Privacy Policy
Last Updated: February 7, 2026 · Effective Date: February 7, 2026
1. Introduction
Adam Lewis ("we," "our," or "us") operates the PixoBuild mobile application ("App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.
Important: PixoBuild is not affiliated with, authorized by, sponsored by, or endorsed by The LEGO Group. LEGO® is a trademark of the LEGO Group of companies.
Please read this Privacy Policy carefully. By using the App, you consent to the data practices described in this policy.
2. Information We Collect
2.1 Information You Provide
| Data Type | Purpose | Required |
|---|
| Email address | Account creation, communications | Yes |
| Name (optional) | Account personalization | No |
| Password | Account security | Yes (or use Sign in with Apple) |
| Payment information | Subscription processing (via App Store) | For paid users |
2.2 Information Collected Automatically
| Data Type | Purpose | Retention |
|---|
| Device identifiers | Analytics, fraud prevention | 12 months |
| IP address | Security, approximate location | 30 days |
| App usage data | Service improvement | 12 months |
| Crash reports | Bug fixing | 90 days |
2.3 User-Generated Content
| Data Type | Purpose | Retention |
|---|
| Photos/images for scanning | 3D model generation | Deleted after processing (24 hours) |
| Generated 3D models (.ldr files) | Instruction generation | Until you delete or 90 days after account deletion |
| AI edit prompts | Model modification | 30 days |
| Generated instructions | Your use | Until you delete |
2.4 Information We Do NOT Collect
- Precise GPS location
- Contacts or address book
- Microphone data (except for AR voice commands, processed locally)
- Photos outside of scanning sessions
- Biometric data
- Health or fitness data
3. How We Use Your Information
3.1 Provide the Service
- Create and manage your account
- Process your scans and generate instructions
- Deliver AI-powered editing features
- Provide AR build assistance
3.2 Improve the Service
- Analyze usage patterns to improve features
- Debug and fix technical issues
- Develop new features
3.3 Communicate with You
- Send service-related notifications
- Respond to support requests
- Send important updates about your account
3.4 Ensure Security
- Detect and prevent fraud
- Enforce our Terms of Use
- Protect against abuse of AI features
4. How We Share Your Information
4.1 Service Providers
We share data with third-party providers who help operate our service:
| Provider | Purpose | Data Shared |
|---|
| Supabase | Database, authentication | Account data, project metadata |
| DigitalOcean | Backend hosting | Processing data (encrypted) |
| RunPod | AI processing | AI prompts, model data |
| Apple (App Store) | Payments, Sign in with Apple | Payment info, Apple ID |
| Sentry | Error tracking | Crash reports, device info |
All service providers are contractually bound to protect your data and use it only for specified purposes.
4.2 We Do NOT Sell Your Data
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
4.3 Legal Requirements
We may disclose information if required by law, court order, or to:
- Comply with legal obligations
- Protect our rights or property
- Prevent fraud or security threats
- Protect the safety of users
4.4 Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any change in ownership.
5. Data Security
5.1 Security Measures
We implement industry-standard security measures:
- Encryption in Transit: All data transmitted via HTTPS/TLS 1.2+
- Encryption at Rest: Database and storage encrypted with AES-256
- Authentication: Secure token-based authentication with short-lived tokens
- Access Control: Row-level security on all database tables
- Secure Storage: iOS Keychain for sensitive credentials
- Rate Limiting: Protection against abuse and DDoS attacks
5.2 Your Responsibilities
You are responsible for:
- Keeping your login credentials secure
- Using a strong, unique password
- Logging out on shared devices
- Reporting suspicious account activity
5.3 Breach Notification
In the event of a data breach affecting your personal information, we will notify you within 72 hours via email and/or in-app notification.
