Privacy Policy - Avatars for the Masses App

Last updated: March 11th, 2026

1. Overview

This Privacy Policy describes how the Avatars for the Masses mobile application ("the App") collects and processes data when generating three-dimensional avatars from smartphone-captured images.

The App captures images and sensor data in order to reconstruct a three-dimensional avatar using photogrammetry techniques.

The system was developed in a research context at TU Dortmund University. Users may optionally grant permission for their captured data or generated avatars to be used for scientific research or publications. Granting such permissions is entirely voluntary and is not required to use the App.

2. Data Controller

Responsible for data processing:

TU Dortmund University
Graphics & Geometry Group
Otto-Hahn-Str. 16, 44277 Dortmund, Germany
Email

For general information about data protection at the university please refer to the university privacy policy.

3. Data Collected by the App

When performing a scan, the App may collect the following data:

• Image Data: The smartphone camera records image and/or video recordings from which your personalized avatar is created.
• Depth Data: If available, depth data is recorded using the built-in LiDAR sensor, which is used to better scale the avatar.
• Camera Metadata: Information such as lens model, focal length, and capture parameters required for photogrammetry processing.
• Camera Acceleration: The smartphone's acceleration sensors record the device's movements during the scan.

4. Purpose of Data Processing

Captured data is primarily used to generate a three-dimensional avatar based on images and sensor data recorded by the App.

• Generating a 3D avatar reconstruction for the user.

Additional uses of captured data may occur only if the user explicitly grants permission within the App. These optional uses may include:

• Evaluating and improving avatar reconstruction algorithms;
• Using captured images or reconstructed avatars in scientific publications or presentations.

If the user does not grant such permissions, captured data is used solely for generating the avatar and is deleted after processing as described below.

The data is not used for advertising, marketing, or commercial profiling.

5. Research Consent

Before starting a scan, users are asked to complete a consent form within the App. Users may choose whether captured data may be stored and used for research purposes.

If the user does not grant research permission, captured data is used only to generate the avatar and is automatically deleted after processing.

If the user grants research permission, captured data may be stored and used for scientific research, including the evaluation and improvement of avatar reconstruction methods.

6. Data Retention and Research Permissions

After completing a scan, captured data is processed to generate a reconstructed avatar. Users may optionally grant specific permissions for the research use of their data within the App.

If the user does not grant any research permissions, captured image and sensor data are used only for generating the avatar and are automatically deleted after processing. The generated avatar files remain available for download for up to 3 days, after which they are automatically deleted.

If the user grants one or more research permissions, the corresponding data may be securely stored and used only for the purposes explicitly authorized by the user. These permissions may include:

• Algorithm Improvement: Use of captured data to train, evaluate, or improve statistical or machine learning models used in the avatar reconstruction process.
• Publication of Captured Data: Use of captured images in scientific publications or presentations, either in anonymized or non-anonymized form, depending on the user's explicit consent.
• Publication of Reconstructed Avatars: Use of reconstructed avatar models in scientific publications or presentations, either in anonymized or non-anonymized form, depending on the user's explicit consent.

Only the permissions explicitly granted by the user within the App are used. Users may choose any combination of these permissions.

7. Data Sharing

Collected data is not sold or shared with third parties for marketing purposes.

Data may be processed using computing infrastructure operated by TU Dortmund University.

Research results may be published in scientific publications. In such cases, data will be anonymized whenever possible.

8. Device Permissions

The App may request access to the following device features:

• Camera (required for capturing images);
• Depth sensors (used to improve reconstruction quality);

9. Data Security

Appropriate technical and organizational measures are implemented to protect collected data against unauthorized access, loss, or misuse.

10. User Rights

Under applicable data protection laws, including the General Data Protection Regulation (GDPR), users may have the right to:

• Request access to their personal data;
• Request correction or deletion of their data;
• Withdraw previously granted consent.

Requests can be sent via email.

11. Changes to this Policy

We reserve the right to update or modify this Privacy Policy if necessary. The latest version will always be available on this website.