Privacy Policy

01Age Requirement

The Service is intended only for users who are at least 13 years old. We require users to provide date of birth or age eligibility information during registration so we can confirm and record that they meet this requirement. Users under 13 are not permitted to create an account or use the Service. If we learn that we have collected personal information from a child under 13, we will delete that information and close the account unless applicable law requires otherwise.

If you are 13 to 17 years old, or under the age of majority where you live, you should use the Service only with permission from a parent or guardian. Published works may reveal your stylized avatar, caption, nickname, profile photo, display place label, public like count, and AR scene snapshots or previews to registered users who reach the same physical location and successfully view the work. Teen users should avoid publishing works at private, sensitive, routine, home, school, or otherwise identifying locations.

02Information We Collect

2.1Account Information

When you register or sign in, we collect information needed to create and maintain your account, such as your date of birth or age eligibility information, username, nickname, profile photo, account ID, and authentication information.

If you sign in with Apple or Google, we receive information provided by that service, such as your email address, private relay email address, unique user identifier, and authentication token, depending on your settings with Apple or Google.

2.2Photos, Generated Content, and User Content

In Topia, an "avatar" is the stylized, non-photorealistic 3D character or figure generated from photos. A "published work" is created when you place an avatar at a physical location. One avatar may be used to create multiple published works.

You may take photos with your camera or upload personal photos within the photo library access range you authorize, including photos you select, to generate stylized avatars. We collect the photos you take or upload, AI-generated images, generated avatar or 3D assets, avatar metadata, published works, published work captions, likes, account information such as nickname and profile photo, reports, and other content you submit or publish through the Service. When you publish or preview a published work, the Service may create, upload, store, and display screenshots or preview images of the AR scene. These screenshots or previews may include visible real-world surroundings, objects, signs, or people captured by your camera.

If you publish a work, other registered users who reach the same physical location and successfully view it through VPS or visual positioning may see the published work, its caption, your nickname, your profile photo, and the public like count. If a registered user likes your published work, you may receive a notification showing that user's nickname and profile photo. The current version does not allow users to view other users' profile pages, post comments, send private messages, or use an in-app sharing feature.

2.3Camera, Photos, and AR Information

With your permission, the Service may access your device camera so you can take photos for upload, and may access photos within the photo library access range you authorize, including photos you select. We use these permissions so you can upload photos, generate content, scan surfaces, place avatars as published works, and view AR content. The current version uses photo library access only to read photos for selection and upload, and does not save or write photos, generated images, previews, or AR screenshots to your photo library.

For AR placement and viewing, the Service may process information about your device camera view, local surfaces, device motion, depth or scene understanding data, visual positioning signals, and other environment-scanning information needed to place or display published works. This may include Cloud Anchor IDs, area anchor IDs, spatial anchor records, world map or AR map files, feature map quality or quality reports, anchor recall poses, heading, pitch, recall result events, placement transforms, scale, orientation, relative position, published work placement metadata, and anchor expiration or renewal information. We use this information to operate AR features, align published works with suitable surfaces, improve stability, recall previously placed content, and prevent abuse.

We use Google ARCore Cloud Anchors and related Google services to host, resolve, renew, and delete cloud anchors so that AR content can be placed and viewed in the correct physical location. Google may process camera images, device pose, feature points, spatial mapping information, Cloud Anchor identifiers, and related technical data as needed to provide these AR features. Google Maps Platform and Google Places may also process location, nearby place candidates, place IDs, place names, search text, and related map data to help display or select the place associated with a published work.

2.4Location and Placement Information

The Service records where you place avatars as published works and may use visual positioning, Cloud Anchors, or VPS technology so other registered users can view public published works only after they reach the same physical location and successfully view the work through visual positioning. We collect published work placement locations, display locations or place labels, place IDs, placement metadata, approximate or precise location signals where enabled, distance, accuracy, and information about your published work placement history.

When you view, like, check in to, or otherwise interact with a published work, we may collect interaction and exposure events, such as event type, event ID, client session ID, duration, distance, latitude, longitude, accuracy, source, ratio, viewer interaction status, and related metadata. We use this information to operate the Service, count interactions, prevent abuse, and understand feature performance.

We do not currently state that we track your continuous background location. If a future feature uses background location, we will provide additional notice and request permission where required.

2.5Communications With Us and Safety Information

We collect information you provide when you contact support, submit a report, appeal a moderation decision, or communicate with us. We may also collect information related to suspected violations of our Terms, Community Policy, or applicable law.

2.6Device, Usage, and Diagnostics

We collect device, usage, telemetry, and technical information, such as device model, operating system, app version, IP address, crash logs, performance data, language, time zone, identifiers, feature interactions, pages viewed, event name, category, operation, status, platform, duration, trace ID, span ID, request ID, HTTP status, error code, session ID, event attributes, and other usage data. When you are signed in, some telemetry and diagnostics may be associated with your account ID.

