Lar3D Privacy Policy
Effective date: October 23, 2026
Controller: Kingdom Ideas Factory LTDA (CNPJ 45.049.427/0001-12)
Privacy contact: anboia@gmail.com
1. Summary
- Lar3D does not collect personal data. It has no account, no sign-up, no ads, no analytics and no tracking.
- The app does not connect to the internet. Everything you film and create stays on your iPhone.
- Files leave the device only when you choose to share them (for example, with AirDrop to your Mac or to the Files app).
- No data is sent to the developer.
2. What the app uses on your iPhone
- Camera (with your permission): to film the rooms, take high-resolution photos while filming (one every 2 seconds) and show the preview. Where it stays: on the device.
- Motion sensors and ARKit tracking: to compute the camera position and orientation for every frame, the lens calibration, gravity and the ambient light. This data drives the live tips and the minimap and is saved with the video to build the 3D model. iOS does not ask a separate permission for these sensors. Where it stays: on the device.
- LiDAR (only on iPhones that have it): to record depth along with the video. Where it stays: on the device.
- Text you type: project name, property or address (optional), room or floor name. Where it stays: on the device.
- Settings and checklist: to remember the video quality you chose and the checklist items you ticked. Where it stays: on the device.
- Models you import (GLB, USDZ, splat): to show the 3D model in the viewer and in augmented reality. Where it stays: a copy on the device.
The app does not use the microphone (videos have no sound), location or GPS, contacts, the photo library, advertising identifiers or any other device information beyond the items above.
3. Where the data stays and how to delete it
- Everything stays in the app's storage on your iPhone, protected by iOS's own security features (such as your device passcode).
- If iCloud Backup or computer backup is on, iOS may include these files in your backup, according to your settings and Apple's terms. The developer has no access to that backup.
- To delete: delete the capture, project or model inside the app (you will be asked to confirm). To delete everything at once, delete the app from your iPhone.
4. When data leaves the device
Only when you choose to export or share:
- Capture bundle (
.lar3d): contains the video, the high-resolution photos, the camera positions, the calibration, gravity, depth (if your iPhone has LiDAR), the text you typed (project name, property or address, rooms), the iPhone model, the iOS and app versions, and the filming dates. - 3D models: when you use the share button in the viewer.
You pick the destination in the iOS share sheet (AirDrop, Files or another app). From then on, the data follows the rules of the destination you chose. Nothing is sent to the developer.
Be careful when sharing: a video of the inside of a home may show people, documents, family photos or screens. Check what is in the picture before filming and before sending it to anyone. If you film someone else's home, ask for permission.
Processing on the Mac: in this version, the 3D model is built on your Mac by the Lar3D engine. Processing happens on your computer, and the engine does not send the data to the developer.
5. What the developer receives
- Through the app: nothing.
- Data handled by Apple: Apple may share crash reports and aggregated usage statistics with developers only if you turned this on in iOS settings (Privacy & Security → Analytics & Improvements). This is governed by Apple's privacy policy, and you can turn it off at any time. The App Store also handles the data of your purchase or download, under Apple's rules.
- If you write to support: we receive your e-mail address, your name (if included) and your message. We use them only to reply and keep them for up to 12 months after the last contact, unless the law requires us to keep them longer. We do not share them with anyone.
6. Third parties
The app has no analytics, advertising, social media or login SDKs. It includes open-source components (ZIPFoundation, three.js and Spark, all under the MIT license) that run on the device without any internet connection. The list and the licenses are in Settings → Third-party licenses.
7. Children
The app is not directed to children and does not collect data from anyone, including children.
8. Your rights
Under the Brazilian General Data Protection Law (LGPD, Law No. 13,709/2018, art. 18) you have, among others, the rights to: confirmation that data is processed; access; correction; anonymization, blocking or deletion of unnecessary data or data processed unlawfully; portability; deletion of data processed with consent; information about who the data was shared with; information about the option not to consent; and withdrawal of consent. You may also file a complaint with the Brazilian Data Protection Authority (ANPD). Depending on where you live, you may have similar rights under local law (for example, the GDPR in the European Union).
Because the app sends no data to the developer, the data created in the app is only with you and can be viewed, corrected, exported and deleted in the app itself. For support contact data (section 5), or for any request or question, write to anboia@gmail.com. We will reply within the legal deadlines.
9. Changes to this policy
If the app changes how it handles data, for example by offering cloud processing, this policy will be updated before the change, with a new effective date, at https://lar3d.kifactory.app/privacy/. Where the law requires it, we will ask for your consent in the app before anything is sent.
10. Contact
Kingdom Ideas Factory LTDA · anboia@gmail.com
Not in effect
When cloud processing exists (not in effect)
This section is not in effect. It describes what will change in this policy if Lar3D starts offering cloud processing in a future version. Today the app sends nothing to any server, and everything above applies. The final wording will depend on decisions not yet made (provider, region, retention, sign-in and billing) and on legal review, and the new version will be published before the change (section 9).
- Summary and section 1: “does not collect data” and “does not connect to the internet” no longer apply. New text: “when you choose to process in the cloud, the app sends the capture bundle to our servers to build the 3D model”.
- Data processed: video and photos of the inside of the home; ARKit poses, planes and depth; metadata (device model, dates); an anonymous app identifier (a UUID in the Keychain) or a Sign in with Apple account (name and e-mail, if any); purchase records (transaction ID, product, date); notification token (APNs); technical security data (App Attest, logs without content). Sensitive data may appear by chance (religious objects, health equipment, people): the system does not analyze it, keeps as little as possible and deletes it (LGPD, art. 11).
- Purposes and legal bases (subject to legal review): processing the video and returning the model, as performance of a contract at the data subject's request (art. 7, V); security, fraud prevention and logs, as legitimate interest with a documented assessment (art. 7, IX); purchase records, as a legal obligation (art. 7, II). Videos will not be used to train models, except with separate, optional consent that is off by default (art. 7, I).
- Processors and region: the policy will name the chosen providers (for example, Modal and Cloudflare in the US, or AWS in São Paulo) and, if data leaves Brazil, the basis for the international transfer under art. 33: ANPD standard contractual clauses, performance of the contract, or specific and prominent consent, with prior notice.
- Retention: uploaded bundle deleted on completion (at most 7 days if the job fails); intermediate files deleted at the end of the job; results kept for 30 days or until the user deletes them; job metadata while the account exists; purchase records for the legal period; technical logs for 30 to 90 days.
- Deletion: a “Delete my cloud data” button and, if there is an account, account deletion inside the app, without requiring an e-mail or a phone call, with the deadline stated and a confirmation at the end. With Sign in with Apple, the tokens will be revoked.
- Security: TLS end to end; encryption at rest (AES-256) and, if adopted, a per-job key (SSE-C) that makes the data unreadable once deleted; private storage and signed URLs.
- Payments: purchases through the App Store (StoreKit); the developer receives only the transaction data, never the card details.
- Consent and transparency in the app: a prominent notice before the first upload (if that is the basis chosen for the international transfer), saying what is sent, where and for how long; guidance to film without people and a confirmation that the user is allowed to film the property.
- Data protection officer and incidents: a data protection officer will be appointed (it may be the developer), with published contact details; incidents will be reported to the ANPD within the deadline of ANPD Resolution CD/ANPD No. 15/2024.
- App Store privacy labels: will declare Photos or Videos, Environment Scanning, User ID, Purchase History and, with Sign in with Apple, Name and Email Address; the “collects no data” text is removed from the app's Settings.
- Effective date: the new version will be published before cloud upload is enabled, and people who already have the app will be notified in the app.