Scan2Skin 3D: Avatar Creator
This policy was written for the phone app. The website follows the same rules, with these differences:
Scan2Skin 3D: Avatar Creator makes a player skin (a small picture file that dresses your character in block-building games) from a live camera capture of you, or of someone who agrees to be scanned. All of the processing happens on your phone. The app works without an internet connection, except for optional ads and purchases.
The app uses these only to draw the skin. It does not use them to recognize, identify or match anyone, and it does not guess age, sex, gender, ethnicity, health or emotion. They are never used to train or improve any model, and they are never sent to us, to advertisers, or to anyone else.
Camera photos are held in the app's private storage on your phone only while a capture is open: at most 10 photos (a two-layer capture takes one set without a jacket and one with it), plus the walk-around frames while the best ones are chosen. They are deleted when you finish, when you cancel, before you start editing pixels, and, if the app closes unexpectedly, the next time it opens. Photos are never written to your photo library.
To measure the skin, models that run on the phone find points on the face and body in your photos (face and body landmarks, such as the corners of the eyes, the shoulders and the knees). These points, the depth data and the face and body proportions made from them exist only in the phone's memory while a skin is being made, are used only to make the skin, and are never saved, sent anywhere, or used to identify anyone.
The app keeps the following in its private storage on your phone. None of it is sent to us, and none of it is included in cloud backups or in phone-to-phone transfers.
Skins you export or share (as PNG files or skin packs) are copies under your control. Where they go is up to you.
The app never asks for your location, contacts, microphone, or access to read your photo library. On an iPhone, "Save PNG" adds the skin you chose to Photos, because that is where Minecraft on iPhone imports skins from: the app asks once for permission to add photos only, and it can never see the photos in your library. There are no accounts and no sign-in. The app contains no analytics and sends no crash reports. We do not use advertising identifiers.
This application runs on Google Play Services for AR (ARCore), which is provided by Google and governed by the Google Privacy Policy.
On Android the app uses ARCore on your phone for motion tracking and depth during the walk-around capture. It does not use ARCore's cloud features (Cloud Anchors or Geospatial), and it never sends camera images anywhere. The iPhone app does not use ARCore and does not offer the walk-around.
The free version shows two kinds of video ad, provided by Google AdMob, or by Unity Ads in the app for Amazon Fire tablets. A rewarded ad plays only when you choose "watch an ad to export" to save or share a skin. A full-screen ad can play when you start another skin after finishing one: never before your first skin, never when the app opens or in the middle of a task, at least five minutes after the last ad, and at most two in a session. There are no banners and no other ads. Every ad request is child-directed and non-personalized, with the most restrictive content rating (G), and the app does not use an advertising ID.
When an ad is shown, AdMob receives information about your device and network connection that it needs to deliver the ad and to prevent fraud. Google handles this under its own privacy policy (see also how Google uses information from apps that use its services). AdMob never receives your camera images, proportions or skins. If no ad can load, for example when you are offline, you can still export and start another skin.
On Amazon Fire tablets, the ads come from Unity Ads instead, set up for a child-directed app: no behavioral or personalized ads. When an ad is shown, Unity receives information about your device and network connection that it needs to deliver the ad and to prevent fraud, under its own privacy policy. Unity never receives your camera images, proportions or skins.
The Pro version has no ads, and the ad software is not started while Pro is active.
The one-time Pro unlock is sold through your phone's store: Google Play on Android, Apple's App Store on iPhone. The store handles the payment; we receive only a confirmation that Pro was bought, never your payment details. "Restore purchases" uses your store account. We hold no account of our own.
We do not sell personal data, and we do not share it for cross-context behavioral advertising. Nothing from your captures is shared with anyone. When an ad is shown, Google AdMob (or Unity Ads on Fire tablets) receives device and network information as described in section 7. Google Play, Apple's App Store or the Amazon Appstore handles purchases. Nobody else receives data from the app unless the law requires it.
| Data | Where | How long |
|---|---|---|
| Camera photos | Your phone (app-private) | While the capture is open; deleted at finish, on cancel, before pixel editing, or at the next launch after an unexpected close |
| Depth data, face and body proportions | Phone memory only | Never saved |
| My skins and a draft of edits | Your phone (app-private) | Until you delete them, use "Delete all data", or uninstall |
| Notice and welcome records | Your phone (app-private) | Until "Delete all data" or uninstall |
| Exported or shared skins | Wherever you save or send them | Under your control |
| Ad data | Under Google's own policy | |
| Purchase confirmation | Google Play or the App Store | Under the store's terms |
Because we receive nothing from your captures, you control your data directly in the app:
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict its processing, and to withdraw consent. You can contact us at z.farm.technologies@gmail.com; we reply within 30 days (45 days for requests under California law). Requests about ad data are answered with directions to Google. If you are in the EU or UK, you may also complain to your data-protection authority.
This includes residents of Illinois, Texas, Washington and other places with biometric privacy laws. The app measures face geometry only in your phone's memory while making a skin, then discards it. We do not collect, store, sell, disclose or profit from face geometry, and it is never used to identify anyone.
Only scan yourself or someone who agrees to be scanned. For a child, a parent or guardian should do the scan or agree to it first. The app asks you to confirm this before your first scan. It scans one person at a time, ignores any others in the background, and asks you to reframe if someone stands in the frame with the person being scanned. The background is removed on your phone before anything else is analyzed.
Scan2Skin 3D: Avatar Creator is not specifically directed at children under 13, but it is built to be safe for them. We collect no personal data from anyone, there are no accounts, ads are child-directed and non-personalized, and there are no social features, chat or public sharing. We recommend that parents do the scan with their child. Contact us with any questions.
Everything the app keeps stays in its private storage on your phone, which other apps cannot read. There is no server holding your data, so none of it can be exposed from us. If we ever learned of a problem affecting personal data, we would act promptly and inform the affected users and authorities where the law requires.
We will post any changes on this page with a new effective date. For material changes, we will tell you in the app before they take effect.
Z Farm Technologies
z.farm.technologies@gmail.com