Applies to the INTRFAC3 POS application (com.intrfac3.pos).
Effective 12 August 2026 · Last updated 12 August 2026
Intrface Inc. ("INTRFAC3", "we", "us") operates the INTRFAC3 POS application, a staff-operated kiosk app used at brand events. This policy explains what the app collects, why, and what we do with it.
The app is used by two groups of people, and it treats them differently:
| Data | Why |
|---|---|
| Email address and password | To sign the kiosk in to your INTRFAC3 account and authorise it for a brand and program. |
| Authentication token | Keeps the kiosk signed in between sessions so staff do not re-enter credentials mid-event. |
| Data | Why |
|---|---|
| The identifier stored on your NFC wristband or badge | Identifies which attendee profile to credit when you tap. |
| Your INTRFAC3 profile: display name, level, rank, experience points, and profile and banner images | Shown on the kiosk screen so you can see your own progress when you tap. |
| Tap records: which program and role you tapped, and when | Advances your progress through an event program and records completion. |
The app requests only two Android permissions: NFC, to read wristbands, and Internet, to reach our servers. It does not request or access your location, camera, microphone, contacts, calendar, photos, or files.
The app contains no third-party analytics, advertising, or tracking software. There are
no advertising identifiers, no ad networks, and no social media SDKs. Data from the app is sent only to
INTRFAC3's own servers at api.intrfac3.com.
We do not sell personal data, and we do not share it with data brokers or advertisers.
We use the data above to run event programs: to authenticate staff, to recognise an attendee's wristband, to display and advance progress, to award prizes where a program offers them, and to give the brand running the event a count of how their activity performed.
We share aggregate participation data with the brand running the event you are attending — counts of taps, completions, and progress through a program — so they can measure how their activity performed. Brands do not receive attendee-level records or display names from us through this app.
We also use service providers who host our servers and infrastructure on our behalf. They may process data only to provide those services to us.
We may disclose data where required by law, or to protect our rights, safety, or property.
All communication between the app and our servers uses encrypted HTTPS connections.
On the kiosk device itself, staff sign-in credentials are held in the operating system's encrypted storage (Android Keystore-backed), not in plain text. Kiosk devices are operated by event staff and are not intended for attendee use.
Attendee-level records of kiosk activity are retained for no more than 90 days. After that we retain only aggregate participation data, which does not identify individual attendees.
Tapping a kiosk also updates the progress held on your own INTRFAC3 account. That progress is part of your account rather than of this app, and remains for as long as your account does.
Staff account data is retained for as long as the account remains active, and is deleted on request or when the account is closed.
Whoever and wherever you are, you may ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Email us at ty@intrfac3.com and we will respond within the period required by applicable law. We may need to verify your identity before acting on a request.
Under the GDPR you have the right to access your personal data; to have inaccurate data corrected; to have your data erased; to restrict or object to processing; to receive your data in a portable, machine-readable format; and, where processing is based on consent, to withdraw that consent at any time. Withdrawing consent does not affect processing carried out before you withdrew it.
We process personal data on these legal bases: performance of a contract, for staff accounts and the services we provide to brands; legitimate interests, in running event programs and measuring how they performed; and consent, where the law requires it.
You also have the right to lodge a complaint with your local data protection supervisory authority.
Under the CCPA, as amended by the CPRA, you have the right to know what personal information we collect and how we use it, to request its deletion, to request its correction, and not to be discriminated against for exercising any of these rights.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined by the CCPA. We have not done so in the preceding twelve months.
The INTRFAC3 POS app is intended for attendees aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, contact us at the address below and we will delete it.
If we change this policy we will update the "Last updated" date above. Material changes will be communicated through the app or by contacting account holders directly.
Questions about this policy or about your data:
Email: ty@intrfac3.com
Postal address:
Intrface Inc.
1810 East Sahara Avenue, STE 75073
Las Vegas, NV 89104
United States