, or billing address.
• Subscription Verification: The App receives cryptographically signed transaction verification tokens from Apple's StoreKit 2 framework to locally unlock Pro entitlements.
• Managing Your Subscriptions: You can modify or cancel your subscriptions at any time via your iOS device by opening Settings > [Your Apple ID Name] > Subscriptions. Cancellations take effect at the end of the current billing period.

6. Data Retention, Storage, and Security

Retention Periods:

• Camera & Sensor Data: Ephemeral; processed in real-time RAM buffers and discarded immediately after use.
• Local Spatial Scans & LiDAR Meshes: Saved locally on your iOS device's sandboxed storage. Retained until you manually delete sessions within the App or uninstall the App.
• Preferences & Cached Entitlements: Stored locally in UserDefaults on your device until uninstallation.
• Website Inquiries: If you contact us via email, we retain your communication history only as long as necessary to address your inquiry or fulfill legal compliance requirements.

Security Measures: We employ industry-standard administrative, physical, and technical safeguards. All network communications between the App and AI inference endpoints utilize Transport Layer Security (TLS 1.2/1.3) with certificate verification. On-device data is secured within the iOS application sandbox and protected by Apple's Data Protection hardware encryption.

7. European Privacy Rights (GDPR & UK GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, you enjoy specific legal rights under Regulation (EU) 2016/679 (General Data Protection Regulation) and the UK Data Protection Act 2018:

Legal Bases for Processing (Article 6 GDPR)

• Contractual Necessity (Art. 6(1)(b)): Processing camera captures to detect clutter, compute spatial coordinates, and render AR highlights is essential to providing the core service you requested.
• Consent (Art. 6(1)(a)): Where required (e.g., iOS permissions to access your camera and motion hardware), we rely on your clear affirmative action granting system-level access.
• Legitimate Interests (Art. 6(1)(f)): Verifying cryptographic purchase signatures and maintaining application security.

Your Data Subject Rights

Subject to applicable legal limits, you have the right to:

• Access (Art. 15): Request confirmation of whether we process personal data and receive a copy of that data.
• Rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
• Erasure / "Right to Be Forgotten" (Art. 17): Request deletion of your personal data. Because Reclaim AR does not maintain user accounts or cloud databases, deleting the App from your device instantly removes all local data.
• Restriction of Processing (Art. 18): Request that we limit processing of your personal data under certain circumstances.
• Data Portability (Art. 20): Receive your personal data in a structured, commonly used, and machine-readable format.
• Object (Art. 21): Object to processing based on legitimate interests.
• Withdraw Consent: Revoke granted permissions at any time via iOS Settings without affecting the lawfulness of prior processing.
• Lodge a Complaint: File a complaint with an EU/EEA supervisory authority or the UK Information Commissioner's Office (ICO).

To exercise any of these rights, contact us at brooks@brooksforsyth.dev.

8. California Privacy Rights (CCPA / CPRA & CalOPPA)

This section applies to California residents under the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA/CPRA") and the California Online Privacy Protection Act ("CalOPPA"):

• Notice of Collection: In the preceding 12 months, Reclaim AR has not collected personal information other than ephemeral image frames transmitted for real-time spatial AI grounding, local device storage (UserDefaults for preferences), and anonymous StoreKit purchase tokens.
• We Do Not Sell or Share Personal Information: We do not sell personal information, and we do not share personal information with third parties for cross-context behavioral advertising.
• Sensitive Personal Information: We do not collect or process sensitive personal information (such as government IDs, precise geolocation, genetic data, or biometric data) for the purpose of inferring characteristics about consumers.
• Consumer Rights: You have the right to request knowledge of personal data collected, request deletion of personal data, request correction of inaccurate data, and be free from discriminatory treatment for exercising your privacy rights.
• "Do Not Track" and GPC Signals: We do not track users over time across third-party websites or online services, and therefore our Site and App do not respond to Do Not Track (DNT) signals or Global Privacy Control (GPC) headers.
• California "Shine the Light": Under California Civil Code Section 1798.83, California residents may request information regarding disclosure of personal information to third parties for direct marketing. We do not disclose personal information to third parties for direct marketing.

9. Children's Privacy (COPPA & International Standards)

Reclaim AR is not directed to children under the age of 13 (or under 16 in the EEA/UK), and we do not knowingly collect personal identifiable information from children. If you are a parent or legal guardian and believe that your child has provided us with personal information, please contact us immediately at brooks@brooksforsyth.dev. If we determine that personal information of a child has been collected without verifiable parental consent, we will take prompt steps to delete such information.

10. Managing Permissions & Requesting Deletion

You maintain complete control over the data Reclaim AR accesses on your iOS device:

• Revoke Camera Access: Open your iPhone or iPad Settings > Reclaim AR (or Settings > Privacy & Security > Camera) and toggle Camera access off. Note that AR decluttering features require camera access to function.
• Revoke Motion Access: Open Settings > Reclaim AR (or Settings > Privacy & Security > Motion & Fitness) and disable motion permissions.
• Delete Local Room Scans and Meshes: Within the App, you can discard individual room sessions or clear all saved spatial meshes.
• Complete Data Erasure: Deleting the Reclaim AR application from your iOS device permanently deletes all locally cached data, preferences, and session meshes stored in the app container.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect modifications to the App's capabilities, changes in legal statutes, or Apple App Store guideline revisions.

Any changes will be posted on this page with an updated "Last Updated" timestamp at the top of the policy. For material changes, we will provide conspicuous notice through the App (such as an in-app release update notice) or on our website prior to the change becoming effective. We encourage you to review this Privacy Policy periodically.

12. Contact Information & Data Controller

If you have questions, comments, concerns, or data subject requests regarding this Privacy Policy or our privacy practices, please contact our Data Controller:

We endeavor to acknowledge and address all privacy-related inquiries within 30 days of receipt.