Privacy policy
Last updated: [date]
This policy explains what the Emhok app for Android and the emhok.com website collect, why, who processes it, and how you can delete it.
Draft for review. This policy describes what the app does today, but it has not been reviewed yet. The parts in [brackets] still have to be filled in. It is not legal advice.
Who we are
Emhok (“we”) makes the Emhok app for Android and runs this website, emhok.com. The data controller is [legal name and address of the owner]. You can reach us at [contact email].
Your account
When you first open the app it creates a guest account, an anonymous identifier with no name or email, so you can scan codes straight away. If you register, we store your email address, a display name you choose, and your password (handled by our authentication provider, which stores it only in hashed form).
With your account we keep its role, its status, when it was created and when the app last checked in, and which app features it may use.
Designs you create
A design is what you upload or link: an image, a video (up to 100 MB), or a YouTube or Instagram link, together with its settings, such as its size, position, crop and the code assigned to it. Designs are stored on your phone and in our cloud storage, so they reach your other devices and the people who scan their codes.
Designs on a code are public to anyone who scans that code. That is how the app works: pointing Emhok at a printed code fetches its design. Only share codes for designs you are happy for others to see.
Designs placed without a code, and location
When a design is placed without a code (on a wall, a floor, a table, in a picture frame or in the sky), the placement is saved with the location of your phone (GPS coordinates), its compass direction, and a black-and-white photo of the surface under the design, so the design can be recognised and shown again in the same spot. For a picture frame we also keep the frame’s measured outline.
Placements are public to people nearby. To show designs placed around you, the app sends your current location to our servers, which return the placements close to it. We use location only to save and find placements. You can refuse the location permission; scanning codes does not need it.
Camera, sensors, photos and videos
The camera is used to find codes and surfaces and to draw designs on them. Camera images are processed on your phone and are not uploaded, except the surface photo saved with a placement described above. The app does not record audio.
The gyroscope and compass are used on the phone to keep designs steady. Photos and videos you capture are saved to your phone’s gallery; we do not receive them unless you choose to share them.
Services we use
- Supabase hosts our database, file storage and sign-in. Your account, designs and placements are stored there.
- Vercel hosts this website.
- Google Play Services for AR (ARCore). On supported phones the app uses ARCore, which is provided by Google and governed by the Google Privacy Policy.
- YouTube and Instagram. A design that links to a YouTube or Instagram video plays in that service’s own player, which loads from YouTube or Instagram and is subject to their privacy policies.
No ads, no selling
The app shows no ads and contains no advertising or analytics trackers. We do not sell your data or share it with advertisers. This website does not use cookies to track visitors; the private admin area uses sign-in cookies for administrators only.
Keeping and deleting your data
We keep your data while your account exists. You can delete a design or a placement at any time in the app. Deleting your account in the app (Profile, Delete account) removes the account together with its designs, placements and uploaded files. Signing out clears the designs and placements stored on the phone.
You can also ask us at [contact email] for a copy of your data, a correction, or deletion. Administrators can suspend accounts that break the rules; a suspended account’s public designs stop being shown.
Security
Data is sent over encrypted connections (HTTPS). Access in the database is limited by per-user rules, so an account can change only its own designs and placements. Administrators sign in with a password and a second factor.
Children
Emhok is not directed at children under [13 / 16]. [Owner to confirm the age.]
Changes
We will post any change to this policy on this page and update the date at the top.