Privacy Policy

1. Who we are

Vantage Labs builds Vantage One: semi-custom gaming in-ear monitors fitted from a phone-based ear scan, plus related software and accessories. We operate the marketing site at vantagelabs.gg, a thin web dashboard for account handoff, and an iOS app that captures ear geometry using Apple TrueDepth where available.

2. Information we collect

Depending on how you interact with us, we may collect:

• Waitlist email. The address you submit to join the Vantage One waitlist, plus when and from which surface you joined (for example, the landing page).
• Account email. The email you use to sign in via magic link on the web or in Vantage Scan. The same user record is shared across web and app. Optional display name or avatar fields exist on the account record; we do not require a face photo to join the waitlist or scan.
• Guest scan sessions. You can start capture before claiming an email. In that case we create a short-lived session tied to a synthetic identifier (not your real address). When you later sign in with a magic link, that session and any scans on it are claimed onto your account.
• Session and auth data. Tokens and session records needed to keep you signed in, verify magic links, and complete short-lived web-to-app device linking.
• Ear scan data. For each ear (left and right) we may store: capture status; a scan file (depth / point-cloud / mesh payload from the iPhone); coverage-check metadata from the app (for example whether the capture passed quality checks); and timestamps including when you submitted. Colour camera frames of the ear region may be captured alongside depth because TrueDepth uses the front camera. Nearby face, hair, or skin may appear incidentally in those frames. We treat this as sensitive geometry of your ear — not as a face-identity or login-biometric profile — but still as personal data you control.
• Technical logs. Standard server and hosting logs (for example IP address, user agent, timestamps, error traces) generated while serving the site, API, and app backends.
• Cookies and analytics. Essential cookies or local storage may be required for sign-in and guest sessions. We have not finalized a third-party analytics or marketing pixel stack; if we add one, this section will be updated before it ships.

We do not ask for payment card data on the waitlist site. Product purchases, if and when offered, will be described separately.

3. How we use information

• Operate the waitlist and notify you about product updates and when pre-order opens (we aim for sparse, product-relevant email — not a drip campaign).
• Authenticate you, maintain your account, and hand off sessions between the website and the iPhone app.
• Process ear scans to evaluate capture quality, store left/right geometry for custom shell fit, show read-only status in the web dashboard, and — when you approve a build — share that geometry with manufacturing partners as needed to produce your shells.
• Secure, debug, and improve our services (fraud prevention, abuse detection, reliability).
• Comply with law and enforce our Terms of Use.

We do not sell your personal information. We do not use ear scan data to identify you to third parties, to authenticate you (it is not Face ID), or to build advertising profiles.

4. TrueDepth and the iPhone app

Ear scanning runs on supported iPhones. Vantage Scan requests camera access so TrueDepth can capture the shape of your ear and surrounding geometry for a custom-fit shell. Capture runs on-device. Scan payloads (geometry files plus coverage metadata) are uploaded to our backend when you save or submit a capture in the product flow — not as a continuous live stream.

Scan only your own ears, or someone who has clearly agreed to be scanned for a pair of shells. Do not use the app to capture another person's ear without that permission.

Android is not supported for capture. If you decline camera permission, scanning will not work; waitlist and account features on the web may still be available.

Apple may process depth and camera frames under Apple's own privacy terms as part of the TrueDepth / ARKit stack. We do not control Apple system processing.

5. Retention

• Waitlist emails — kept until you unsubscribe or we close the waitlist program, unless a longer period is required by law.
• Account records — kept while your account is active and for a reasonable period afterward for security, dispute, and continuity purposes. Exact deletion timelines will be published once production ops are locked.
• Ear scans — geometry files and coverage metadata are retained as long as needed to provide fit / manufacturing related services, including remakes and support, or until you request deletion where feasible. Unclaimed guest-session scans follow the session lifetime until claimed. Incomplete or failed captures may be discarded earlier. Exact deletion SLAs will be published once production ops are locked.
• Auth sessions & device link tokens — short-lived by design; expired tokens are not reused.

6. Processors and infrastructure

We use service providers to host and operate the product. Depending on environment, that may include:

• Vercel — web application hosting and edge delivery for vantagelabs.gg and related APIs.
• Database hosting — application data (accounts, waitlist, scan metadata) via our backend database hosted with Supabase (production site: vantagelabs.gg).
• Supabase — database and mobile auth-related flows where configured; treat as a processor.
• Resend — transactional email for magic links and related notices.
• Object storage — scan files may move from local development storage to cloud object storage (for example S3-compatible). Production bucket provider will be named here when locked.

Providers process data under contract and only as needed to deliver their services to us.

7. Sharing

We may share personal data only when:

• A processor needs it to run the services described above.
• A manufacturing or finishing partner needs scan geometry and related fit metadata to produce, inspect, or remake your shells — only as part of a build you have approved, and only as much as that workflow requires. Partners are not licensed to use scan data for their own marketing or identity systems.
• Required by law, regulation, legal process, or to protect rights, safety, and security.
• In connection with a corporate transaction (merger, financing, acquisition), subject to appropriate safeguards.
• You direct us to, or we have your clear consent.

8. Security

We use industry-standard controls appropriate to an early-stage product (encrypted transport, access-controlled databases, short-lived auth tokens). No method of transmission or storage is perfectly secure. Scan geometry warrants careful handling; access is limited to systems and personnel that need it for fit and support workflows.

9. Your choices

• Unsubscribe from waitlist mail using the link in those messages, or by contacting us.
• Request access, correction, or deletion of account or scan data where applicable law provides that right.
• Revoke camera / TrueDepth permission in iOS Settings; scanning will stop working until re-enabled.

Depending on where you live, you may have additional rights under applicable privacy law (for example access, deletion, or opt-out). Contact us to exercise them; we will expand this section with jurisdiction-specific notices before a broader public launch.

10. Children

Vantage One and related services are not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.

11. International transfers

We may process and store information in the United States and other countries where our providers operate. Transfer safeguards and the primary processing location will be documented here before a broader public launch.

12. Changes

We may update this policy as the product matures. Material changes will be reflected by a new “Last updated” date on this page. Continued use after an update constitutes acceptance of the revised policy where permitted by law.

13. Contact

Privacy questions or requests: use the waitlist contact path on vantagelabs.gg for now. A dedicated privacy inbox will be published before a broader public launch. Business identity: Vantage Labs — vantagelabs.gg.