Privacy Policy

Data we collect

• Account data: email address and user ID (for sign-in).
• Uploaded content: 3D models (GLB/USDZ), PDFs, photos you choose to upload, and related metadata (e.g. floor labels, camera transforms).
• Share metadata: share tokens, default floor, timestamps, and share status.
• Purchase data: App Store transaction identifiers, subscription status, and purchase history (products, prices, dates, renewals, refunds), used to validate entitlements and measure revenue.
• Install identifier: a random identifier created by the app on first launch. It is attached to your App Store purchases so they can be related to the install.
• Advertising attribution: if you installed 5DPlan after tapping an Apple Ads ad, Apple's AdServices framework tells us the campaign, ad group, keyword and country that led to the install. It contains no advertising identifier (IDFA).
• Support communications: messages you send to us.

What we do not collect

• We do not collect precise location.
• We do not use the advertising identifier (IDFA) and do not track you across apps and websites owned by other companies.
• We do not use third-party analytics SDKs.
• We do not sell personal data.

How we use your data

• Provide and operate the app (scan export, sharing, viewing).
• Validate subscriptions and entitlements.
• Measure the performance of our Apple Ads campaigns (installs and revenue per campaign).
• Maintain and secure share links.
• Respond to support requests.

Service providers (processors)

We use trusted third-party services to operate 5DPlan:

• Supabase: authentication and database.
• Cloudflare R2 + Workers: file storage and secure share delivery.
• Vercel: hosting for the web viewer and API.
• Resend: transactional email delivery.
• Apple App Store: subscription processing and verification, purchase notifications.
• Apple Ads (AdServices): install attribution for our ad campaigns.

Sharing links

If you generate a share link, anyone with the link can view the content until you revoke it or it expires.

Retention

We keep your uploads and share data until you delete them or revoke the share. You can request deletion at any time.

Purchase history and attribution records are kept as long as needed to measure campaign performance and reconcile revenue. They are not linked to your identity unless you sign in, in which case your purchases, and therefore the related install, are linked to your account. To limit abuse, our API stores a one-way hash of your IP address for up to one day.

Security

We use access controls and private storage for uploaded files. Share links are token-based and can be revoked.

Your rights

You can request access, correction, or deletion of your data. Contact us at: privacy@5dplan.app

Contact

privacy@5dplan.app