NebuSpot Privacy Policy
Last updated: 20 October 2026
This policy covers NebuSpot, the Android app published by Audirivision Technologies Private Limited (“we”, “us”, “our”) that reads NebuSpot tags, which are printed markers placed by venues on doors, signs and facilities, and speaks what they say. It describes exactly what the app records, what never leaves your phone, who else can see it, and how to have it deleted.
NebuSpot is a separate app from Audivision and is covered by this policy rather than by our general privacy policy. If anything below conflicts with the general policy, this page is the one that applies to NebuSpot. The terms you accept when you first open NebuSpot are at NebuSpot Terms of Use.
Who is responsible for your data
Audirivision Technologies Private Limited, VO-505, WeWork NESCO IT Park, Goregaon (East), Mumbai 400063, decides what NebuSpot collects and why, and is responsible for looking after it (the “data fiduciary” under India’s Digital Personal Data Protection Act, 2023). For anything in this policy, whether a question, a correction, a copy of what we hold, a deletion or a complaint, write to our Grievance Officer at contact@audivision.in. We answer within 30 days.
In short
- Camera images never leave your phone. Frames are read on the device and discarded. No photo or video is uploaded, stored or sent anywhere.
- We do not collect your location. The app has no location permission, and no scan record contains a GPS position.
- We record which tags were read, from how far, and on what kind of device. That is how we measure whether the tags work.
- Your reading history stays on your phone, encrypted, and is never uploaded.
- We do not sell your data or show advertising. Service providers process it only on our behalf.
The camera
NebuSpot needs the camera to see a tag. Camera frames are analysed entirely on your device by code built into the app. A frame is held only for as long as it takes to read it, typically a few tens of milliseconds, and is then discarded.
No image, frame, video or thumbnail is ever uploaded, saved to your phone’s storage, or sent to us or to anyone else. The app has no storage permission and writes no images.
Your account
When you sign in, we receive your name, email address and account identifier from your sign-in provider. We use your account details, together with how you use NebuSpot, to provide and secure your account, keep your settings and history across your devices, contact you about NebuSpot, and understand and improve how the app is used, including through analytics. We do not sell your personal data.
Your name and email address are held by our sign-in system. They are not copied into the records described below, which carry only your account identifier. That identifier is what links those records to your account, and what lets us find them when you ask for them to be deleted.
Reports about suspect tags
If the app reads a tag that our registry rejects (a damaged, expired or counterfeit tag), it sends a report so that we can investigate. Unlike an ordinary scan record, this report does contain what the tag claimed to say: its text, its address line, its phrase, and the venue it claimed to belong to, because that content is the evidence. It also carries the registry’s own entry for that identifier, your account identifier, the app version and the device model. This happens only for tags the registry rejects, never for ordinary readings.
Device and app information
Once a day, the app marks your account as active. Whenever your phone, app version, settings or accepted terms change, it updates a profile record holding:
- app version, operating system details, sign-in details and device details;
- the version of the terms accepted; and
- the dates your account was created, last signed in and last active.
Our servers keep a standard log of the requests they receive.
Usage statistics and crash reports
NebuSpot sends usage statistics and crash reports to a third party for processing or storage. Neither is switched on until you accept our terms, and anything before that is discarded rather than held back.
Permissions the app holds
The only permission NebuSpot asks you to grant is Camera, to read tags. It also holds these, which Android grants when the app is installed:
- Internet and network state: for tag lookup, venue packs and updates, and to notice when the phone comes back online; and
- Vibrate: for the feedback pulse when a tag is found.
NebuSpot requests no location, microphone, contacts, phone, storage or notification permission, and it contains no advertising software.
NebuSpot does not read your advertising ID. The permissions that would let it do so arrive automatically with the analytics library; we remove them from the app, so the installed app does not hold them. NebuSpot shows no adverts and has nothing to advertise to you.
Who else sees this
We do not sell your data, and we do not share it with advertisers, data brokers or any other third party. We use service providers to host the service and to process usage statistics and crash reports, including Google Analytics. They process data only on our behalf.
Venues that place tags receive aggregate statistics about their own tags, such as how often a sign was read and from how far. They are not given account identifiers, names or email addresses, and cannot see who read a tag.
We may disclose information where the law requires it, or where it is necessary to investigate a breach of our terms or to protect someone’s safety.
How long we keep it
- Your account is kept until you delete it (see Deleting your account).
- Scan records are kept indefinitely, because they are the measurement history of the tag network. They carry your account identifier until your account is deleted, and are then anonymised.
- Profile records and their history are kept until your account is deleted.
- Suspect-tag reports are kept while the investigation they belong to is open, and are anonymised when your account is deleted.
- Usage statistics and crash reports are kept for a limited period and then deleted.
- Server logs are kept for a limited period and then deleted.
- Your on-device history and settings last until you clear them or uninstall the app.
Deleting your account
To delete your account and its data, open NebuSpot and go to Settings → Account → Delete account and data, then confirm. If you cannot use the app, write to us from the email address you sign in with (see Delete your NebuSpot account).
- On your phone, straight away: your reading history, saved venue maps and cached tag checks are erased, and you are signed out.
- For 30 days, you can change your mind. Signing in again with the same account within 30 days cancels the deletion and restores your account.
- After 30 days, on our servers: your profile record and its history are deleted; your scan records and any suspect-tag reports are anonymised, with your account identifier replaced by “deleted”; and your account, with its name and email address, is deleted from our sign-in system. We keep a one-way hash of the account identifier, with the date, so that we can answer “did you delete my data?” without keeping the data to prove it. This cannot be undone.
- It needs a connection. The request is sent before anything is erased. If your phone is offline, the app says so and changes nothing, so try again when you are connected.
Uninstalling the app erases everything on your phone, but it does not delete your account or the records on our servers. To have them deleted, use Delete account and data, or write to us.
Usage statistics and crash reports never carried your account identifier, so there is nothing in them to delete for you. They are deleted after a limited retention period.
Children
If the person using NebuSpot is under 18, a parent or lawful guardian must accept our terms for them and, by doing so, consents to the processing described in this policy (see section 2 of the Terms of Use). NebuSpot collects no location from anyone, and nothing in it is designed to track or profile a child. If you believe a child is using the app without that consent, write to us.
Your rights
Whatever we hold about you, you are entitled to:
- See it: ask what we hold and why, and get a summary of it.
- Correct it if it is wrong or out of date.
- Have it deleted: see Deleting your data.
- Withdraw your consent, by deleting your account with Settings → Account → Delete account and data, or by asking us.
- Nominate someone to exercise these rights for you if you die or become unable to.
- Complain: to our Grievance Officer first, and then, if we have not put it right, to the Data Protection Board of India.
Write to contact@audivision.in. We answer within 30 days and never charge for it. We may need details that let us find your records, and we will not hand data to anyone we cannot connect to it.
Changes to this policy
We will update the “Last updated” date above when this policy changes. If a change materially affects what we collect, the app will ask you to accept the revised terms again before it continues.
Contact us
Audirivision Technologies Private Limited, VO-505, WeWork NESCO IT Park, Goregaon (East), Mumbai 400063 · contact@audivision.in