Privacy Policy

Summary (one-glance)

1. What we collect

1.1 Data that stays on the device

• Measurement history (chemical, ppm, timestamp, device model)
• App settings (tier, haptics, language preference)
• Monthly quota counter

This data is stored encrypted in AsyncStorage only on your device. It is never copied to a server.

1.2 Short-lived network traffic (for analysis)

When a measurement is analysed, the test strip photo passes through:

iPhone → stripvision-api.vercel.app → api.anthropic.com
                   (proxy)              (AI Vision)

The photo is POSTed to our Vercel edge function, forwarded to Anthropic, and the RGB analysis Claude returns comes back to the app. The proxy DOES NOT STORE any photo — it is discarded from memory after the request completes. For Anthropic's own retention policy see anthropic.com/legal.

1.3 Opt-in telemetry (off by default)

If you turn on Settings → Anonymous telemetry, the following anonymous metrics are shared:

• Measurement count, chemical type, confidence score
• Gate pass/fail rates
• Device model (e.g. iPhone 15)

No personal identifier, email, IP address, or photo is included. The purpose is to improve the model and tune calibration. You can turn it off at any time.

2. What we don't collect

• Location (GPS, Wi-Fi, Bluetooth)
• Personal identifiers (email, phone, name)
• Advertising ID / IDFA
• Camera access (only during manual capture)
• Contacts, calendar, health, or banking data

3. Third parties

• Anthropic (Claude API) — for photo analysis, accessed via the Vercel proxy. Anthropic API traffic is normally not logged (source).
• Vercel — edge function hosting. Maintains standard HTTP logs (timestamp, IP, status code). Photo content is not logged.
• Apple App Store + StoreKit — for app distribution and subscription processing. Your payment data stays entirely with Apple; StripVision only receives a "subscription active" boolean.
• RevenueCat — third-party SDK used for Apple StoreKit receipt validation and subscription state management. Receives only an anonymous app_user_id (UUID); no name, email, or payment data is shared. RevenueCat does not see payment data — card number, IBAN, address always stay with Apple.

4. Data retention

• On-device measurement history — visible duration varies by tier (Free 30 days, Premium 365 days, Pro all-history). The data always stays on your device; it remains until you remove the app or tap "Clear all measurements".
• Vercel proxy logs: Vercel's standard retention (~1 month)
• Anthropic API: see anthropic.com/legal for retention policy
• RevenueCat: subscription receipt for the lifetime of your subscription; cleared per RC retention after cancellation, or on request.

5. Children's privacy

StripVision is not directed at children under 13 and does not knowingly collect data from them.

6. Changes

When we update this policy we'll change the "Last updated" date. Material changes are surfaced via an in-app notification.

7. Contact

Privacy questions: info@validationly.com