Privacy Policy

1. Introduction

This Privacy Policy explains how makermate OÜ ("we," "us," or "our"), located at Tornimäe tn 5, 10145, Tallinn, Estonia, collects, uses, stores, and protects your personal information when you use the Replicmate mobile application ("App").

We are committed to protecting your privacy and ensuring the security of your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using the App, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and storage of your data as described herein.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and password (securely hashed) when you create an account
• Profile Information: Optional profile picture and preferences
• User Content: Sketches, drawings, photos, and images you upload; text prompts and descriptions; generated 3D models; and G-code files
• Printer Data: Printer names/configurations you save and local network addresses for printer connectivity
• Payment Information: Payment processing is handled by Apple App Store or Google Play; we receive transaction history and receipts from the app stores
• Communications: Messages you send to our support team

2.2 Information Collected Automatically

• Usage Data: How you interact with the App, feature usage, session duration, and metadata
• Device Information: Device type, operating system version, unique device identifiers, and app version
• Log Data: IP address, access times, error/crash reports, and performance data
• Camera Access: Access to your device camera to capture images (only with your explicit permission)
• Local Network Access: Information about 3D printers discovered on your local network (for printing functionality)

2.3 Information from Third Parties

• Authentication Services: If you sign in using Apple ID or other third-party services, we receive basic profile information they provide

3. How We Store Your Data

3.1 Cloud Storage

Your uploaded images and generated 3D models are stored on our servers. We use Supabase, a secure cloud infrastructure platform with servers located in the European Union, to store your data. Specifically:

• All images you upload are stored in secure cloud storage
• All 3D models generated from your images are stored alongside your account
• Your data is associated with your user account and isolated from other users
• Data is encrypted in transit (TLS) and at rest

3.2 Who Can Access Your Data

Your uploaded content is private and accessible only to:

• You: Only you can access, view, download, and delete your own uploaded images and generated models through the App
• makermate OÜ Administrators: Our authorized personnel have administrative access to the database and storage systems (via Supabase dashboard) for the following legitimate purposes:
  • Providing customer support when you request assistance
  • Investigating and resolving technical issues
  • Enforcing our Terms of Service and content policies
  • Complying with legal obligations and lawful requests from authorities
  • Ensuring platform security and preventing abuse
• Supabase (Infrastructure Provider): As our hosting provider, Supabase has technical access to infrastructure but is bound by strict data processing agreements and does not access your content except as necessary for service provision

We do not share, sell, or provide access to your uploaded images or 3D models to any other third parties.

4. How We Use Your Information

We use the collected information for the following purposes:

• Provide Services: Process your images, generate 3D models, and facilitate printing to your local network printers
• Account Management: Create, maintain, and secure your account
• Improve the App: Analyze usage patterns to enhance features and user experience
• Customer Support: Respond to your inquiries, troubleshoot issues, and provide assistance
• Security: Detect and prevent fraud, abuse, unauthorized access, and security threats
• Legal Compliance: Comply with legal obligations and enforce our Terms of Service
• Communications: Send service updates, technical notices, and promotional messages (promotional messages only with your consent)

4.1 AI Model Improvement

We may use anonymized and aggregated data (not your individual images) to improve our AI algorithms.We do not use your personal uploaded images to train AI models without your explicit opt-in consent.If we offer an option to contribute your data to AI training, it will be clearly presented as an optional, opt-in feature.

5. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contract Performance (Article 6(1)(b)): Processing necessary to provide the App services you've requested, including storing your images and generating 3D models
• Legitimate Interests (Article 6(1)(f)): Improving our services, ensuring security, preventing fraud, and administering our platform. Our legitimate interests do not override your fundamental rights and freedoms
• Consent (Article 6(1)(a)): Marketing communications, optional features, and any use of your data for AI training (you can withdraw consent at any time)
• Legal Obligation (Article 6(1)(c)): Compliance with applicable laws and regulations, including responding to lawful requests from authorities

6. Data Sharing and Disclosure

We do not sell your personal information or uploaded content. We may share your data with:

• Infrastructure Providers: Supabase (EU-hosted database, authentication, and file storage) for hosting and data management
• AI Processing Services: Third-party AI services (e.g., FAL.ai) to generate 3D models from your images. These services process your images solely to provide the model generation and do not retain your data
• Payment Processors: Apple App Store and Google Play handle all payment processing; we only receive transaction confirmations
• Legal Requirements: When required by law, court order, legal process, or to protect our rights, property, or safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the successor entity (you will be notified of any such change)

All third-party service providers are bound by data processing agreements and are contractually obligated to protect your data and use it only for the specified purposes.

7. Data Storage and Security

7.1 Data Location

Your data is stored on secure servers located in the European Union (Supabase EU region). Some processing (such as AI model generation) may occur in other jurisdictions. Where data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

7.2 Security Measures

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication and access controls
• Row-level security ensuring users can only access their own data
• Regular security monitoring and updates
• Secure backup and disaster recovery procedures
• Access logging and audit trails for administrative access

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Data Retention

We retain your personal information for as long as necessary to provide services and fulfill the purposes outlined in this Privacy Policy:

• Account Data: Retained until you delete your account
• Uploaded Images and 3D Models: Retained until you delete them or close your account
• Usage and Analytics Data: Retained for up to 2 years for service improvement purposes
• Legal and Compliance Data: Retained as required by law or to resolve disputes (typically up to 7 years for financial records)
• Support Communications: Retained for up to 3 years after resolution

Upon account deletion, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our agreements).

9. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights regarding your personal data:

• Right to Access (Article 15): Request a copy of your personal data we hold
• Right to Rectification (Article 16): Correct inaccurate or incomplete data
• Right to Erasure (Article 17): Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing (Article 18): Limit how we use your data in certain circumstances
• Right to Data Portability (Article 20): Receive your data in a structured, commonly used, machine-readable format
• Right to Object (Article 21): Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent (Article 7(3)): Withdraw consent at any time (without affecting the lawfulness of prior processing)
• Right to Lodge a Complaint: File a complaint with your local data protection authority (for Estonia: Andmekaitse Inspektsioon, www.aki.ee)

To exercise these rights: Contact us at support@makermate.org with your request. We will respond within 30 days. We may need to verify your identity before processing your request.

In-App Controls: You can also delete your uploaded images, 3D models, and account directly within the App settings.

10. Children's Privacy

The App is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover we have collected information from a child under 16, we will delete it promptly.

11. Cookies and Tracking Technologies

The App may use cookies and similar technologies to:

• Maintain your login session and authentication state
• Remember your preferences and settings
• Analyze app performance and usage patterns
• Improve user experience

We do not use tracking technologies for advertising purposes. You can manage cookie preferences through your device settings. Note that disabling certain cookies may limit app functionality.

12. Third-Party Links

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of significant changes by:

• Posting the updated policy in the App
• Updating the "Last Updated" date at the top of this page
• Sending an email notification for material changes affecting your rights
• Requesting renewed consent where required by law

Your continued use of the App after changes constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, please stop using the App and delete your account.

14. International Users

If you access the App from outside the European Union, please note that your data will be transferred to and processed in the EU (and potentially other jurisdictions for AI processing). By using the App, you consent to such transfers. We ensure appropriate safeguards are in place for all international data transfers in accordance with GDPR requirements.

15. Data Controller Information

The data controller responsible for your personal data is:

16. Contact Us

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your data protection rights, please contact us at:

We aim to respond to all data protection inquiries within 30 days.