Privacy Policy

Introduction

This Privacy Policy explains how fraqments ("fraqments", "we", "us", or "our") collects, uses, stores, and protects your personal information when you use our iOS mobile application and related services (the "Services"). fraqments is a spatial memory capture application that empowers you to preserve moments both through private, on-device personal memories and collaborative real-time sessions ("Shared Moments").

We are committed to maintaining the highest privacy and security standards in accordance with Apple's App Store Review Guidelines (including Guideline 5.1.1). By accessing or using fraqments, you acknowledge and agree to the practices described in this policy.

On-Device Memories vs. Collaborative Cloud Storage

fraqments is architected with a transparent dual-storage model designed to balance private offline preservation with seamless real-time collaboration:

• Personal Moments (On-Device & Offline-First): All personal memory spheres, notes, photos, videos, and voice memos are stored and processed locally on your device using Apple SwiftData. Personal moments are never transmitted, backed up, or replicated to remote cloud servers or external databases.
• Shared Moments & Rooms (Collaborative Cloud Storage): When you create or join a collaborative session ("Shared Room"), the fragments you contribute (including photos, videos, audio/voice recordings, and text notes) are securely uploaded and stored on our cloud infrastructure (Supabase) to enable real-time synchronization, instant updates, and access among verified members of that room.

Information We Collect

We collect only the minimum information necessary to deliver our features and ensure a secure collaborative experience:

• Authentication & Profile Information: When signing in with Apple, we receive a unique, stable account identifier (Apple User ID) and, depending on your Apple privacy settings, your email address (or Apple's private relay email) and your name. Within the app, you may provide a public display name and profile picture to identify yourself to room collaborators.
• User-Generated Content: Photos, videos, audio recordings, and text notes specifically created, uploaded, or shared within collaborative Shared Moments.
• Identifiers: An internal account User ID used exclusively to manage authentication sessions, room memberships, and access controls.
• Device Permissions:
  • Camera: Used exclusively to capture photos and record videos to attach as memory fragments.
  • Microphone: Used solely to capture video audio and record voice notes within active moment sessions.
  • Location (When In Use): Used strictly to tag geographic coordinates to memory fragments so you can view where memories were captured. Location data is never tracked in the background, never used to build movement histories, and never sold to or shared with third-party data brokers.
  • Live Activities & Dynamic Island: Uses iOS ActivityKit to display ongoing recording session status on your Dynamic Island and Lock Screen. This state is managed locally by iOS and is immediately discarded when the session ends.

How We Use Information

We use the collected information solely for legitimate operational purposes:

• To provide, operate, and maintain application functionality and interactive 3D spatial constellations.
• To enable real-time collaboration, instant sync, and shared media access within Shared Moments.
• To facilitate secure user authentication via Sign in with Apple.
• To display your display name and profile avatar to fellow members of shared rooms you participate in.
• To deliver customer support, diagnose technical bugs, and improve app stability.
• To comply with applicable legal obligations and enforce our terms.

Third-Party Service Providers

We value your trust and do not sell, rent, or monetize your personal data. We work only with reputable infrastructure providers required to operate cloud services:

• Supabase: We utilize Supabase as our cloud infrastructure provider for secure PostgreSQL database hosting, encrypted media storage, and authentication management. Supabase processes data on our behalf adhering to strict security and privacy standards.
• No Third-Party Advertising or Tracking: fraqments does not embed any third-party ad networks, advertising SDKs, marketing trackers, or commercial data broker libraries. We do not engage in cross-app tracking.
• Legal Disclosures: We will only disclose information if required to do so by applicable law, court order, subpoena, or to protect the safety and vital interests of our users.

Account Deletion & Data Retention

You maintain full ownership and control over your personal data at all times:

• In-App Account Deletion: In compliance with Apple App Store Guideline 5.1.1, you can permanently delete your account directly inside the app at any time. Simply navigate to Profile → Delete Account.
• Immediate Cloud Data Purge: When you execute account deletion, your user credentials, authentication records, profile details, and user-associated data stored in our Supabase cloud database and storage are permanently and irreversibly deleted.
• Local Device Data Deletion: You can delete any personal on-device moment or fragment at any time within the app. Uninstalling the fraqments app permanently erases all locally stored SwiftData records and cached media from your device.
• Data Retention: We retain cloud data associated with Shared Moments only for as long as your account and active rooms exist, or until you choose to delete them.

Security

We implement industry-standard safeguards to secure your personal data. All cloud communications are encrypted in transit using Transport Layer Security (TLS 1.3/1.2), and files stored in our cloud buckets are encrypted at rest. On-device memories are protected by Apple's sandboxing and hardware-backed data protection mechanisms.

Children's Privacy

The Services are not intended for or directed to children under the age of 13 (or the relevant age threshold under local law). We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

Your Privacy Rights

Depending on your country or state of residence (including under the GDPR or CCPA/CPRA), you may have rights regarding your personal information, such as the right to access, rectify, port, or erase your data, or restrict certain processing activities. You can exercise these rights directly within the app (including through our in-app account deletion tool) or by contacting us at the email address below.

Changes to this Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable legal requirements. Any material changes will be reflected on this page with an updated "Last updated" date.

Contact Us

If you have any questions, concerns, or inquiries regarding this Privacy Policy or how your data is handled, please reach out to us at:

fraqmentsapp@gmail.com