Privacy Policy
Last Updated: [DATE]
This Privacy Policy explains how Arte Virtual Gallery ("Arte", "we", "our", or "us") collects, uses, stores, and shares information when you use our website, Android application, and iOS application (collectively, the "Services").
By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy.
1. Scope
This Privacy Policy applies to:
- Arte Virtual Gallery Website
- Arte Virtual Gallery Android Application
- Arte Virtual Gallery iOS Application
Certain features and data processing activities differ between platforms. Where applicable, platform-specific information is provided.
2. Information We Collect
Account Information
Android App
Users may create an account using:
- Email and Password through Firebase Authentication
- Google Sign-In
We may collect:
- Name
- Email Address
- Profile Picture
- User Identifier
Passwords are managed by Firebase Authentication and are not stored directly by us.
iOS App
Users authenticate using Sign in with Apple.
Depending on the options selected during Sign in with Apple, we may receive:
- Name
- Email Address (including Apple's private relay email address, if selected)
- Profile Picture
- User Identifier
User-Generated Content
When creating exhibitions, users may upload or provide:
- Artwork images and photographs
- Audio files and background music
- Artwork descriptions and exhibition descriptions
- Credits and attribution information
- AI-generated text created using features available within the application
- Exhibition configuration and presentation settings
Usage Information
We collect information about how users interact with our Services, including:
- Exhibition creation events
- Exhibition publishing events
- User registration events
- Subscription-related events
- Feature usage information
- Application settings usage
This information is used to improve functionality, reliability, and user experience.
Device Information
We may collect limited device information, including:
- Operating system version
- Device model
- Application version
- Language settings
We do not intentionally collect device advertising identifiers for analytics purposes.
Crash Logs and Diagnostics
We may collect error reports, crash logs, and diagnostic information to identify and resolve technical issues.
Subscription Information
Android
Subscription purchases are processed entirely through Google Play Billing.
We do not collect or store payment card information.
iOS
The iOS application currently does not offer paid subscriptions.
3. Platform-Specific Analytics
Android Application
The Android application uses:
- Google Analytics for Firebase
- Internal analytics systems
Firebase Analytics may collect information in accordance with Google's privacy practices.
We do not intentionally transmit user names or email addresses to Firebase Analytics.
iOS Application
The iOS application does not use Google Analytics.
The iOS application uses internal analytics systems to understand application usage and improve functionality.
Website
The website uses Google Analytics only after obtaining user consent where required by applicable law.
The website does not provide user account functionality.
Analytics data collected through the website is used to understand website usage and improve website performance.
4. How We Use Information
We use information to:
- Provide and maintain the Services
- Create and manage user accounts
- Publish and display exhibitions
- Improve application functionality and usability
- Diagnose and resolve technical issues
- Process subscriptions on Android
- Communicate important service information
- Respond to support requests
- Protect the security and integrity of the Services
We do not sell personal information.
5. Public Information and Published Exhibitions
When a user publishes an exhibition, certain information may become visible to exhibition visitors.
Depending on the user's settings, this may include:
- Display name
- Profile image or avatar
- Artwork images
- Audio narration
- Artwork descriptions
- Exhibition information
Users are responsible for ensuring that any information they choose to publish is appropriate for public display.
6. Service Providers
We use third-party service providers to operate and improve the Services, including:
- Microsoft Azure for hosting, databases, storage, and content delivery
- Azure Front Door and related content delivery services
- Google Firebase Authentication
- Google Analytics for Firebase (Android only)
- Google Play Billing (Android subscriptions)
- Apple Sign In (iOS authentication)
These providers may process information on our behalf in accordance with their own privacy policies and contractual obligations.
7. Data Storage and International Transfers
Our services are primarily hosted in the United States.
User accounts, exhibition data, uploaded content, and associated information may be stored and processed on servers located in the United States.
If you access the Services from another country, your information may be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction.
We take reasonable measures to protect information during such transfers.
8. Data Security
We use commercially reasonable security measures to protect information from unauthorized access, disclosure, alteration, or destruction.
These measures include:
- HTTPS encryption during data transmission
- Access controls
- Secure cloud infrastructure
- Authentication mechanisms provided by trusted service providers
No method of transmission or storage can be guaranteed to be completely secure.
9. Data Retention
We retain information only for as long as necessary to provide the Services and fulfill legitimate business purposes.
When a user requests account deletion:
- Account information is removed from the application
- Associated exhibitions and uploaded content are scheduled for deletion
- Deletion is generally completed within 72 hours
Analytics information associated with the user is also removed where reasonably possible.
Certain information may be retained longer if required for legal, security, fraud prevention, or operational purposes.
10. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your information
- Withdraw consent where processing is based on consent
- Object to certain processing activities
To exercise these rights, contact us using the details provided below.
11. Email Communications
We may send emails related to:
- Service updates
- Technical notices
- Exhibition-related notifications
- Support communications
- Important changes to the Services
We do not send marketing or promotional emails.
You may opt out of non-essential communications by contacting us.
12. Website Cookies and Tracking Technologies
This section applies only to the website.
We use cookies and similar technologies to:
- Maintain website functionality
- Measure website performance
- Understand website usage through analytics
Analytics cookies are not activated until consent is provided where required by applicable law.
Users may:
- Accept or reject analytics cookies
- Modify cookie preferences at any time
- Withdraw previously granted consent
Analytics data collected through Google Analytics does not intentionally include personally identifiable information.
Users may also remove cookies through browser settings.
13. Children's Privacy
The Services are intended for users who meet the age requirements established by applicable app stores and local laws.
We do not knowingly collect personal information from children below the minimum age permitted to use the Services.
If we become aware that personal information has been collected from a child in violation of applicable laws, we will take reasonable steps to delete such information.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
When changes are made, the updated version will be posted within the Services and the effective date will be updated.
Continued use of the Services after the revised Privacy Policy becomes effective constitutes acceptance of the updated policy.
15. Contact Us
For privacy questions, account deletion requests, or other inquiries, contact: