Privacy Policy — HelloWorld
This policy applies to the iOS application "HelloWorld", developed by Fermata ("we", "us"). Our principle is simple: we collect only what is necessary to provide the service, and we never sell your personal data.
1. Information We Collect
1.1 Anonymous identifier
There is no sign-up. The app uses Firebase Anonymous Authentication, which means we never ask for — and never receive — your name, email address, or any other contact information. Firebase simply assigns your installation a randomly generated anonymous identifier, which we use solely to manage service quotas and prevent abuse.
1.2 Images and voice
The app's core feature is real-time spoken narration: photos you take and voice questions you ask are sent directly from your device to our third-party AI service provider (currently Google's Gemini API) to generate live tour-guide responses.
- Your images and voice are never stored on our servers — our backend only issues short-lived access tokens and never sees or handles your photos or audio.
- Images and voice are used only to generate the narration in that moment, never for advertising or marketing.
- Our AI provider's handling of this data is governed by its own privacy policy and API terms (currently the Google Privacy Policy).
1.3 Usage records
To manage service quotas and prevent abuse, we record how many narration sessions you start and when (stored in Google Firestore). These records contain counts and timestamps only — no photo or conversation content.
2. Device Permissions
- Camera — to photograph what you want explained. No images are captured without your action.
- Microphone — to receive your spoken questions, active only during a narration session.
You can revoke these permissions anytime in iOS Settings; the related features will stop working.
3. How We Use Information
We use the information we collect only to:
- provide real-time image recognition and spoken narration;
- verify requests and manage service quotas;
- keep the service secure and prevent abuse;
- improve service quality, using de-identified statistics only.
We do not sell or rent your personal data, and we do not use it for third-party advertising.
4. Third-Party Services
- Google Firebase (authentication & database) — Privacy and Security in Firebase
- AI model provider (image analysis & voice narration) — currently the Google Gemini API (Google Privacy Policy)
If we switch or add service providers, we will update this page before the change takes effect.
5. Data Retention & Deletion
- Usage records are tied only to your anonymous identifier and are retained while the service operates.
- You may request deletion of the records tied to your anonymous identifier at any time by emailing us (the identifier is shown in the app's settings — include it so we can locate your records); we will complete the deletion within 30 days of your request.
- Deleting the app removes the anonymous identifier from your device; it cannot be re-associated with you afterwards.
6. Children's Privacy
This app is not directed at children under 13. If we learn that we have collected personal information from a child without parental consent, we will delete it promptly.
7. Security
All network traffic is encrypted (HTTPS / WSS). Access to the AI service uses short-lived tokens with usage and expiry limits, minimizing exposure.
8. Changes to This Policy
We may update this policy from time to time. Material changes will be announced in the app or on this page, and take effect when posted here.
9. Contact
Questions about this policy or your data: support@fermatalabs.co