1. Overview and scope
This Privacy Policy is the universal corporate and mobile application privacy policy of VECTRA INTERACTIVE LLC ("Vectra", "we", "us"). It applies to all mobile applications developed and published by VECTRA INTERACTIVE LLC (the "Apps") and to vectrainteractive.com (the "Website"). It explains what information we handle, why we handle it, who receives it, and the choices and rights you have.
Not every App uses every feature. Sections 5 to 9 are organized by feature and permission category, and each applies only to Apps that use that feature. To see which apply to a particular App, check its Google Play listing, including its Data safety section, and the permission requests and disclosures shown in the App.
In short: Camera frames and facial geometry are used solely to render visual effects. Device administration features run locally on your device. Ad-supported Apps include SDKs that receive device and usage information, subject to your consent and device settings. You can ask us to delete your data at any time by emailing brahim@vectrainteractive.com.
2. Who we are
VECTRA INTERACTIVE LLC is a Limited Liability Company registered in the State of Wyoming, United States. We are the data controller for the personal data described in this Policy, except where a third party acts as an independent controller as described in Section 9.
Registered office and mailing address: 5830 E 2nd St, Ste 7000 #39738, Casper, WY 82609, United States.
Email: brahim@vectrainteractive.com
3. Which sections apply
| Feature category | Applies when an App | See |
|---|---|---|
| Camera, photos and AR/AI | uses the camera, transforms photos, or tracks faces or surfaces | Section 5 |
| Device administration and workspace isolation | uses Android Profile Owner or Device Policy capabilities, or creates an isolated work profile | Section 6 |
| Android permissions | requests any Android permission | Section 7 |
| Advertising and GAID | shows ads | Section 8 and Section 9 |
| Crash reporting and analytics | includes Firebase Crashlytics or Firebase Analytics | Section 9 |
If an App needs access to a category of data that this Policy does not describe, such as contacts or precise location, we will update this Policy before that App uses it, and Android will ask for your permission where such a permission is required.
4. Information we handle
Information you send us
If you email us or use the Website contact form, we receive your name, email address, the subject, your message and anything you attach. We use it to respond and to keep a record of the conversation.
Information collected automatically
Depending on which SDKs an App includes (see Section 9), the following may be collected:
- Device and app identifiers: Google Advertising ID (GAID), Android App Set ID, Firebase installation ID and app instance ID.
- Device and app information: device model, operating system version, language, screen size, carrier or network type, and App version.
- Network information: IP address, and an approximate location such as country or city that can be inferred from it.
- Advertising activity: which ads were requested and shown, whether they were tapped, and related measurement data.
- Diagnostics and usage: crash stack traces, device state at the time of a crash, related logs, and events showing which App features are used.
Information that stays on your device
Many features work only on your device. Settings, history, files and similar data that an App stores locally are not sent to us, and we have no copy of them.
Accounts and payments
Unless an App says otherwise, you do not need an account to use it. If a paid feature is offered, Google Play processes the payment and we do not receive your card details. We do not ask for government ID.
5. Camera, Photos & AR/AI Processing Disclosure
This section applies to Apps that use the camera, photo transformation, or AR face or surface tracking.
Camera frames and facial geometry are processed strictly in real time on your device, or transiently and encrypted if you explicitly invoke cloud processing, solely to render visual effects. They are never stored on our servers, never used for biometric identification, and never shared with third parties or used to train AI models.
On-device processing
With your permission, the App uses your camera to apply effects in real time. Face or surface geometry is derived from each frame, used to position the effect, and then discarded. It is not made available to advertising SDKs or other third-party SDKs. A photo or video is saved only when you choose to capture one, and it is saved to your device.
Cloud processing you invoke
If an effect cannot run on your device, the App tells you before anything is uploaded, and the upload happens only if you explicitly invoke that effect. The image is encrypted in transit, used only to produce your result, and deleted once the result is delivered. If an infrastructure provider performs this processing for us, it acts solely as our processor, on our instructions, and may not keep the image or use it for its own purposes.
Photos you select
An App accesses only the photos you choose to transform, or the media access you grant through Android. Results are saved to your device when you choose to save them.
Photos of other people
Please get a person's consent before using their photo. Our Terms of Service set out the rules for AI and AR features.
6. Device Administration & Workspace Isolation Disclosure
This section applies to productivity and security utilities that use Android Profile Owner or Device Policy capabilities.
These capabilities operate strictly locally on your device, with your consent, and with zero external data transmission. Nothing they read, manage or store is sent to us or to anyone else.
Your consent comes first
You are shown a clear disclosure and asked to agree before setup begins. If you decline, the isolated workspace is not created. These capabilities are used solely to create and manage an isolated Android work profile. They are not used to wipe your device or to reset your device lock screen password.
What stays on your device
- Profile configuration and app lists. A utility may read which apps are inside the work profile, for example to hide them while the workspace is locked. That list stays on your device.
- Credentials. A PIN, passcode or recovery answer is not stored in readable form. A utility keeps a protected verifier, using hardware-backed keys in the Android Keystore where your device supports them.
- Backups. Workspace credentials and session state are excluded from Android cloud backup and device-to-device transfer.
Other software on your device
Apps you install or clone into a work profile, including Google Play, are operated by their own developers under their own privacy policies, and they may use the Internet. Android, your device manufacturer and those apps may also keep their own records, which we do not control and cannot access.
If a utility also shows ads or reports crashes, the SDKs that do so are covered by Section 8 and Section 9 and are listed in its Google Play Data safety section. They never receive data obtained through device administration capabilities.
Removing a workspace
You can remove a work profile at any time. Open Android Settings, go to Accounts (called Passwords and accounts, or Accounts and backup, on some devices), choose Work profile, then Remove work profile. This permanently deletes the work profile with its apps and data. Your personal profile is not affected.
7. Runtime Android Permissions
Android shows you the permissions each App uses, and Apps request only those their features need. Some are granted at install and others ask you at runtime. You can revoke runtime permissions at any time in Android Settings > Apps > the App > Permissions; features that rely on them will stop working.
| Permission | How it is granted | Why an App may use it |
|---|---|---|
INTERNET | At install | To load ads, send crash reports and analytics, and run cloud effects you invoke. |
ACCESS_NETWORK_STATE | At install | To check for a connection before making network requests and to support offline-first behavior. |
CAMERA | Runtime prompt | Real-time camera effects, AR tracking and taking photos. |
READ_MEDIA_IMAGES( READ_EXTERNAL_STORAGE on Android 12 and earlier) | Runtime prompt | To open the photos you choose, where the system photo picker is not used. |
POST_NOTIFICATIONS | Runtime prompt on Android 13 and later | To show service status and notifications you have enabled. |
AD_ID( com.google.android.gms.permission.AD_ID) and related advertising-services permissions | At install | Lets advertising SDKs read your GAID and use Android's advertising features. See Section 8. |
FOREGROUND_SERVICEand typed variants such as FOREGROUND_SERVICE_SPECIAL_USE | At install, with a visible notification while running | To keep an active task running, such as locking an open workspace when the screen turns off. |
RECEIVE_BOOT_COMPLETED | At install | To restore an App's configuration after your device restarts. |
QUERY_ALL_PACKAGES | At install, for uses Google Play allows | For utilities whose core function needs to see installed apps, such as managing the apps in a work profile. The list stays on your device. |
BIND_DEVICE_ADMIN(Profile Owner) | Android setup flow you must approve | To create and manage an isolated work profile. See Section 6. |
8. Advertising IDs (GAID)
This section applies to Apps that show ads.
The Google Advertising ID (GAID) is a resettable identifier provided by Google Play services. Advertising SDKs use it to measure ads, limit how often you see the same ad, prevent fraud and, where you allow it, personalize ads. We do not link your GAID to your name, email address or any persistent device identifier such as your IMEI or Android ID.
Consent
If you are in the European Economic Area, the United Kingdom or Switzerland, we ask for your consent through Google's User Messaging Platform (UMP) before personalized ads are shown or information is stored on or read from your device for advertising. You can change your choice through the privacy options in the App's settings. If you decline, you may still see non-personalized ads, which can use limited data for frequency capping, aggregated reporting and fraud prevention.
Controlling your GAID
- Android 12 and later: open Settings > Privacy > Ads and choose Delete advertising ID. On some devices the path is Settings > Security & privacy > More privacy settings > Ads, or Settings > Google > Ads. Apps will then receive a string of zeros in place of an ID.
