Your rooms. Your data.

2. Data processed and purposes

Camera, LiDAR and RoomPlan

For a room scan, FormaMate accesses the camera and LiDAR sensor after you grant system permission. Apple’s RoomPlan framework processes image and depth information to determine walls, openings, dimensions and recognised object categories. FormaMate does not store a video recording or continuous camera feed.

Room projects and measurements

Stored data includes the project name you choose, creation and modification time, structured room geometry, dimensions, wall and object counts, area values, manual dimension corrections and the generated 3D model. Room geometry can reveal information about private or business interiors and is therefore treated like a sensitive document.

Reports and exports

At your request, FormaMate creates PDF reports and USDZ, OBJ, STL, glTF, DAE, DXF and JSON files, among others. They are created locally. You choose the recipient or destination only when using the iOS share sheet.

Data not processed

FormaMate contains no advertising, analytics or tracking SDKs and creates no usage profiles. The app does not request location, contacts, microphone, advertising identifier or biometric data.

3. Local storage and planned iCloud backup

In the current development build, projects are stored in your device’s private app container. Unless you initiate an export, they do not leave the device.

An automatic iCloud backup is planned for a future version. If you set it up, FormaMate creates an archive of your projects. It may contain room data, dimensions, corrections, project metadata, 3D models and project files managed by FormaMate. The archive is encrypted on your device before it is transferred to the area of iCloud Drive designated for FormaMate. The developer operates no backup server of their own.

Password encryption

A 256-bit key is derived from your password using PBKDF2-HMAC-SHA-256, a random 16-byte salt and 600,000 iterations. The archive is then encrypted and authenticated against unnoticed modification using AES-256-GCM. The password itself is not part of the backup file.

An encrypted backup cannot be restored without the password used when it was created. FormaMate cannot read the password from the archive or reset it. Changing or deleting a saved password does not alter archives that already exist.

Password in iCloud Keychain

At your request, FormaMate is intended to store the backup password as a synchronisable iCloud Keychain item. When iCloud Keychain is enabled, Apple synchronises Keychain contents end-to-end encrypted between your trusted devices. The password is not sent to the developer. You can explicitly delete the item in the app.

Apple as cloud provider

When you use iCloud, Apple processes account, storage, file and technical connection data under the terms of your Apple Account. FormaMate’s additional password encryption of the archive remains independent of the iCloud protection level.

• Apple Privacy Policy
• iCloud data security
• iCloud Keychain security

4. Exports, sharing and third-party data

Files you send to other apps, people or cloud services using the iOS share sheet are subsequently subject to the terms of the chosen recipient. Such exports are not automatically protected by the iCloud backup password. Before sharing, check whether a plan, report or 3D model contains confidential information.

Only scan rooms belonging to others or rooms containing people when you are authorised to do so. Where possible, do not point the camera at documents, screens or other content that is not required for measurement.

5. Legal bases

Where the GDPR applies, processing required for app features you use is based on Article 6(1)(b) GDPR. Camera and LiDAR access as well as the iCloud backup you configure are based on your consent under Article 6(1)(a) GDPR where required. Processing technically necessary for security and functionality is based on Article 6(1)(f) GDPR. You can change system permissions in iOS or iPadOS at any time.

Apple receives iCloud data as part of the iCloud services you use. You choose any other recipients through your own sharing and export actions. No automated decision-making or profiling takes place.

6. Retention and deletion

Local projects remain stored until you delete them or the app data. Files you export yourself remain at the chosen destination until you remove them. After the backup feature is introduced, encrypted iCloud backups will remain in your iCloud storage until replaced by a new backup or deleted by you using the intended iCloud or app controls.

Deleting the app removes the local app container from that device, but not necessarily previously exported files, future iCloud backups or a password item saved in iCloud Keychain. Delete those items separately when needed. Deleting the password does not delete an already encrypted archive.

7. Your privacy rights

Where the legal requirements are met, you have rights of access, rectification, erasure, restriction, data portability and objection. You can withdraw consent at any time with effect for the future. You can also lodge a complaint with a data protection supervisory authority.

Because the developer cannot access your local projects or the contents of an encrypted iCloud backup, they cannot directly view, decrypt or modify this data for you. Your legal rights and ability to contact the controller remain unaffected.

8. Date and controller

Last updated: 26 August 2026. FormaMate is in development. This policy will be updated before release and whenever features or data processing materially change.

Controller
Fabian Vocke
Am Autobahnzubringer 1
76709 Kronau
Germany

Email
privacy@mate.build