Privacy Policy — Digital Passport – RTM

1. Information We Collect

We may collect limited data necessary to enable main app functions:

• Email address: for account creation and verification through a one-time code (OTP).
• Location data: (while using the app) to activate AR features inside the museum.
• Camera access: for AR selfie experiences within the museum.
• Device logs and analytics: for performance and stability improvements.

No payment or financial information is collected.

2. Use of Information

The data is used only to:

• Create and verify user accounts.
• Enable AR and interactive museum experiences.
• Improve technical performance and ensure app functionality.

All data transmitted through the app is encrypted and securely stored.

3. Data Retention

User data is kept only as long as the account is active and required for service operation.

When an account is deleted, all personal data is permanently removed within 90 days.

4. Data Sharing

User data is not shared, sold, or disclosed to any third parties.

If technical partners are used, they operate strictly under confidentiality and data protection requirements.

5. Account and Data Deletion

Users can delete their account directly from within the app by going to:

Settings → Delete Account

Once confirmed, the account and all associated data will be permanently deleted within 90 days. This action cannot be undone.

6. Children’s Privacy

The app is designed for general museum visitors and is not intended for children under 9 years of age. No data is knowingly collected from users under 13.

7. Policy Updates

This policy may be updated from time to time. The new effective date will appear at the top of this page.