Privacy Policy

1. Information We Collect

1.1 Camera and AR Data

Parlor uses your device's camera to provide augmented reality (AR) evidence discovery experiences. We collect and process:

• Camera Feed Data: Real-time camera input for AR object placement and evidence scanning
• AR Tracking Information: Device motion, orientation, and environmental mapping data to place 3D objects in your space
• Image Processing: Temporary analysis of camera feed for object recognition and AR functionality

Important: Camera data is processed locally on your device and is not transmitted to our servers. AR sessions are not recorded or stored.

1.2 Local Networking Data

For local multiplayer experiences, we collect:

• Device Identification: Temporary device identifiers for MultipeerConnectivity sessions
• Network Information: Local network data to establish peer-to-peer connections
• Player Names: Display names chosen by users for game sessions
• Game State Data: Character assignments, story progress, and game choices shared among connected players

1.3 User-Generated Content

When you create or modify story content, we may collect:

• Story Data: Custom scenarios, characters, and narrative content you create
• Gameplay Choices: Decisions and interactions within stories
• Creative Assets: Images, text, or other media you add to custom stories

1.4 Account and Contact Information

• Email Address: Collected for early access notifications and app updates
• Display Name: User-chosen names for gameplay
• Device Information: iOS version, device model, app version for compatibility and support

1.5 Usage Analytics

We collect anonymized usage data to improve the app:

• App Performance: Crash reports, performance metrics, loading times
• Feature Usage: Which game modes and features are most popular
• Session Data: Game duration, completion rates, player counts (anonymized)

2. How We Use Your Information

2.1 Core Functionality

• AR Gaming: Camera and sensor data to provide immersive evidence discovery experiences
• Multiplayer Sessions: Local networking to connect players and synchronize game state
• Story Engine: Process user choices and deliver personalized narrative experiences
• Content Creation: Enable and save custom story creation and modifications

2.2 Communication

• Early Access Updates: Notify early access users of new features and releases
• Support: Respond to user inquiries and technical issues
• Important Notices: Share critical app updates and policy changes

2.3 Improvement and Development

• App Enhancement: Use analytics to improve game balance and user experience
• Bug Fixes: Identify and resolve technical issues
• New Features: Develop features based on user behavior and feedback

3. Data Storage and Security

3.1 Local Storage

Most data is stored locally on your device:

• AR Data: Camera processing occurs entirely on-device
• Story Content: Custom stories saved in local app storage
• Game Progress: Session data stored locally using iOS Core Data

3.2 Cloud Services

Limited data may be stored on secure cloud services:

• Email List: Early access emails stored with industry-standard encryption
• Analytics: Anonymized usage data processed through privacy-compliant analytics services
• Crash Reports: Technical data for debugging purposes

3.3 Security Measures

• Encryption: All data transmission uses TLS 1.3 encryption
• Access Controls: Strict employee access limitations
• Regular Audits: Periodic security assessments and updates
• Data Minimization: We collect only necessary data for functionality

4. Data Sharing and Disclosure

4.1 No Sale of Personal Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 Limited Third-Party Services

We may share anonymized data with:

• Analytics Providers: Services like Google Analytics (with IP anonymization enabled)
• Cloud Infrastructure: Secure hosting providers for basic app infrastructure
• Crash Reporting: Technical services to identify and fix app issues

4.3 Legal Requirements

We may disclose information when required by law:

• In response to valid legal processes (subpoenas, court orders)
• To protect rights, property, or safety of users
• To prevent fraud or abuse of our services

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction, subject to the same privacy protections.

5. Your Privacy Rights

5.1 Universal Rights

• Access: Request copies of personal data we have about you
• Correction: Update inaccurate or incomplete information
• Deletion: Request removal of your personal data (subject to legal requirements)
• Portability: Receive your data in a machine-readable format

5.2 GDPR Rights (EU Users)

• Lawful Basis: We process data based on legitimate interests and consent
• Right to Object: Object to processing for direct marketing
• Automated Decision-Making: Request human review of automated processing
• Data Protection Officer: Contact our DPO for privacy concerns

5.3 CCPA Rights (California Users)

• Right to Know: Information about categories of data collected and shared
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt out of sale of personal information (we don't sell data)
• Non-Discrimination: Equal service regardless of privacy choices

5.4 Exercising Your Rights

To exercise these rights, contact us at synclively@gmail.com. We will respond within 30 days and may require identity verification for security purposes.