- Earlier versions: open Settings > Google > Ads, then choose Reset advertising ID or Opt out of Ads Personalization.
You can stop all collection by an App by uninstalling it.
9. Third-party SDKs
Our Apps may include the following third-party software development kits, depending on the App and your region. An App's Google Play Data safety section shows what it collects and shares. These providers process data under their own privacy policies and may act as independent controllers of it.
| SDK and provider | Purpose | Data involved | Privacy information |
|---|---|---|---|
| Google Play Services Google LLC |
Core Android services the other SDKs rely on, including GAID. | Device identifiers, device and app information. | Google Privacy Policy |
| Google AdMob and User Messaging Platform Google LLC |
Showing and measuring ads, EEA and UK consent management, fraud prevention. | GAID, App Set ID, IP address, device information, ad activity, consent choices. | How Google uses information from apps |
| Firebase Crashlytics Google LLC |
Diagnosing crashes and improving stability. | Crash traces, device state, Firebase installation ID, App version. | Firebase privacy information |
| Firebase Analytics Google LLC |
Understanding which features are used, in order to improve the App. | App instance ID, usage events, device information, approximate location. | Firebase privacy information |
| Meta Audience Network Meta Platforms, Inc. and affiliates |
Showing and measuring ads. | GAID, IP address, device information, ad activity. | Meta Privacy Policy |
| TikTok Ads SDK TikTok and affiliates |
Showing and measuring ads, attribution of app installs. | GAID, IP address, device information, ad activity. | TikTok for Business privacy |
10. How we use information
If the GDPR or UK GDPR applies to you, we rely on the following legal bases.
| Purpose | Legal basis |
|---|---|
| Answering your emails, support and legal requests | Performance of a contract, or our legitimate interest in responding to you |
| Rendering camera, photo and AR effects you request | Performance of a contract with you, and your permission for camera or media access |
| Showing personalized ads | Your consent, which you can withdraw at any time |
| Showing non-personalized ads, frequency capping and ad fraud prevention | Our legitimate interest in funding free Apps and keeping them secure, and your consent where the law requires it for storing or reading information on your device |
| Crash reporting and stability | Our legitimate interest in keeping the Apps reliable and secure |
| Usage analytics | Your consent where the law requires it, otherwise our legitimate interest in improving the Apps |
| Complying with the law and enforcing our terms | Legal obligation, and our legitimate interest in protecting our rights |
We do not use your information for automated decisions that have legal or similarly significant effects on you.
12. Retention
- Data on your device: kept until you delete it, uninstall the App or remove the work profile. We have no copy.
- Camera frames and facial geometry: discarded after each frame is processed. Images sent for cloud processing you invoke are deleted once your result is delivered.
- Emails and support requests: kept as long as needed to deal with your request, then for up to 3 years in case of follow-up or a legal claim, unless the law requires longer.
- Crash reports: kept by Firebase Crashlytics for 90 days before removal begins, according to Firebase's published retention period.
- Usage analytics: kept for the retention period set in our Firebase Analytics settings.
- Advertising data: kept by each provider under its own policy.
- Records of privacy requests: kept as long as needed to show that we handled them as the law requires.
13. Security
We use technical and organizational safeguards suited to the data involved, including encryption in transit, restricted access to our accounts, and Android Keystore protection for sensitive values on your device. No software or network is completely secure, and we cannot guarantee absolute security. Please keep your device updated and protected with a screen lock.
14. Your privacy rights
To exercise any right below, email brahim@vectrainteractive.com and tell us which App and which right your request concerns. We may need to verify your request, and we will ask for no more information than that requires. We will not discriminate against you for exercising your rights. You may use an authorized agent where the law allows.
European Economic Area, United Kingdom and Switzerland (GDPR)
You have the right to access your personal data, correct it, erase it, restrict or object to its processing, receive a portable copy, and withdraw consent at any time without affecting earlier processing. You may also complain to your local data protection authority. We respond within one month, which can be extended where the law allows.
