Privacy Policy

Effective date: August 25, 2026

arlo ("we", "us", "our") operates the arlo mobile application and website at followarlo.com. This Privacy Policy explains what data we collect, how we use it, and your rights.

1. Who We Are

The data controller for arlo is João Pedro Martinho Bento (individual developer), operating the arlo app and followarlo.com. For any privacy question or request, contact support@followarlo.com.

2. Data We Collect

Account Information

• Name, email address, and profile photo (provided during sign-up)
• Phone number (optional — only if you add it to your profile)
• Profile details you choose to add — an artist or shop name, a short bio, a banner image, and your Instagram handle
• Your home city — chosen manually, or matched from your device location if you allow location access (this match happens on your device and your coordinates are not sent anywhere for it; we store only the matched city). Location access is optional — denying it simply means you pick your city manually. We do not derive your location from your IP address.
• Addresses and places you look up when adding a shop, market, or event location. What you type into the search — and, if you ask the app to use your current location, your device coordinates rounded to about a kilometre — is sent to the French government’s public address service (api-adresse.data.gouv.fr) to find the matching street address. Searches for named places (a market, a gallery, a venue) are also sent, together with the general map area being searched, to Apple’s Maps service to find the matching place. We store the address or place you confirm and its map coordinates, not the raw device reading.
• An approximate position — again rounded to about a kilometre — when you ask to see shops and markets near you, so we can work out which ones are in range. We use it to answer that search and do not store it.
• Authentication data from third-party sign-in providers (Apple, Google, and Facebook)

Content You Create

• Product listings, descriptions, and images (for sellers)
• Shop, market, and event locations you add to your profile, including street addresses (for sellers)
• Chat messages and any photos exchanged with other users
• Favorites and saved items
• Your artist application, if you apply to sell — the artist or brand name you go by, the crafts you work in, a short bio, portfolio images, your Instagram handle, the city you are based in, and any message you add. We keep it to review the application and tell you the outcome.
• Reports you file about a piece, an event, a message or an account — what you reported, the reason you picked, and any details you write in

Automatically Collected Data

• Device type, operating system, and app version
• In-app usage analytics (screens viewed, features used, search queries) — only with your consent. The app asks on first launch; you can change your choice anytime in Profile > Privacy & security. Declining does not limit the app in any way.
• A record of the actions you take on arlo itself — signing up, publishing a piece or an event, responding to an event, asking to exhibit at one, reporting content, and the outcome of the automatic image screening described in section 3. Our servers already store these to run the marketplace and keep it safe; we also count them in our analytics tool to see how arlo is being used. Unlike the in-app analytics above, they are recorded on our servers rather than read from your device, so they do not depend on your consent and the analytics toggle does not switch them off. We rely on our legitimate interests here (see section 3), and you can object at any time (see section 6).
• Crash reports and performance data (strictly necessary diagnostics — collected to keep the app working reliably)
• Device push token — collected only after you grant notification permission, used solely to deliver push notifications to your device. Removed when you sign out or revoke notification permission.
• Per-install identifiers — random identifiers that let us group activity coming from one installation of arlo without knowing who you are. Our crash reporting creates one, so repeated crashes can be recognised as coming from the same install, and it also records a device identifier that Apple gives us for arlo alone, which resets when you delete the app. The optional analytics create a separate one, and only if you consent to analytics. None of these is an advertising identifier, none is used for advertising, and none is shared with other companies to follow you across their apps or websites.
• Which pieces you open, and when. We record this on our own servers for every signed-in viewer, separately from the optional analytics above, so that an artist can see how many people looked at their work. An artist only ever sees totals — never who you are. Opening your own piece is not counted.

3. How and Why We Use Your Data

We process your data on the following legal bases (GDPR art. 6):

• Performance of a contract — provide, maintain, and improve the arlo service: your account, listings, favorites, and communication between buyers and sellers
• Your consent — optional in-app usage analytics, withdrawable at any time in Profile > Privacy & security
• Legitimate interests — crash diagnostics, service security, detecting or preventing fraud and abuse, and measuring how the marketplace is used from the record of actions our own servers hold
• Legal obligation — complying with applicable law

We also use your own favorites, follows, and views to order the pieces and artists shown in your own Pieces and Artists feeds. This does not change what anyone else sees.

Content Moderation and Safety

Images uploaded to arlo are screened automatically before they appear: an image-classification model runs on our servers and can flag or refuse an upload, and media served through our content delivery network is matched against known-illegal-image hash lists by Cloudflare’s CSAM Scanning Tool. Screening runs on the image itself and builds no profile of you. Account-level consequences — a takedown, a suspension — are decided by a person, never by the classifier alone. We rely on our legitimate interest in keeping the service safe, and on our legal obligations.