03How We Use Information

We use information to:

• provide, operate, maintain, and improve the Service;
• create accounts, authenticate users, and enforce the 13+ age requirement;
• generate stylized 3D avatars from uploaded photos;
• assess uploaded photos for image safety, quality, and subject suitability before generation;
• place, store, and display published works in AR;
• show public published works, captions, nicknames, profile photos, and public like counts to registered users who reach the same physical location and successfully view the work through VPS or visual positioning;
• show published work owners which registered users liked their works, including by showing the liker nickname and profile photo in notifications;
• provide content moderation, reporting, deletion, account enforcement, and backend takedown tools;
• detect, prevent, and respond to abuse, fraud, security incidents, harassment, illegal activity, and violations of our policies;
• provide customer support and respond to requests;
• analyze Service performance and feature usage;
• comply with legal obligations and enforce our rights.

04AI and Third-Party Processing

We use third-party AI and cloud service providers to help review uploaded images for safety, quality, and subject suitability, generate reference images, generate 3D avatar assets, host content, operate Google ARCore Cloud Anchors, Google Maps/Places, VPS or related technical features, moderate content, and provide infrastructure. Our cloud database and storage infrastructure uses AWS in the U.S. East (N. Virginia) Region (us-east-1). These providers may process the information needed to perform their services, including uploaded photos, prompts or related inputs, image admission results, generated reference images, AI-generated images, generated 3D avatar assets, avatar metadata, published work metadata, AR/spatial data, screenshots or previews, and technical information.

Our current AI providers may include OpenAI ChatGPT Image, Google Gemini, Tripo, Tencent Hunyuan, and other service providers that support the Service. We do not use your uploaded photos, generated images, avatars, or published works to train our own AI models. We instruct our service providers to process information only to provide services to us, subject to their applicable terms and our agreements with them.

We may ask for a separate AI and photo processing acknowledgement or consent, including during account creation, login, or before using AI generation features. The notice explains that photos you choose to upload will be uploaded and processed by AI systems and third-party providers for image admission, safety and quality checks, reference image generation, and 3D avatar generation. If you do not agree, you may not be able to use AI generation features.

05How We Share Information

We may share information:

• with other registered users who reach the same physical location and successfully view your published work through VPS or visual positioning, when you publish works, captions, nickname, profile photo, public like counts, or other public content;
• with published work owners, when you like their works, so they can see which registered users liked their works, including your nickname and profile photo in notifications;
• with service providers that host, process, moderate, analyze, secure, or support the Service;
• with Google ARCore Cloud Anchors, Google Maps Platform, and Google Places providers as needed for AR placement, visual positioning, anchor hosting/resolution, and place display or selection;
• with identity providers, such as Apple and Google, when you use their sign-in services;
• with law enforcement, regulators, courts, or other parties when required by law or when we believe disclosure is necessary to protect rights, safety, or security;
• in connection with a merger, acquisition, financing, reorganization, or sale of assets;
• with your direction or consent.

We do not sell your personal information for money. We do not currently use your personal information for third-party advertising or cross-app tracking. If that changes, we will update this Policy and provide any required choices or permissions.

06Retention

We keep personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, enforce agreements, and protect safety.

Uploaded photos, generated images, generated avatars or 3D model assets, published works, published work captions, likes, screenshots or previews, AR/spatial data, Cloud Anchors, world maps or AR map files, placement records, interaction events, telemetry, and diagnostics are stored for as long as needed to provide the Service, support AR recall and viewing, maintain safety, troubleshoot issues, and enforce our policies.

Deleting a published work removes or de-associates the placement content, published work caption, location or spatial anchor records, screenshots or previews, likes, and interaction records for that work where available, but it does not delete the avatar used to create that work or the source photos and generated assets associated with that avatar. Deleting an avatar removes or de-associates the avatar and related source photos, generated images, and generated 3D avatar assets where available, but it does not automatically delete published works already created with that avatar. To remove a work from a location, delete that published work separately.

If you delete your account in the app, your account is deleted immediately from the active account system. We will begin deleting or anonymizing associated account information and user content, including uploaded photos and generated avatar or 3D files. Some public content, AR/spatial data, Cloud Anchors, world maps, screenshots or previews, interaction records, telemetry, diagnostics, and technical records may be cleaned up asynchronously or retained for a limited period where needed for legal compliance, security, fraud prevention, dispute resolution, enforcement, technical operations, or to complete deletion from systems outside the active account database. We do not maintain backups for account restoration.

07Your Choices and Rights

Depending on your location and applicable law, you may have rights to access, correct, delete, export, or object to certain processing of your personal information. You can update certain account information in the app, delete avatars, published works, or other content where available, report content, or request account deletion.

You can control camera, photo library, and location permissions through your device settings. If you disable permissions, some features may not work.

To make a privacy request, contact privacy@dmyh.tech.

08U.S. State Privacy Notice

This section applies to residents of U.S. states that provide privacy rights under applicable state privacy laws, such as California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states as their laws become effective. The rights available to you depend on your state of residence and the law that applies to us.