California (CCPA/CPRA)
California residents have the right to know what personal information we collect and how we use and disclose it, to delete it, to correct it, to opt out of its sale or sharing for targeted advertising, and to limit the use of sensitive personal information. We respond within 45 days, which can be extended as the law allows. We provide these rights whether or not the law's business thresholds apply to us.
| Category | Examples | Sold or shared? |
|---|---|---|
| Identifiers | GAID, App Set ID, IP address, Firebase IDs. Name and email only if you contact us. | Device identifiers: shared with ad partners in Apps that show ads. Name and email: no. |
| Internet or network activity | Ad views and taps, usage events, crash and diagnostic data. | Ad activity: shared with ad partners. Diagnostics and usage analytics: not sold, and not shared for targeted advertising. |
| Approximate geolocation | Country or city inferred from IP address. | Shared with ad partners in Apps that show ads. |
| Inferences | Ad interests that ad partners may derive. | Created and held by ad partners. |
| Sensitive personal information | We do not use camera frames or facial geometry to identify you, and we do not retain them (see Section 5). | No |
We do not knowingly sell or share the personal information of consumers under 16. Purposes are described in Section 10 and retention in Section 12.
To opt out of sale or sharing: delete your advertising ID as described in Section 8, use the privacy options in the App's settings, or email us with the subject "Do Not Sell or Share". An App that contains no advertising SDKs does not sell or share this data.
Other U.S. states
Residents of states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah and Texas, may have similar rights to access, correct, delete and obtain a copy of personal data and to opt out of targeted advertising and sale. If we decline your request, you may appeal by replying to our decision within 60 days.
15. Data deletion requests
You can remove locally stored data yourself at any time, or ask us to delete the data we hold.
Delete data on your device
- Any App: open Android Settings > Apps > the App > Storage > Clear storage, or uninstall the App. Photos you saved to your gallery stay there until you delete them.
- Workspace utilities: remove the work profile as described in Section 6, then uninstall the App. This also deletes the apps and data inside the profile, and it cannot be undone.
Ask us to delete data we hold
- Email brahim@vectrainteractive.com with the subject Data Deletion Request.
- Tell us the name of the App, the email address you used to contact us or to create an account (if any), and your device model.
- We acknowledge your request within 5 business days and complete it within 30 days. If we need longer, as the law allows, we will tell you why.
What is deleted and what may be kept
We delete your emails and support records, any account the App lets you create along with its data, and any crash or analytics data we can link to your request. Crash and analytics data are not tied to your name or email, so we may be unable to locate them; Crashlytics crash data begins to be removed automatically after 90 days in any case.
We may keep information where the law requires it or where it is needed to resolve disputes, prevent fraud or enforce our agreements. We also keep a minimal record of your request to show that we handled it.
Data held by advertising partners
Deleting your advertising ID stops new data being linked to it. We cannot look up or delete what advertising partners hold about an advertising ID, so you can also contact them directly using the links in Section 9.
16. Children's privacy (COPPA)
Our Apps and Website are not directed to children under 13, or under the minimum age for digital consent in your country (up to 16 in parts of the European Economic Area). In line with the U.S. Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13 or show personalized ads to them.
If you believe a child has given us personal information, contact us at brahim@vectrainteractive.com and we will delete it. If we ever publish an App directed to children, we will update this Policy with the practices that apply to it before release.
17. International transfers
We are based in the United States, and our service providers and advertising partners operate in several countries. Your information may therefore be processed outside your country, including in countries with different data protection laws. Where the law requires a safeguard for transfers out of the European Economic Area, the United Kingdom or Switzerland, we rely on Standard Contractual Clauses or an adequacy mechanism such as the EU-U.S. Data Privacy Framework, where the recipient participates in it.
18. This website
The Website does not set its own cookies, and it does not use analytics or advertising tags. The contact form does not send your message to our servers. It opens a draft in your own email app, and we receive the message only if you send it.
To display the pages, your browser connects to Google Fonts (Google LLC) and the Tailwind CSS content delivery network, which receive your IP address and browser information. Our hosting provider may keep standard server logs for security and reliability. External links lead to sites that have their own privacy practices.
19. Changes to this Policy
We may update this Policy as our Apps or the law change. We will revise the date at the top of this page and, for material changes, give notice in the App or on the Website before the change takes effect.
20. Contact us
VECTRA INTERACTIVE LLC
5830 E 2nd St, Ste 7000 #39738
Casper, WY 82609, United States
brahim@vectrainteractive.com