Opals Privacy Notice

Version 1.1
Effective 31 July 2026

This notice explains how Armand Sumo, operating Opals as a personal project, handles personal data when you use the Opals application for Spectacles.

Contact: [email protected]

What Opals is

Opals is an educational augmented reality experience about precious opal, structural colour, and the material processes that produce it. It includes an authored path and an optional AI guide.

The authored path can be used without the AI guide. The guide requires an internet connection and a Snapchat session.

Information processed

Snapchat session and service security

When the online guide is available, Opals uses the Snapchat identity supplied through Snap Cloud to authenticate requests. A pseudonymous account identifier is used to authenticate requests, enforce rate limits, and separate private generated-card files. Opals does not ask for your name, email address, or a separate Opals account.

Snap also processes information as the Spectacles platform, account provider, and speech-recognition provider under its own privacy terms.

Questions to the AI guide

When you send a spoken or typed question, Opals processes:

• the transcript or text you chose to send;
• recent guide conversation held in memory for the current visit;
• the current authored content and exhibit state;
• a closed geometric description of the visible Opals interface, including placement, depth, legibility, overlap, and interaction categories.

The geometric description contains no camera image, room image, precise location, bystander information, or arbitrary scene text. The server may render that description into a synthetic diagram for the guide model.

Snap speech recognition may listen for the exact interface shortcuts described inside the app while the guide is open. Other shortcut transcripts are ignored by Opals and are not sent to the guide model.

AI speech

When the guide speaks, its response text is sent through Snap Cloud to ElevenLabs. If that service is unavailable, Opals may use a self-hosted Qwen3-TTS service running on Modal. The Opals backend does not intentionally store the generated speech audio or the text sent to the self-hosted fallback.

Generated explanatory cards

The guide can create a static explanatory card. The card markup is rendered in an isolated cloud browser on Modal. The resulting PNG is stored in private Snap Cloud Storage under a pseudonymous user path. The signed download link expires after approximately 15 minutes. The underlying private file is not made public.

Optional diagnostic reports

After a guide failure, you may choose Send report. No report is sent automatically. The report contains bounded failure, client, runtime, and layout health categories. It excludes your question, transcript, guide response, prompt, tool arguments, raw logs, images, location, position, account identifier, name, email address, session identifier, and credentials.

The Snapchat account identifier is used transiently to authenticate and rate limit the report. The accepted report is delivered through Resend to the Curvilinear report mailbox and is retained as email.

Operational logs

The cloud services record limited operational information such as request references, service and model identifiers, status, latency, aggregate token usage, and privacy-safe failure categories. Opals application logs exclude visitor questions, prompts, model prose, and scene images in normal operation. Provider and platform infrastructure may also process ordinary network, device, authentication, and security metadata.

Why information is processed

Armand Sumo processes information:

• to provide the guide, speech, generated cards, and requested reports;
• to authenticate requests, prevent abuse, and keep the service secure;
• to diagnose failures and maintain service reliability;
• to comply with legal obligations and protect legal rights.

Where European data protection law applies, the legal bases are performance of the service you request, Armand Sumo’s legitimate interests in operating and securing Opals, your consent when you choose to send a diagnostic report, and legal obligations where applicable.

Opals does not use personal data for advertising, sell personal data, or make decisions that produce legal or similarly significant effects.

Service providers and recipients

Information may be processed by:

• Snap and Snap Cloud / Supabase for the Spectacles platform, authentication, speech recognition, functions, logs, and private storage;
• OpenAI for the normal AI guide;
• Tinker by Thinking Machines Lab as the fallback guide model;
• ElevenLabs for primary text-to-speech;
• Modal for self-hosted fallback speech and isolated card rendering;
• Resend and the Curvilinear report mailbox for reports you choose to send.

These providers process only the information needed for their role, subject to their contracts and applicable law.

International transfers

Some providers may process information in the United States or other countries outside the European Economic Area. Their applicable contractual safeguards and transfer mechanisms govern that processing. You may contact Armand Sumo for information about the safeguards relevant to your data.

Retention

• Recent conversation is held by Opals in memory for the current visit and is cleared when the session ends or the application restarts.
• OpenAI states that API inputs and outputs are not used to train its models unless the organization explicitly opts in. Data sharing is disabled for the Opals organization. By default, OpenAI may retain API content in abuse-monitoring logs for up to 30 days, subject to legal, safety, and security exceptions.
• Tinker states that customer content is not used to train or improve its models and is retained only as needed to provide and secure the service, subject to its terms and legal obligations.
• ElevenLabs retention follows the settings and terms of the Curvilinear ElevenLabs account.
• Self-hosted fallback speech is processed transiently without intentional application storage.
• Generated cards remain in private Snap Cloud Storage until they are manually deleted. Their signed links expire after approximately 15 minutes.
• Diagnostic reports remain in Resend and the destination mailbox until manually deleted.
• Operational and security metadata follows the retention settings of the relevant platform and service provider.

Your choices

You can use the authored path without the AI guide. You can stop the microphone, discard a staged transcript before sending, end the guide session, or decline to send a diagnostic report.

Do not include another person’s personal information or highly sensitive information in a guide question.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict personal data, object to processing, receive portable data, and withdraw consent. Withdrawal does not affect processing that was lawful before withdrawal.

To exercise a right, contact [email protected]. Armand Sumo may need enough information to verify and locate the relevant data. You may also complain to your local data protection authority. In France, this is the CNIL.

Children

Opals is distributed through Snapchat and follows the platform’s eligibility requirements. Opals is not directed at children below the minimum age required to use the platform and does not knowingly create separate child accounts.

Changes

Armand Sumo may update this notice when Opals or its providers change. The published notice will show its effective date. Material changes will be communicated through the application or its distribution page when reasonably possible.

Contact

Armand Sumo is the data controller for Opals. Questions about privacy can be sent to [email protected].