8.1Categories of Personal Information

In the past 12 months, we may have collected the following categories of personal information, depending on how you use the Service:

• identifiers, such as account ID, email address, Apple or Google sign-in identifiers, device identifiers, and IP address;
• account and profile information, such as nickname, profile photo, date of birth or age eligibility information, and age eligibility status;
• user content and interactions, such as uploaded photos, AI-generated images, generated reference images, generated avatars or 3D model assets, avatars, published works, published work captions, likes, reports, screenshots or previews, and related metadata;
• location, place, and placement information, such as published work placement locations, display locations, place labels, place IDs, placement history, approximate or precise location signals where enabled, distance, accuracy, and VPS or visual positioning signals;
• camera, AR, and environment-scanning information, such as local surface detection, device motion, depth or scene understanding data, Cloud Anchor IDs, spatial anchor records, world map or AR map files, recall poses, quality reports, transforms, and other information needed for AR placement or viewing;
• internet or electronic network activity, such as app interactions, feature usage, event names, operation/status data, trace/request IDs, logs, telemetry, and diagnostics;
• inferences or safety signals, such as moderation results, abuse-prevention signals, and policy enforcement history;
• support and communications information, such as messages you send to support, reports, appeals, and related attachments.

Some of this information may be considered sensitive personal information under certain state laws, such as precise location, account login information, personal photos, and information used for safety or identity-related review. We use sensitive personal information only for purposes permitted by applicable law, such as providing the Service, security, fraud prevention, content moderation, legal compliance, and user-requested features.

8.2Sources, Purposes, and Disclosure

We collect personal information from you, your device, your use of the Service, identity providers such as Apple or Google, service providers, and other users who interact with or report content. We use and disclose personal information for the purposes described in Sections 3, 4, and 5 of this Policy.

We may disclose the categories of personal information listed above to service providers, contractors, identity providers, cloud hosting providers, AI providers, Google ARCore Cloud Anchors, Google Maps Platform, Google Places, VPS or AR technology providers, moderation and safety vendors, analytics and diagnostics providers, professional advisors, authorities where required, registered users who reach the same physical location and successfully view your published work, and published work owners whose works you like.

8.3Sale, Sharing, and Targeted Advertising

We do not sell personal information for money. We do not currently share personal information for cross-context behavioral advertising or use personal information for targeted advertising as those terms are defined under applicable U.S. state privacy laws. We also do not knowingly sell or share the personal information of users under 16.

If our practices change, we will update this Policy and provide required opt-out rights.

8.4Your U.S. State Privacy Rights

Depending on your state and applicable law, you may have the right to:

• know or confirm whether we process your personal information;
• access and receive a copy of personal information we hold about you;
• correct inaccurate personal information;
• delete personal information;
• obtain a portable copy of certain personal information;
• opt out of sale, sharing, targeted advertising, or certain profiling, if applicable;
• limit certain uses or disclosures of sensitive personal information, where applicable;
• appeal our decision on a privacy request;
• not be discriminated against for exercising your privacy rights.

To submit a request, contact privacy@dmyh.tech. We may need to verify your identity before fulfilling your request. Authorized agents may submit requests where permitted by law, but we may require proof of authorization and verification of the user's identity.

To appeal a privacy request decision, reply to our decision email or contact privacy@dmyh.tech with the subject line "Privacy Appeal."

8.5Retention Under State Privacy Laws

We retain each category of personal information for the periods described in Section 6, taking into account the nature of the information, the purpose for collection and processing, legal obligations, safety needs, dispute resolution, enforcement, asynchronous deletion from public/AR systems, and technical limitations.

09Safety, Moderation, and Public Content

We use automated review and may use manual review to detect or remove content that violates our Terms, Community Policy, or law. We may review reports, published work captions, likes, avatar metadata, published work metadata, images, generated avatars or model assets, placement data, and related account information when needed for safety, enforcement, or legal reasons.

The current version does not provide an in-app sharing feature. However, public content may still be viewed, copied, saved, recorded, screenshotted, linked to, reposted, or shared by other users outside the Service through device features or third-party platforms we do not control. Please do not publish content you do not want others to see or share. If you delete content or your account, we will remove or de-associate the content from the Service as described in this Policy, but we may not be able to delete copies that other users or third parties have already saved or shared outside the Service.

10Security

We use reasonable technical, administrative, and organizational measures to protect information. However, no system is completely secure, and we cannot guarantee absolute security.

11International Transfers

We and our service providers may process information in the United States and other countries where we or our providers operate. These countries may have data protection laws different from those in your location.

12Changes to This Policy

We may update this Policy from time to time. We will post the updated version with a new effective date. If changes are material, we will provide additional notice where appropriate.

13Contact Us

Shanghai One Line Technology Co., Ltd.
Room 2C05, 2nd Floor, Building 42, No. 1015 Tianlin Road, Minhang District, Shanghai 200233, China mainland
Privacy: privacy@dmyh.tech
Support: support@dmyh.tech
Safety reports: safety@dmyh.tech