PRIVACY

The map stays on your iPhone.

Room geometry, measurement summaries, heat layers, names, and history stay local. Only short disposable speed-test downloads travel from Cloudflare to the phone.

Local-first

Local-first by design

Disposable test downloads

The app counts bytes while a bounded Cloudflare payload streams, then discards those bytes instead of adding them to the survey.

No cloud account required

Capture, review, saved history, and deletion work without pairing, a remote account, or a survey-upload service.

Raw sensing stays out of history

Raw camera video, depth frames, dense point clouds, transient RoomPlan data, and AR recovery maps are excluded from replicated and finalized packages.

Delete locally

Deleting a saved survey removes the iPhone copy. V1 has no laptop replica or cloud survey copy to coordinate.

What crosses each boundary

Survey package
Rooms, verified transforms, lightweight surfaces, trail, measurement summaries, heat layers, progress, and final identity.
Not in the package
Camera video, depth frames, dense point clouds, raw speed bytes, and local AR relocalization maps.
Internet measurement
A bounded HTTPS request downloads disposable test bytes. Ordinary connection metadata is visible to Cloudflare and network providers.
Cloudflare payload host
Cloudflare serves the speed payload; the app does not upload room geometry, measurements, heat maps, names, or history.