Effective date: August 11, 2026 · This is the authoritative English version.
1. Who we are
Loci ("we", "us") is the mobile app Loci (Android package com.lociar.app) and its
companion website at lociar.com. For anything in this policy, contact
lociar.com [at] gmail.com.
2. Information we collect
| Data | Details |
|---|---|
| Account | A random account ID is created when you first open the app (guest account). If you register, we also store your email address, or your Google account email if you sign in with Google. We never see or store your Google password. |
| Profile | The handle and display name you choose. These are visible to other users. |
| Precise location | Loci's core function is placing and finding content at exact real-world spots, so the app requires precise GPS location while you use it. The locations of memories and game markers you place are stored and shared with users who can see that content. We do not collect your location while the app is closed. |
| Camera | The camera feed powers the AR view and is processed on your device. Camera images are only uploaded in two cases: photos you deliberately take and post, and anonymized visual feature data used for AR anchors (see section 3). |
| Content you create | Text notes, photos, comments, likes, quiz questions and answers, game scores, follows, friend connections, reports, and blocks. |
| Push token | A Firebase Cloud Messaging token so we can deliver notifications (likes, comments, friend requests) to your device. |
| Diagnostics | An optional on-device diagnostics log (off by default, toggled in your profile) used for troubleshooting. It stays on your device unless you send it to us yourself. |
3. AR anchors and Google
To pin content precisely, Loci uses Google's ARCore Cloud Anchors service. When you place or find anchored content, visual feature data derived from your camera images is sent to Google to create or resolve the anchor. Google processes this data according to the ARCore data privacy terms; per Google, the feature maps are used to host and resolve anchors and are not usable to identify you.
4. Photos are public
Photos attached to memories are stored in a publicly readable storage bucket: anyone who has a photo's link can view it, regardless of other privacy settings. Don't post photos you wouldn't want public.
5. Automated content moderation
To keep Loci safe, text and images you upload are automatically scanned by a moderation service (currently OpenAI's moderation API) at upload time. Content flagged as violating our rules is removed. The moderation vendor processes the content to perform the scan; it is not used to train their models per their API terms.
6. Machine learning
We may use the content and usage data described in section 2 to develop and improve Loci's own features — for example tuning content moderation, improving how AR markers are placed and found, or ranking and recommendations. When we do:
- we de-identify or aggregate the data wherever the purpose allows it;
- we never let third parties use your data to train their models (our moderation vendor's no-training terms are in section 5);
- we design training so that models do not memorize or reproduce your personal data;
- we will not use your content to train models that generate public-facing content without asking you first;
- if you delete content or your account, it is removed from our training datasets right away and drops out of models at the next retraining cycle;
- you can object to this use of your data at any time by emailing us (section 14) — we'll exclude your account from future training.
7. Service providers
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, and file storage — all account data and content lives here. |
| ARCore Cloud Anchors (section 3), Firebase Cloud Messaging (push), optional Google sign-in. | |
| OpenAI | Automated moderation scanning of uploaded text and images (section 5). |
| OpenStreetMap | The in-app map loads tile images from OpenStreetMap's servers; those requests expose your IP address and the map area you're viewing to OSM, under the OSMF privacy policy. |
We share data with these providers only to run the service. We do not sell personal data for money. We may introduce advertising in the future, including personalized advertising; some laws (such as California's) treat ad-related data sharing as a "sale" or "sharing" of personal information — before any of that happens, we will update this policy and provide the opt-outs those laws require.
8. Who sees what
Your handle, display name, and the content you post are visible to other users under the visibility rules in the app (public content, followers, friends, or game participants). Blocking a user hides your content from them. Location is shared only as part of where you chose to place content — other users never see a live feed of your position, except that in live team games your marker position is shared with your game's participants while you play.
9. Retention, export, and deletion
- Export: Profile → "Export my data" writes everything we hold about you to a file on your device.
- Delete: Profile → "Delete account" permanently deletes your account and all your content, immediately and irreversibly. You can also delete individual memories, comments, and games at any time without deleting the account.
- If you can't access the app, see account deletion for a request-by-email path.
- Content removed by moderation is deleted from user view immediately; flagged image files are deleted from storage outright.
10. Your rights
Depending on where you live (e.g. GDPR in Europe, CCPA/CPRA in California), you may have rights to access, correct, delete, or port your data, and to object to processing. The in-app export and delete tools cover most of these directly; for anything else, email us and we'll respond within 30 days. You may also lodge a complaint with your local data-protection authority.
11. Children
Loci is not directed at children under 13, and the app asks your birth year on first launch to keep under-13 users out. The year you enter is checked once, on your device, and is never stored or sent to our servers — we keep only a yes/no result. We do not knowingly collect personal information from children under 13; if you believe a child is using Loci, contact us and we will delete the account.
12. Security
All traffic between the app and our servers is encrypted in transit (HTTPS). Access to content is enforced server-side with row-level security. No system is perfectly secure — report vulnerabilities to the contact address above.
13. Changes
We'll update this policy as the service evolves and change the effective date above. Material changes will be announced in the app.