6. Data Retention
| Data Type | Retention Period |
|---|
| Account information | Until account deletion + 30 days |
| Uploaded images | Deleted within 24 hours of processing |
| Generated models (.ldr) | Until you delete, or 90 days after account deletion |
| Instructions | Until you delete, or 90 days after account deletion |
| AI prompts | 30 days |
| Usage analytics | 12 months |
| Payment records | As required by law (typically 7 years) |
6.1 Account Deletion
You may request account deletion at any time through:
Upon deletion:
- Your account will be deactivated immediately
- Personal data will be deleted within 30 days
- Some data may be retained for legal compliance
- Anonymized analytics data may be retained indefinitely
7. Your Rights
7.1 All Users
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update inaccurate information
- Deletion: Request deletion of your data
- Portability: Export your data in a standard format
- Objection: Opt out of certain data processing
7.2 California Residents (CCPA)
If you are a California resident, you have additional rights:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt out of the sale of personal information (we do not sell data)
- Right to non-discrimination for exercising your rights
To exercise these rights, contact us at support@pixobuild.com.
7.3 European Union Residents (GDPR)
If you are in the EU/EEA, you have additional rights under GDPR:
- Right to access your data
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
Legal Basis for Processing:
- Contract performance (providing the service)
- Legitimate interests (improving the service, security)
- Consent (marketing communications, optional features)
8. Children's Privacy
8.1 Age Restrictions
- The App is not intended for children under 13 years of age.
- We do not knowingly collect personal information from children under 13.
- If you believe we have collected information from a child under 13, please contact us immediately.
8.2 Parental Controls
If you are a parent or guardian and wish to allow your child (under 13) to use the App:
- You must create the account on their behalf
- You consent to the collection of their data as described in this policy
- You may contact us at any time to review, delete, or restrict their data
8.3 COPPA Compliance
For users under 13 with parental consent:
- We collect only information necessary to provide the service
- We do not use their data for behavioral advertising
- Parents may request data deletion at any time
9. International Data Transfers
Your data may be transferred to and processed in countries other than your own, including the United States. These countries may have different data protection laws.
We ensure appropriate safeguards are in place:
- Standard Contractual Clauses for EU data transfers
- Service providers certified under applicable frameworks
- Encryption of data in transit and at rest
10. Third-Party Links and Services
The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. Please review their privacy policies before providing any information.
11. AI Features and Data Processing
11.1 How AI Features Work
When you use AI editing features:
- Your prompts are sent to our AI processing servers
- AI models process your request to modify your brick model
- Prompts are logged for 30 days for safety and improvement purposes
- We do not use your prompts to train AI models without consent
11.2 AI Safety Measures
To ensure safe AI usage:
- Input prompts are filtered for inappropriate content
- AI outputs are validated before delivery
- Abuse of AI features may result in account restrictions
- We may review flagged interactions for safety purposes
12. Cookies and Tracking
12.1 Mobile App
The PixoBuild mobile app does not use cookies. We use:
- Device identifiers for analytics
- Local storage for app preferences
- Secure token storage for authentication
12.2 Analytics
We use privacy-respecting analytics to understand app usage:
- No cross-app tracking
- No advertising identifiers
- Aggregated, anonymized data only
12.3 Opt-Out
You may opt out of analytics collection in App Settings > Privacy > Analytics.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be indicated by updating the "Last Updated" date at the top of this policy.
For material changes, we will:
- Notify you via email (if you have an account)
- Display an in-app notification
- Require acknowledgment before continued use
Your continued use of the App after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
Adam Lewis
Email: support@pixobuild.com
Response Time: We aim to respond to all requests within 30 days.
15. Additional Disclosures
15.1 Do Not Track
The App does not respond to "Do Not Track" signals as there is no consistent industry standard for mobile apps.
15.2 Apple App Tracking Transparency
We comply with Apple's App Tracking Transparency requirements. The App does not track you across other companies' apps or websites for advertising purposes.
15.3 Attributions
This App uses the LDraw Parts Library, which is provided under the Creative Commons Attribution License. For more information, visit ldraw.org.
By using PixoBuild, you acknowledge that you have read and understood this Privacy Policy.