If media is matched as known child sexual abuse material, it is reported onward to the National Center for Missing & Exploited Children (NCMEC) or the competent regional hotline, along with the account details needed to act on it. This is a legal obligation, and it is the only circumstance in which we disclose your content to a recipient outside the processors listed below. Nothing is transmitted to any such recipient in the absence of a match.

4. How We Share Your Data

What Other People Can See

If you sell on arlo, your artist profile is public: anyone can open it, signed in or not, and see your display name, profile photo and banner, your bio, your Instagram handle, your city, your published pieces and events, and how many people follow or save your work. The shop, market and event locations you add are public too, including their street addresses and map coordinates. Your email address and phone number are never published, and a buyer account has no public profile at all.

Three switches in the app change what is shared, alongside the analytics choice described in section 2. Show exact address, on each shop or market location, hides the street when you turn it off — the public listing then shows the surrounding area only, and the map pin is rounded to roughly 110 metres. In Profile > Privacy & security, Show my location to artists decides whether an artist looking up your buyer profile sees your city (an artist’s own city stays public, because browsing by city depends on it), and Allow messages from anyone decides whether someone you have never messaged can start a conversation with you.

Chat messages are never public. They are visible to you, to the person you are writing to, and — where a message is reported or moderated — to us.

Third-Party Processors

We share data with the following processors, solely to operate the service. Each processor receives only the data necessary for its function and is bound by a data processing agreement.

Signing in with Apple, Google or Facebook involves those providers as independent controllers under their own privacy policies. For a detailed breakdown of data flows and retention per processor, contact support@followarlo.com.

5. Data Retention

We retain your data for as long as your account is active. Deleting your account (in the app: Profile > Delete account, the last row of the profile screen) immediately and permanently removes your profile, listings, messages and uploaded media from our systems, and deletes your analytics identity — the pseudonymous profile PostHog holds for you, together with the events recorded on it. Residual copies in encrypted backups expire within 30 days. Data we are legally required to keep is retained for the mandated period only.

Analytics events — both the in-app ones you consent to and the server-side records described in section 2 — are retained for up to one year. An event sent just before you delete your account — from your device, or from our servers as the deletion runs — can reach PostHog after that erasure has run; by then it belongs to no account, and it expires on the same one-year schedule.

6. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data — or delete your account yourself in the app (Profile > Delete account)
• Export your data in a portable format
• Withdraw consent for optional data processing at any time — for analytics, use the toggle in Profile > Privacy & security
• Object to or restrict processing based on legitimate interests
• Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects — see section 3 for how automatic image screening works and where a person decides
• Lodge a complaint with a supervisory authority — in France, the CNIL (cnil.fr), or your local data protection authority, whose details are listed by the European Data Protection Board

To exercise any of these rights, contact us at support@followarlo.com. We respond within one month. We may ask you for information that lets us confirm the request comes from you, so we never act on someone else’s account by mistake. If we cannot act on a request, in whole or in part, we will tell you why.

7. Cookies and Tracking

The arlo mobile app does not use cookies. Our website does not use cookies at all — not even essential ones. We do not use third-party advertising trackers. In-app analytics run only after you opt in (see section 2), and no arlo analytics — in-app or server-side — is ever used for advertising.

arlo does not track you. We never link what you do in arlo with data collected about you in other companies’ apps, websites or offline properties; we never share your data with advertisers or data brokers; and we never sell it. The app does not use Apple’s advertising identifier (IDFA) and shows no App Tracking Transparency prompt, because it has nothing to ask for.

8. Children’s Privacy

arlo is not intended for children under 15. Where the law of your country sets a lower digital consent age, a user aged 13 or 14 may use arlo only with parental consent — the same threshold as our Terms of Service. We do not knowingly collect data from children below these ages. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Data Security

We use industry-standard measures to protect your data, including encryption in transit (TLS) and at rest. However, no method of transmission over the internet is 100% secure.

10. International Transfers

Our services are hosted in the European Union. Where a transfer outside the EU occurs — when you sign in with Apple, Google or Facebook, when you search for a place with Apple’s Maps service, or when we send you a transactional email — it is protected by appropriate safeguards such as adequacy decisions, the EU–U.S. Data Privacy Framework, or Standard Contractual Clauses. You can ask us which safeguard covers a particular transfer, and for a copy of it, at support@followarlo.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by email. Continued use of the service after changes constitutes acceptance.

12. Contact Us

If you have questions about this Privacy Policy, contact us at:
support@followarlo.com