Privacy Policy

1. Information we process

• Account information: your email address and, if provided by Google, your name and profile picture used to authenticate and identify your account.
• Content you submit: photographs, videos, captions, messages on the back of the Polaroid, image positioning, and customization choices.
• Order information: selected package, amount, currency, country, payment status, order email, and transaction identifiers. Full card or bank account details are handled by the payment processor and are not stored by AR Photo.
• Technical information needed to operate and protect the service, such as session information, access logs, and basic browser and connection data processed by our hosting infrastructure.

2. How we use information

• Create and secure your account, authenticate access, and let you manage your album.
• Prepare your Polaroid, store and display submitted media, generate the print file, and play the associated video when the scanner recognizes the photograph.
• Create orders, confirm payments, unlock purchased files and credits, prevent fraud, and meet legal and accounting obligations.
• Respond to support requests, fix errors, and maintain the security and operation of the service.

3. Google Sign-In and Google user data

If you choose Sign in with Google, AR Photo receives basic identity information made available by Google, such as your name, email address, and profile picture. We use this information only to authenticate you, create or locate your account, and display account information within the service.

We do not sell Google user data or use it for targeted advertising or AI model training. AR Photo does not request access to Gmail, Google Drive, Calendar, or other Google Workspace APIs.

4. Where information is processed and who receives it

AR Photo does not sell personal information. To provide the service, it may share only the information needed with service providers that process it under their own safeguards and privacy terms:

• Supabase: authentication, database, and storage for photos, videos, and album information.
• Google: authentication when you choose Google Sign-In.
• Vercel: website and application hosting.
• Mercado Pago: Pix payment processing in Brazil; Stripe: card payment processing in markets served by that provider.
• Cloudinary: media processing or delivery only when an application feature uses that provider.

5. Albums, scanner, and sharing

Media in your library is associated with your account. When you use a printed QR code or share a scanner link, you allow people with that access and the corresponding photograph to view the associated video. Share QR codes and links only with people you want to share the memory with. Temporary signed URLs may be used to load media and expire after a limited period.

6. Storage and retention

A draft that has not been submitted may remain temporarily in this browser's storage so you can continue editing. You can clear local drafts in account Settings or clear this site's data in your browser.

Photos, videos, messages, and account information remain stored while needed to provide your library and purchased features. You can delete memories from your account or ask support for help. Some order, payment, security, and accounting records may be retained as required by law or as needed to resolve disputes and prevent fraud.

7. International transfers and security

Our providers may process information in countries other than yours, depending on the infrastructure they operate. When this happens, processing is subject to the safeguards and obligations applicable to those providers and AR Photo.

We use access controls, HTTPS connections, private storage for account media, and signed links that expire after a limited time. No electronic transmission or storage can be guaranteed to be completely secure.

8. Your rights and requests

Depending on applicable law, including Brazil's General Data Protection Law (Law No. 13,709/2018), you may request confirmation and access, correction, anonymization, blocking or deletion where applicable, information about sharing, portability where applicable, and withdrawal of consent when consent is the legal basis. Some information may be retained to meet legal obligations or establish, exercise, or defend legal claims.

For personal data requests, use the support channel listed at the end of this page. AR Photo may verify your identity before responding.

9. Children's privacy

AR Photo does not knowingly ask children to create an account or provide personal information without a parent or guardian. If you believe a child provided personal information without required authorization, contact support so we can review the matter.

10. Changes to this policy

We may update this policy to reflect changes to the service, providers, or law. The current version will remain available on this page with its update date. If a change materially affects our use of Google user data, we will also update the information shown in the service.