Privacy Policy
This policy describes the current 3D CHAT test service. Local capture and editing can work without an account. Online login, Chat and public card sharing use hosted services. Features that have not been enabled are not described as available.
1. Who operates the service
The service operator is Dafucang (Fujian) Supply Chain Co., Ltd. For privacy questions, access, correction or deletion requests, contact support@dfcczcz.com. We may ask for limited information to verify that a request relates to your account; do not send passwords or access tokens.
2. Data kept on your device
Photos, capture frames, motion/pose information, local scans, albums and editing results are stored in the app container. They are not automatically uploaded merely because you capture or open them. Camera and photo access follow iOS permissions. The screenshot translation extension uses Apple text-recognition and translation APIs; language downloads and system processing follow Apple's services. The extension does not send screenshots to our Supabase backend. Device backups, exports and sharing through other apps follow your own choices and the relevant providers' policies.
3. Account and online service data
When you sign in, we process your account ID and email through Supabase Auth. The app stores session tokens in iOS Keychain. Online profiles may include a username, display name, language, time zone and availability preferences. Chat stores conversation membership, messages, attachment references, timestamps and delivery receipts. Reporting, blocking and security controls store the necessary target, reason and status records. Account entitlements and translation wallets store plan status, granted/purchased amounts and usage; the current test balances are not proof of a real payment.
4. Publishing and sharing
Publishing a supported finished Space panorama or ordinary Object frame sequence uploads its web-viewing media, title and summary to Supabase Storage/database and creates a public viewer link served through Cloudflare. Object sharing uses JPEG copies of the finished frames; the local source video is not uploaded by this publication flow. Anyone with a public link or its media URL may view or copy the shared content. Only publish material you are allowed to share. Successful revocation or deletion removes the active publication and its hosted media, but cannot erase copies, screenshots or caches already held by recipients or third parties. Whole-album, Canvas, 3D model and multi-scene web publishing are not currently enabled.
5. Purpose and service providers
We use the above data to provide login, messaging, delivery status, publishing, moderation, account management and support, and to protect the service from abuse. Supabase provides Auth, database, Storage and Realtime; the current test project is in Singapore. Cloudflare provides the public website and edge delivery. Apple provides the iOS permission, Keychain, translation and notification frameworks; when push is enabled, device push tokens and necessary notification metadata are used for APNs. These providers may process operational data in other locations under their policies. Current code does not include an advertising SDK or cross-app advertising tracking. We do not sell personal data or use your private content to train our own AI model. Third-party cloud translation, Spatial HD and email fallback are not claimed as live services; actual providers and any additional data processing will be disclosed before those services are enabled.
6. Website and security
Website and API requests may expose IP address, browser/device information, request path, time and error/security data to the hosting providers. The legal/support pages have no analytics scripts, contact form or advertising cookies. Service calls use HTTPS and server access controls. Chat is stored by our backend and is not represented as end-to-end encrypted. No service can guarantee absolute security; keep public links and account sessions safe.
Showcase website
The 3D CHAT showcase at https://3dchat.dfcczcz.com is operated by Dafucang (Fujian) Supply Chain Co., Ltd. and hosted on Cloudflare Pages, using Cloudflare’s distributed network. Requests may be processed outside your country or region. Cloudflare may process IP addresses, request paths, browser information, timestamps and security logs to deliver and protect the website according to its policies. We do not add analytics scripts, advertising cookies, account login or a contact form to this showcase. Selecting a language updates the URL and stores that preference in your browser’s local storage; clearing website data removes it. Display media are website copies and do not upload or change cards on your device. The app and public card viewer described above operate separately from this showcase. Contact support@dfcczcz.com with website privacy questions.
7. Retention and deletion
Local drafts stay on your device until you delete them or the app's data. Account records and online content are retained while needed to provide the account and service. You can revoke/delete supported publications and request account deletion in Me when signed in. Successful account deletion removes the active Auth account, profile, owned online records and hosted media through the deletion workflow; local files and copies held by recipients are separate and may still exist. Requests can fail because of network or service errors and must be retried until success. Provider backups, operational/security logs and legally required records may remain under applicable retention rules; removal is not a promise of instant deletion from every backup. Contact us for a data request or a deletion failure.
8. Your choices and updates
You can control camera, Photos and notification permissions in iOS Settings, edit available profile/preferences, stop publishing and use the account deletion/contact options above. Rights to access, correct, delete, restrict or object to processing depend on applicable law; contact us to exercise them. The app is not designed specifically for children; minors should use it only as permitted by local law and their guardian. We will update this page when enabled services or data handling change, and provide additional notice/consent where required. The date on this page identifies the current version.