1. Introduction
Material Engine (“the App”) is a mobile application developed by Sedge5 Technology Solutions (“we”, “us”, “our”). This Privacy Policy explains how we collect, use, store, share, and protect your information when you use the App. It applies to all users regardless of location, with additional provisions for users in the United Kingdom, European Economic Area, and other jurisdictions with specific data protection requirements.
By creating an account or using the App, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you should not use the App.
2. Data Controller
Sedge5 Technology Solutions is the data controller responsible for your personal data. For any data protection enquiries, contact us at: [email protected].
3. Information We Collect
3.1 Account Information
When you create an account or sign in using Google, Apple, or email/password, we collect your email address and display name. This information is used to manage your account, track your subscription tier, and provide access to purchased features.
3.2 Camera and Image Data
The App uses your device camera to photograph physical materials. These images are sent to our processing server for material analysis. Images are processed in real time and are not stored permanently on our servers.
3.3 Generated Content
When you run a product design pipeline, the App generates design concepts, 3D visualisations, technical documents, and CAD files based on the materials you scan. This generated content is stored temporarily on the processing server for the duration of your session.
3.4 Device Information
The App may collect basic device information (device model, operating system version) for the purpose of ensuring compatibility and diagnosing technical issues.
3.5 Usage Data
We may collect anonymised usage data including session duration, features accessed, pipeline completion rates, and error occurrences. This data is used solely to improve the App’s reliability and performance.
4. Legal Basis for Processing (UK GDPR / EU GDPR)
We process your personal data on the following legal bases:
Contract performance: Processing your account information and session data is necessary to provide the service you have requested (Article 6(1)(b)).
Legitimate interests: Processing device information and anonymised usage data for service improvement, security, and fraud prevention (Article 6(1)(f)). Our legitimate interest is maintaining and improving a secure, reliable service.
Consent: Where we process optional analytics data or send marketing communications, we do so on the basis of your consent (Article 6(1)(a)). You may withdraw consent at any time.
Legal obligation: Where we are required to retain or disclose data to comply with applicable law (Article 6(1)(c)).
5. How We Use Your Information
We use the information collected solely to: authenticate your identity and manage your account; track your subscription tier and credit balance; analyse scanned materials and generate product designs; produce technical documentation and CAD files; improve the accuracy and reliability of the design pipeline; diagnose and fix technical issues; and comply with legal obligations.
6. Data Storage, Retention, and International Transfers
6.1 Storage
Account information is stored securely using Firebase Authentication and in our application database. Material images and pipeline results are stored temporarily on a local server during your active session. Session data is not uploaded to any external cloud storage service. We do not retain your images or design data after your session ends unless you explicitly save or export files to your device.
6.2 Retention Periods
Account information is retained for as long as your account remains active, and for up to 30 days after account deletion to allow for account recovery. Session data (images, generated content) is retained only for the duration of your active session unless your tier allows session storage, in which case data is retained according to your tier limits. Usage analytics data is retained in anonymised form for up to 12 months.
6.3 International Data Transfers
Your data may be transferred to and processed in countries outside the United Kingdom and the European Economic Area when it is sent to our third-party AI processing services (Groq and Anthropic, both based in the United States). These transfers are necessary to provide the core functionality of the App. We ensure appropriate safeguards are in place for such transfers, including reliance on Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner’s Office and the European Commission, or other legally recognised transfer mechanisms. By using the App, you acknowledge that your data will be processed by these services in accordance with their privacy policies.
7. Third-Party Services
The App uses the following third-party services:
- Google Firebase — for user authentication and analytics (Google LLC, USA).
- Groq API — for AI-powered material analysis and design generation (Groq Inc., USA).
- Anthropic API — for advanced design reasoning at selected pipeline stages (Anthropic PBC, USA).
- Expo / EAS — for app distribution and over-the-air updates (Expo Inc., USA).
These services may process data in accordance with their own privacy policies. We encourage you to review their respective policies. We only share the minimum data necessary for each service to perform its function.
8. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We do not share your scanned images or generated designs with any third party, except as necessary to process your requests through the AI services listed above. We may disclose your information if required to do so by law, regulation, legal process, or governmental request.
9. Your Rights
If you are located in the United Kingdom or European Economic Area, you have the following rights under applicable data protection law:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may request correction of inaccurate or incomplete personal data.
- Right to erasure: You may request deletion of your personal data, subject to legal retention requirements.
- Right to restrict processing: You may request that we limit how we use your data in certain circumstances.
- Right to data portability: You may request your data in a structured, commonly used, machine-readable format.
- Right to object: You may object to processing based on legitimate interests.
- Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, contact us at [email protected]. We will respond to valid requests within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk if you believe your data protection rights have been violated.
10. Security
We implement security measures including Firebase token verification, HMAC request signing, rate limiting, content filtering, encrypted communications (HTTPS/TLS), and audit logging to protect your data during transmission and processing. While we take reasonable precautions to protect your personal data, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
11. Cookies and Tracking
The App itself does not use cookies. Our website at mp-engine.com uses essential cookies (cookie consent preference, CSRF tokens) and optional analytics cookies. For full details, see our Cookie Policy at mp-engine.com. Firebase Authentication may use local device storage to maintain your login session; this is essential for the App to function and cannot be disabled while using the service.
12. Children’s Privacy
The App is not intended for use by children under the age of 13 (or under 16 in jurisdictions where a higher age of digital consent applies). We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that information promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be reflected by the “Last updated” date at the top of this page. Material changes will be communicated via in-app notification or email. Your continued use of the App after changes are posted constitutes acceptance of the revised policy.
14. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:
Company: Sedge5 Technology Solutions
Email: [email protected]
Website: mp-engine.com
We aim to respond to all enquiries within 5 business days and to data protection requests within 30 days.