Privacy Policy

SeekAR — Block Protocol LLC
Effective: August 12, 2025

Introduction

This Privacy Policy applies to the SeekAR mobile application (referred to throughout this document as "the Application"), developed and maintained by Block Protocol LLC (referred to as "the Service Provider") as a free service for mobile devices. The Application is provided on an "AS IS" basis.

SeekAR is a next-generation augmented reality, AI-powered, and blockchain-integrated platform that creates gamified real-world experiences for its users. Given the nature of these experiences, the Application interacts with several categories of personal data in order to deliver its features fully and safely. This policy describes in complete detail what data is collected, why it is collected, how it is handled, with whom it may be shared, and the rights available to users with respect to their personal information.

By downloading and using the Application, you consent to the data practices described in this Privacy Policy. This policy should be reviewed regularly, as it may be updated from time to time to reflect changes in data practices, applicable laws, or Application features.

Part I — Information Collection and Use

The Application collects information when you download and use it. This includes technical data gathered automatically during use, such as your device's Internet Protocol (IP) address, the pages or sections of the Application you visit, the time and date of your visits, the duration of time spent on those pages, and information about the operating system running on your mobile device.

Beyond this automatically collected technical data, the Application collects several categories of personal information, each described in full below.

All data collected by the Application is transmitted and stored using encryption in transit, ensuring that information is protected as it travels between your device and the Service Provider's systems.

1. Account Creation

The Application supports multiple methods for users to create and access their accounts. These include username and password authentication, username combined with other forms of authentication, username combined with both password and additional authentication factors, and OAuth-based authentication through supported external identity providers. The account creation method used by a given user determines which account-related identifiers are collected and retained by the Application.

2. Personal Information

The Application collects personally identifiable information including your name, email address, and user identifiers (User IDs).

Your name is collected because it is required to support core app functionality, including personalizing the user interface and identifying your profile within the platform. This data is collected only and is not shared with third parties.

Your email address is similarly required and is collected exclusively to support app functionality, including account authentication, service-related communications, and the delivery of important notices. This data is collected only and is not shared with third parties.

User IDs — the unique identifiers assigned to your account or session — are required and are collected for a broader set of purposes. These include supporting core app functionality, conducting internal analytics to understand how the Application is used, enforcing security and fraud prevention measures, delivering advertising or marketing communications relevant to your profile, and managing account-level features and permissions. User IDs are collected only and are not shared externally.

3. Location Data

The Application requires access to both approximate and precise location data from your device. Location access is mandatory and cannot be disabled by users without affecting core app functionality.

Approximate location data — identifying your general geographic area without pinpointing your exact position — is both collected and shared. It is collected to support core app functionality and to conduct internal analytics regarding how users engage with location-based features across different geographic regions. Approximate location data is also shared with third parties for the purposes of supporting app functionality, delivering advertising or marketing relevant to your general region, and providing personalized content and experiences based on geographic context.

Precise location data — exact geographic coordinates derived from GPS or equivalent technologies — is both collected and shared, and it serves the broadest range of purposes of any data type in the Application. This reflects the fact that SeekAR's core experience is built around real-world, location-anchored augmented reality. Precise location data is collected to support AR features and other core functionality that depends on exact real-world positioning, to conduct detailed usage analytics, to transmit developer communications relevant to your specific location, to apply security and fraud prevention measures tied to geographic activity patterns, to enable location-targeted advertising and marketing, to personalize content and features to your precise environment, and to manage account features or service conditions that depend on geographic parameters. This same data is shared with third-party service providers for all of these same purposes.

4. Messages

The Application collects three forms of messaging data: emails, SMS or MMS messages, and other in-app messages. All three types are required and cannot be disabled by the user.

Emails are collected exclusively to support core app functionality, including communication between users and the platform and the delivery of service-related notifications.

SMS or MMS data is collected solely to support core app functionality and is processed ephemerally, meaning it is not retained after the relevant processing task is complete and is not stored persistently by the Application.

Other in-app messages are collected exclusively to support core app functionality, including interactions within the Application's own messaging and communication systems.

5. Photos and Videos

The Application requires access to photos and videos on your device. Both data types are collected only and are used exclusively to support core app functionality, particularly in the context of augmented reality features that require access to the device camera and media library for overlaying digital content onto physical environments or capturing experiences within the Application's interactive sessions.

6. Health and Fitness Information

The Application collects health-related information and fitness-related information. Both categories are required and are used exclusively to support core app functionality. This data is not shared with third parties.

Health information enables the Application to integrate health context into its experiences where relevant, supporting features that respond to a user's general physical condition as part of SeekAR's broader gamified engagement model.

Fitness information is used in conjunction with the Application's challenge and reward systems. The Application requests the Android ACTIVITY_RECOGNITION permission in order to detect and monitor physical activities such as walking, running, or cycling directly through your device's sensors. This permission powers the Application's challenge and reward features, which are designed to recognize real-world physical activity as part of SeekAR's gamified experience. By detecting movement patterns, the Application is able to trigger in-app events, validate challenge completions, and attribute rewards tied to physical engagement in the real world. No activity recognition data is used for advertising purposes, and it is not shared with third parties. This permission may be revoked at any time through your device's application settings, though doing so will disable the activity-based challenges and rewards that depend on it.

