ARLink — Privacy Policy

Last updated: March 2026

ARLink ("we", "our", "the app") is an augmented reality social networking application. This policy explains what data we collect, why, and how it is protected.

1. Data We Collect

2. Location Data

Location is the core feature of ARLink. We use it to:

• Show nearby users as avatars in AR space
• Allow users to place 3D objects at GPS coordinates
• Enable peer-to-peer positioning via Google Nearby Connections

Your live location is shared with other users nearby while you are in AR mode. Location data is deleted from our servers within 60 seconds of ending your AR session.

Note: per-user location visibility controls (friends-only, private mode) are planned for a future update.

3. Camera

Camera access is required for AR functionality. Google ARCore processes camera frames entirely on your device to track the environment and overlay 3D objects. Camera images are never transmitted to our servers.

3a. Camera and Gemini AI Vision (optional feature)

When you activate the Gemini AI assistant (opt-in, disabled by default), the app uses PixelCopy to capture the AR camera view — what you see on screen, including the camera image and any AR objects — and sends it to the Google Gemini Live API.

• What is captured: a compressed JPEG image (640px, 60% quality) of your AR screen, sent at 1 frame per second while the assistant is active
• What is included: everything visible in your camera view at that moment — your surroundings, any people or objects in frame, and AR overlays
• Where it goes: directly to Google Gemini API — not to our servers
• How to stop it: deactivate the assistant at any time in Settings → Assistant → Off. Vision stops immediately
• Consent: you will be asked to confirm before the assistant is first enabled

By enabling the Gemini assistant you agree to Google Gemini API Terms and Google Privacy Policy. We recommend not using the assistant in private spaces or where other people have not consented to being captured.

4. Bluetooth and Nearby Connections

We use Google Nearby Connections (Bluetooth + WiFi) to enable peer-to-peer positioning between nearby users. This improves AR placement accuracy. P2P packets are cryptographically signed and verified — they cannot be forged or replayed. No personal data is transmitted through this channel beyond GPS coordinates and user ID.

5. Voice and Audio

The Gemini AI assistant is an optional, opt-in feature. When enabled, voice input is sent to Google Gemini API. We do not store or process audio on our servers. See Google's Privacy Policy for how Gemini handles audio.

6. Data Retention

• Account data: retained until you delete your account
• Live location: deleted within 60 seconds of session end
• Messages: retained until you delete your account. In-app message deletion is planned for a future update.
• WiFi anchor data: stored anonymously, not linked to your account
• Placed AR objects: retained until you remove them

7. Third-Party Services

8. Children's Privacy

ARLink is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Your Rights

You have the right to:

• Access your personal data
• Set your location visibility to private
• Opt out of the AI assistant at any time in Settings
• Delete your account and all associated data — individual message deletion within the app is not yet available

To delete your account, log in at arlink.all-for-your.com/account.html, go to Account Settings → Danger Zone → Delete account.

10. Security

All data in transit is encrypted via HTTPS/TLS 1.3. Passwords are hashed and never stored in plain text. P2P communications use HMAC-SHA256 signed packets with replay protection. JWT tokens are used for API authentication.

11. Changes to This Policy

We may update this policy as the app evolves. We will notify users of significant changes via the app. Continued use after changes constitutes acceptance.

12. Contact