PRIVACY

The map stays on your iPhone.

Room geometry, measurement summaries, heat layers, names, and history stay local. Only short disposable speed-test downloads travel from Cloudflare to the phone.

Local-first

Local-first by design

Disposable test downloads

The app counts bytes while a bounded Cloudflare payload streams, then discards those bytes instead of adding them to the survey.

No cloud account required

Capture, review, saved history, and deletion all happen on this iPhone. Your survey is not sent to a remote account or survey-upload service.

Raw sensing stays out of history

Raw camera video, depth frames, dense point clouds, transient RoomPlan data, and AR recovery maps are excluded from replicated and finalized packages.

Delete locally

Deleting a saved survey removes its name, room geometry, measurements, and heat layers from local history on this iPhone.

What crosses each boundary

Survey package
Rooms, verified transforms, lightweight surfaces, trail, measurement summaries, heat layers, progress, and final identity.
Not in the package
Camera video, depth frames, dense point clouds, raw speed bytes, and local AR relocalization maps.
Internet measurement
A bounded HTTPS request downloads disposable test bytes. Ordinary connection metadata is visible to Cloudflare and network providers.
Cloudflare payload host
Cloudflare serves the speed payload; the app does not upload room geometry, measurements, heat maps, names, or history.