Privacy Policy

Advatar ("we", "our", or "the application") is a digital signage platform designed for Android-based display devices. Advatar delivers dynamically targeted advertising content by performing real-time, on-device audience demographic analysis using the device's built-in camera.

This Privacy Policy explains in detail what data is collected, how it is used, how it is protected, and your rights regarding that data. By deploying or operating an Advatar device, you acknowledge and agree to the practices described in this policy.

Advatar requests access to the device camera (android.permission.CAMERA) as a core part of its functionality. The camera is used exclusively for the following purposes:

• Real-time audience detection: Live camera frames are analyzed by Google ML Kit's on-device face detector to determine whether a person is present in front of the display.
• Demographic inference: When a face is detected, a cropped region of the frame is passed to an on-device AI model (ResNet18) to infer approximate age range and gender. This runs entirely on the local device processor (CPU / NNAPI) and produces only a numeric prediction result.
• Content targeting: The inferred demographic result is used solely to select the most relevant advertisement or media content to display to the current audience.

The camera feed is a live stream processed frame-by-frame. No image frames, face crops, or raw visual data are ever saved to storage, uploaded to a server, or shared with any third party.

Advatar collects only aggregated, non-identifiable impression data — no personal data tied to individuals. The following data is recorded:

• Impression records: Each time content is displayed, a record is created containing: content ID played, playback start/end timestamp, and detected audience demographics (age range, gender) as aggregate categories (e.g., "Adult Male", "Senior Female").
• Audience duration: The estimated time a detected person was present in front of the display, used to measure engagement.
• Device identifiers: Screen ID, client ID, and location ID — these are platform configuration values assigned by the operator, not personal user data.
• Error logs: Technical error messages generated by the application (e.g., network failures, sync errors) for operational diagnostics.

All impression data is stored in an AES-256 encrypted local SQLite database on the device and periodically synchronized to the operator's backend server over a secure HTTPS connection.

We want to be explicit about what Advatar does not do:

• We do not Capture or store photographs or video of any individual.
• We do not Collect names, email addresses, phone numbers, or any personally identifiable information (PII).
• We do not Perform facial recognition or create biometric profiles.
• We do not Track individuals across sessions, locations, or devices.
• We do not Use cookies, advertising IDs, or third-party tracking SDKs.
• We do not Sell data to third parties.

All AI inference in Advatar runs entirely on the local device. The ResNet18 model used for age and gender estimation operates offline and processes only temporary, in-memory face crop images. These images exist for milliseconds in RAM and are never written to disk, transmitted over a network, or accessible to any external service.

The result of each inference is a non-identifiable numeric prediction (age range category + gender label) that is immediately used to select content and logged only as an aggregated demographic tag.

Advatar integrates the following third-party components, each with its own privacy practices:

Impression records are retained locally on the device until they have been successfully synchronized to the backend server, after which they are eligible for removal from local storage. On the backend, retention periods are determined by the platform operator and governed by their own data management policies.

Error logs are retained locally for a limited diagnostic window and are not linked to any individual person.

We implement the following technical measures to protect data:

• Local database encrypted with AES-256 via SQLCipher.
• All data transmissions to backend use HTTPS (TLS).
• Device configuration credentials stored using Android's secure storage APIs.
• The application does not expose any user interface to the general public — it operates as a locked kiosk-mode display.

Advatar is a B2B digital signage platform deployed and managed exclusively by business operators. It is not directed at children. The application does not knowingly collect any personal information from minors. Age/gender inference is used solely to select relevant advertising content in aggregate; no data is stored that could identify a child.

Since Advatar does not collect personally identifiable information from individuals who pass in front of the display, there is no personal data record associated with any particular person to access, correct, or delete.

If you are a business operator using the Advatar platform and wish to exercise rights over the operational data (impression records, device configuration) stored on your behalf, please contact us using the details below.

We may update this Privacy Policy from time to time to reflect changes in the application's functionality or applicable regulations. The "Last updated" date at the top of this page will be revised accordingly. We encourage operators to review this policy periodically.