7. App Performance and Diagnostic Data

The Application collects technical data related to its own performance. This includes crash logs, diagnostic information, and other app performance metrics.

Crash logs are required and are collected automatically to support core app functionality — specifically, to identify, diagnose, and resolve technical failures that affect the user experience.

Diagnostic information and other app performance data are optional and are collected only when users choose to allow them. When collected, this data is used solely to monitor, maintain, and improve the stability and responsiveness of the Application over time.

8. Files and Documents

The Application may optionally collect files and documents accessible from your device. This collection is user-controlled and is triggered only in contexts where your direct interaction with the Application involves files or documents. When collected, this data is used solely to support core app functionality and is not shared with third parties.

9. Device Identifiers and Other IDs

The Application collects device identifiers and similar technical identifiers. This data is required and cannot be disabled. Device identifiers are both collected and shared, and are processed ephemerally — meaning they are used for real-time session handling and are not stored persistently beyond the immediate purpose.

Device identifiers are collected for the purposes of supporting core app functionality that depends on device-level recognition, enforcing security and fraud prevention measures, and enabling advertising and marketing systems that rely on device-level targeting to deliver relevant promotions and measure campaign performance. The same data is shared with third parties for app functionality, security and fraud prevention, and advertising or marketing purposes.

Part II — Third-Party Access and Data Sharing

Only aggregated, anonymized data is periodically transmitted to external services to assist the Service Provider in improving the Application and their services. The Service Provider may share your information with third parties in the ways described in this section.

The Application may disclose both user-provided and automatically collected information when required to do so by law — for example, in response to a subpoena or similar legal process — or when the Service Provider believes in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request. Information may also be shared with trusted service providers who work on the Service Provider's behalf, who do not have independent use of the information disclosed to them, and who have agreed to adhere to the rules set forth in this Privacy Policy.

The Application integrates the following third-party services, each of which operates under its own privacy policy. Users are encouraged to review those policies directly to understand how each provider handles data received from the Application:

Part III — Opt-Out Rights

You may stop all collection of information by the Application at any time by uninstalling it. You may use the standard uninstall processes available on your mobile device or through the applicable mobile application marketplace.

For optional data types — specifically diagnostic information, other app performance data, and files and documents — collection can be controlled within the Application's settings without requiring a full uninstall.

For the ACTIVITY_RECOGNITION permission on Android, this may be revoked at any time through your device's application permissions settings. Revoking this permission will disable activity-based challenges and rewards but will not otherwise affect your use of the Application.

Part IV — Data Retention

The Service Provider retains user-provided data for as long as you use the Application and for a reasonable period thereafter in order to fulfill legitimate operational, legal, or administrative needs. Data that is processed ephemerally — specifically SMS/MMS data and device identifiers — is not retained beyond the immediate purpose for which it was collected and is discarded at the end of each relevant processing session.

If you would like the Service Provider to delete user-provided data that you have submitted through the Application, please contact them at support@seekprotocol.ai. The Service Provider will respond within a reasonable timeframe.

Part V — Children

The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13. The Application is not directed at anyone under the age of 13, and the Service Provider does not knowingly collect personally identifiable information from children in that age group. If the Service Provider discovers that a child under 13 has provided personal information, it will be deleted from their servers immediately. If you are a parent or guardian and you believe your child has provided personal information to the Application, please contact the Service Provider at support@seekprotocol.ai so that they may take the necessary corrective action.

Part VI — Security

The Service Provider is committed to safeguarding the confidentiality and integrity of your information. All data collected by the Application is encrypted in transit. Physical, electronic, and procedural safeguards are maintained to protect the information that the Service Provider processes and retains. Where data is transmitted to third-party service providers, the Service Provider makes reasonable efforts to ensure such sharing is limited, purpose-bound, and subject to appropriate data handling agreements.

Part VII — Data Deletion Requests

Users who wish to request the deletion of their account and all associated data may submit a request through the SeekAR website at: https://www.seekprotocol.ai/

Alternatively, deletion requests may be submitted by contacting the Service Provider directly at support@seekprotocol.ai. The Service Provider will process all deletion requests within a reasonable timeframe.

Part VIII — Changes to This Policy

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes by updating this page with the new Privacy Policy and revising the effective date shown at the top of this document. Where changes are material, the Service Provider may also notify users through the Application itself. You are advised to review this Privacy Policy regularly. Continued use of the Application following the posting of any changes constitutes your acceptance of those changes.

Your Consent

By using the Application, you consent to the collection, use, and sharing of your information as described in this Privacy Policy, as it exists now and as it may be amended by the Service Provider in the future.

Contact

If you have any questions regarding your privacy while using the Application, or if you have questions about the data practices described in this policy, please contact the Service Provider at:

Block Protocol L.L.C-FZ
Meydan Grandstand, 6th floor
Meydan Road, Nad AlSheba
Dubai, United Arab Emirates

Email: support@seekprotocol.ai
Website: https://www.seekprotocol.ai