6. Children's Privacy (COPPA Compliance)

6.1 Age Verification

• Users must confirm they are 13 or older during app setup
• Parental consent required for users under digital consent age
• Account creation includes age verification measures

6.2 Parental Controls

• Parents can request deletion of child's data
• Parents can restrict data collection through device settings
• Camera access can be disabled through iOS parental controls

6.3 If We Learn of Child Data Collection

If we discover we have collected data from a child under 13 without parental consent, we will promptly delete such information.

7. International Data Transfers

Parlor may be used internationally. If you are located outside the United States:

• Data Location: Data may be stored on servers in the United States
• Adequate Protection: We ensure appropriate safeguards for international transfers
• Legal Basis: Transfers comply with applicable data protection laws
• Your Rights: Privacy rights apply regardless of data location

8. Data Retention

8.1 Retention Periods

• AR/Camera Data: Processed in real-time, not stored
• Local Game Data: Stored until app deletion or user deletion
• Email Addresses: Retained until unsubscribe or account deletion
• Analytics Data: Anonymized, retained for 2 years maximum
• Support Data: Retained for 3 years for quality purposes

8.2 Deletion Process

When data is no longer needed:

• Personal identifiers are removed or anonymized
• Secure deletion protocols ensure data cannot be recovered
• Legal requirements may require longer retention for specific data types

9. Cookies and Tracking

9.1 Website Cookies

Our website uses cookies for:

• Analytics: Google Analytics to understand website usage
• Functionality: Remember your preferences and choices
• Performance: Optimize loading and user experience

9.2 Mobile App Tracking

• No Cross-App Tracking: We don't track users across other apps
• Local Analytics: App usage tracked locally for improvement
• Opt-Out Available: Disable through iOS privacy settings

10. Future Features and Updates

10.1 Planned Features

As we develop new features, this policy may be updated to cover:

• In-App Purchases: Payment processing and transaction data
• Cross-Platform Play: Account linking and cloud synchronization
• Social Features: Friend connections and community features
• Cloud Storage: Optional cloud saves and story sharing

10.2 Policy Updates

• Material changes will be communicated via email and in-app notification
• Updated policies will be posted with revision dates
• Continued use constitutes acceptance of updates
• Users can object to changes by discontinuing use

11. Third-Party Integration

11.1 Current Third Parties

• Google Analytics: Website traffic analysis (anonymized)
• Email Services: Early access notification delivery
• Cloud Infrastructure: Secure hosting and data storage

11.2 Future Integrations

Planned integrations will include:

• Payment Processors: For in-app purchases (when implemented)
• Social Platforms: Optional account linking
• Cloud Services: Enhanced storage and synchronization

11.3 Third-Party Policies

We carefully evaluate all third-party services for privacy compliance and require them to protect your data according to our standards.

12. User Safety and Reporting

12.1 Harassment and Abuse Reporting

We are committed to maintaining a safe environment for all users:

• Immediate Action: Leave any session where you feel unsafe or uncomfortable
• Report Harassment: Email synclively@gmail.com with incident details
• Documentation: Include time, players involved, and description of behavior
• Privacy Protection: All reports handled confidentially
• Response Time: Safety reports investigated within 24 hours

12.2 Content Moderation

While Parlor operates on local networks, we maintain community standards:

• User Guidelines: Clear expectations for respectful gameplay
• Reporting Tools: Easy ways to report inappropriate content or behavior
• Investigation Process: Thorough review of all safety reports
• Enforcement Actions: Appropriate responses to policy violations

12.3 Privacy Violation Reporting

Report any misuse of AR features or privacy violations:

• Unauthorized Recording: Report any attempt to record without consent
• AR Misuse: Report inappropriate use of camera features
• Data Concerns: Report any suspected data privacy violations
• Contact: synclively@gmail.com for privacy-specific concerns

12.4 Emergency Situations

For immediate safety concerns:

• Contact local authorities (911/emergency services) for immediate threats
• Exit the app and remove yourself from the situation
• Report to us afterward for follow-up action
• We cooperate with law enforcement when legally required

13. Compliance and Certifications

This privacy policy complies with:

• GDPR: European Union General Data Protection Regulation
• CCPA: California Consumer Privacy Act
• COPPA: Children's Online Privacy Protection Act
• CalOPPA: California Online Privacy Protection Act
• iOS Guidelines: Apple App Store privacy requirements
• Android Guidelines: Google Play Store privacy requirements

We regularly review our practices to ensure ongoing compliance with evolving privacy laws and industry standards.