NFT Alive — Privacy Policy

1. Information We Collect

A. Information You Provide

Wallet & NFT Information (Solana). If you connect a Solana wallet (e.g., Phantom, Solflare), we may collect:

• your public wallet address; and
• NFT-related details needed to display/animate assets (e.g., token identifiers/metadata/traits).

User Content / Media You Create. We collect (or process) content you choose to create, upload, export, or share through the App, such as recorded videos/animations, custom backgrounds/overlays you upload, and exported files you save or share.

Support Communications. If you contact us, we may collect information you provide (e.g., name, email address, message content, and any attachments/screenshots).

B. Information Collected Automatically

Device & Usage Information. When you use the Service, we may automatically collect IP address (and approximate location derived from it), browser/device/OS details, pages/screens viewed, time spent, clicks, feature usage, and crash/error diagnostics.

Camera/Motion Tracking Data (On-Device). With your permission, the App accesses your camera to track facial movements for animation. By default, facial tracking is processed locally on your device (for example using client-side libraries such as MediaPipe or similar). We do not intentionally collect or store “faceprints” or raw biometric templates on our servers.

If you choose to record, export, upload, or share a video, the resulting media file may contain your likeness and is handled as User Content.

Local Storage / Similar Technologies. We may use local storage, indexedDB, or similar browser technologies to store preferences and session-related settings (e.g., selected character, UI settings, last used options).

Analytics. We may use analytics tools (such as Google Analytics or similar) to understand feature usage and improve performance. These tools may use cookies or similar technologies as described below.

C. Information From Third Parties

Blockchain Data. NFT-related information may be retrieved from the public Solana blockchain or through RPC/endpoint providers. Blockchain data is public by nature.

Social Sharing / Platforms. If you share content to third-party platforms (e.g., X, Discord, or others), those platforms may provide us limited information (e.g., confirmation of posting) depending on their settings and APIs.

2. How We Use Information

We use information to:

• Provide and operate the Service (load/animate characters, enable recording, exporting, and sharing).
• Maintain and improve the Service (debugging, performance monitoring, feature development, UX improvements).
• Personalize your experience (remember preferences, preserve session settings).
• Security and abuse prevention (fraud detection, protecting accounts/sessions, enforcing our terms).
• Communicate with you (support replies, service notices, security alerts).
• Marketing (where permitted): If you opt in (or where allowed by law), we may send updates about NFT Alive and related projects. You can opt out at any time.

Legal bases (EEA/UK): We process information based on one or more of the following: consent (e.g., camera permission), contract/performance of a service, legal obligations, and legitimate interests (e.g., security, product improvement).

3. How We Share Information

We do not sell your personal information in the ordinary sense. We disclose information only as needed:

A. Service Providers

We may share information with vendors who help us operate the Service (e.g., hosting, analytics, storage, error monitoring). These providers are authorized to process information only on our instructions and for the purposes described in this policy.

B. Legal and Safety

We may disclose information if we believe in good faith that disclosure is necessary to comply with law or legal process, protect rights/property/safety, or investigate fraud/security incidents/violations of our terms.

C. Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate protections.

D. Public/Third-Party Sharing by You

If you export and post content publicly, it may be viewed, saved, or reshared by others. Once shared externally, we cannot control how third parties use it.

Facial tracking data: We do not share on-device facial tracking measurements with third parties unless (1) you choose to upload/share resulting media, or (2) you explicitly authorize a feature that requires transmission.

4. Cookies and Similar Technologies

We use cookies and similar technologies for:

• Essential functionality (security, basic performance, settings);
• Analytics (understanding usage and improving the Service).

You can control cookies through your browser settings and, where available, in-app controls. If you disable certain cookies or storage mechanisms, some features may not work properly.

5. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect information (e.g., HTTPS, access controls, and least-privilege practices where applicable). However, no system is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We keep information only as long as necessary for the purposes described:

• Wallet address / session data: typically retained for the duration of your session and/or as needed for service functionality and security.
• On-device processing: facial tracking measurements are processed in-memory/on-device by default and are not stored by us as raw biometric templates.
• User Content: if you only create/export locally, content may remain on your device. If you choose to upload/store content on our systems (if offered), we retain it only as long as needed to provide that storage feature or as described at the point of collection, unless you delete it sooner or law requires longer retention.

7. Your Rights and Choices

A. General Choices

• Camera permissions: You can revoke camera access at any time in your browser/device settings.
• Marketing emails: You can opt out using the unsubscribe link (if provided) or by contacting us.
• Cookies/storage: Manage through browser settings; some functionality may be impacted.

B. GDPR (EEA/UK) Rights

Depending on your location, you may have the right to access, correct, or delete your personal data; restrict or object to certain processing; request data portability; and withdraw consent (where processing is based on consent). You also have the right to lodge a complaint with your local data protection authority.

C. California (CCPA/CPRA) Rights

California residents may have the right to know what personal information is collected/used/disclosed (and, if applicable, sold or shared), request deletion (subject to exceptions), correct inaccurate personal information, and opt out of “sale” or “sharing” as those terms are defined under CPRA.

We do not intentionally “sell” personal information. If we engage in analytics/advertising configurations that could be considered “sharing” under CPRA, we will provide an opt-out mechanism where required.

Non-discrimination: We will not discriminate against you for exercising your rights.

D. How to Exercise Rights

Email us at privacy@beyondthegrove.com. We may need to verify your request before fulfilling it. We aim to respond within 30 days, subject to extensions permitted by law.

8. Children’s Privacy

The Service is not intended for children under 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate action.

9. International Data Transfers

We may process information in the United States and other countries. Where required (e.g., EEA/UK), we use appropriate safeguards such as Standard Contractual Clauses or other lawful mechanisms.

10. Contact Us

If you have questions or concerns about this Privacy Policy, contact:

• Beyond the Grove LLC
• Email: privacy@beyondthegrove.com
• Mailing Address: [Insert Address], USA

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Service and/or by other means where required. Continued use of the Service after an update means you accept the revised policy.