Privacy Policy
AI Data Consent And Withdrawal
iOS app: Before any online AI feature can send data, the app presents a separate AI Data Sharing Permission screen that identifies the categories of personal data and every permitted recipient. The screen provides distinct Don’t Allow and Allow Third-Party AI choices; this permission is not bundled with acceptance of terms or safety notes. If you do not allow this processing, no prompt, voice transcription text, photo, video frame, or image-generation request is sent. Non-AI device features remain available. Before the first selected photo or video transfer, the app presents a separate contextual media-transfer confirmation. That media consent remains active for future user-selected media until the user withdraws it.
In the iOS app, you may withdraw consent at any time from + menu > Privacy & AI Data > Withdraw AI Data Consent. Withdrawal blocks future AI and media transfers and clears currently selected media, pending Image Studio context, and the full active local conversation and media history before the consent screen is shown again. It does not reverse a request that was already completed or delete files the user separately saved. You can later review the disclosure and consent again.
Android and web: These experiences use their existing first-run safety-and-privacy acknowledgment rather than the iOS named-provider consent flow. Data is sent only after you deliberately submit an AI request or choose a media feature. Starting a new chat, closing or reloading the experience, clearing site or app storage, or uninstalling the app clears locally remembered session or first-run state as applicable.
Information You Choose To Send
Depending on the feature you deliberately use, a platform speech-recognition service may process microphone audio to produce voice transcription text. On iOS, this is Apple Speech Recognition; on other platforms, it is the speech-recognition service supplied by the device or browser. The app may send the resulting text, text you type, a selected or captured photo, extracted frames from a selected or recorded video, an AI answer you choose to turn into a visual, or an image-generation prompt to the named AI processors below. Microphone audio used for Voice Input is not sent to the OffGrid AI application server. A selected photo is resized to a maximum of 1024 by 1024 pixels before transfer. A raw video file is not transferred; the app extracts and sends up to eight JPEG frames, each no larger than 512 by 384 pixels.
OffGrid AI FieldGuide uses submitted content only to produce the answer or visual you requested. It does not use submitted content for identity verification, advertising, marketing, user profiling, sale, or AI-model training. The content is not written to the OffGrid AI application database as a saved conversation, face database, media library, or personal account history.
Photos, Video Frames, And Face Data
Face data the app may collect: OffGrid AI FieldGuide does not intentionally collect biometric face data. If a photo or extracted video frame that you choose to send contains a person, the submitted image may incidentally contain a visible image of that person's face. That visible facial imagery is the only face-related data the app may process.
No face recognition or biometric processing: The app does not detect, recognize, identify, authenticate, map, measure, track, or compare faces. It does not create face geometry, faceprints, templates, embeddings, biometric identifiers, face profiles, or a face database. It does not use facial imagery for advertising, marketing, profiling, surveillance, eligibility decisions, or AI-model training.
Use and sharing: A face that happens to be visible in user-selected media is processed only as part of the user's requested general image or video analysis. In the iOS app, the selected photo or extracted video frames are transmitted through the OffGrid AI service hosted by Render and OpenRouter to one of four fixed processors running Gemma 4: NextBit BF16, Venice BF16, Parasail BF16, or Novita BF16. Only if all four Gemma 4 processors fail may that same request be sent to Gemini 2.5 Pro through Google Cloud Vertex AI. Photos and video frames are not sent to Image Studio, advertisers, data brokers, other users, or any unlisted AI processor. Android and web use the separate legacy route described under “Named Service Providers And Data Route.”
Storage and retention: Face-containing photos and video frames are handled transiently only for the time needed to complete the current request. They are not persisted in the OffGrid AI application database or application logs and are not retained as a face or media history after processing. The raw video remains on the device; a native temporary copy used for frame extraction is deleted after extraction. Every iOS AI request uses a fixed provider allowlist, OpenRouter Zero Data Retention routing, and denied provider data collection. The permitted iOS AI processors do not persist prompt, response, photo, or video-frame content under this routing. Android and web request OpenRouter Zero Data Retention routing but do not use the fixed iOS processor list. Limited non-content request metadata may be processed for billing, security, abuse prevention, and reliability.
Deletion: Because OffGrid AI, OpenRouter, and the selected AI endpoint do not persist the submitted face-containing content under this configuration, there is no server-side face record to delete after processing. Before sending, a user can cancel the transfer or remove the attachment. After sending, local previews and session content can be cleared by starting a new chat, closing or reloading the app, or uninstalling it. Separately saved photos, generated images, or PDFs remain on the device until the user deletes them in Photos or Files.
Named Service Providers And Data Route
iOS app route: The submitted iOS build uses the following fixed, purpose-limited processor chain. Every iOS AI request enforces Zero Data Retention, denies provider data collection, and restricts processing to the applicable fixed allowlist; OpenRouter is not permitted to choose an unlisted processor.
- Apple Speech Recognition may process microphone audio when an iOS user deliberately activates Voice Input, solely to return transcription text. The resulting text is not sent into the AI route until the user chooses to submit the question.
- Render hosts the OffGrid AI application service, which receives the request and forwards only the content needed to complete it.
- OpenRouter routes the request only to the processor list disclosed here.
- NextBit BF16, Venice BF16, Parasail BF16, or Novita BF16 runs the primary Gemma 4 model for submitted FieldGuide text, selected photos, extracted video frames, and text-only Image Studio prompt preparation. The fixed route tries only these four processors.
- Google Cloud Vertex AI runs Gemini 2.5 Pro only as an emergency FieldGuide fallback after all four listed Gemma 4 processors fail. It also processes text prompts for Google-powered Image Studio generation.
Android and web route: Voice audio may be processed by the speech-recognition service supplied by the device or browser. Deliberately submitted AI content travels through Render and OpenRouter using the legacy OpenRouter Zero Data Retention route. OpenRouter may select an available downstream AI endpoint that supports Zero Data Retention; that endpoint can vary with model availability. Android and web do not use the fixed iOS processor allowlist or the iOS named-provider consent screen.
Each service provider receives only the content and technical information needed for the user-requested function. For iOS, OffGrid AI requires the listed processors to handle submitted content only for that function and enforces Zero Data Retention, denied provider data collection, and fixed allowlists so those processors provide the same or equivalent protection described in this policy. No provider is authorized by OffGrid AI to use submitted content for advertising, user profiling, sale, or AI-model training.
Data Retention
OffGrid AI FieldGuide does not require an account and does not maintain a cloud conversation, face, or media history. Prompt text, AI responses, uploaded photos, extracted video frames, voice transcription text, generated-image prompts, and generated images are handled transiently to complete the request and are not retained in the OffGrid AI application database after the request is completed.
- Anonymous daily usage counters contain a one-way network-address hash, dates, counts, and timestamps, but no prompt or media content. These counters are automatically deleted after 31 days.
- Optional feedback, content reports, and support correspondence are retained only as long as reasonably necessary to investigate, respond, resolve the request, maintain safety, or meet legal obligations. You may request deletion at any time using the process below.
- Render service logs contain request path, network address, request ID, response timing and size, and user-agent data for up to 7 days. OffGrid AI intentionally excludes prompt text, response text, uploaded media, and generated-image content from application logs.
- The applicable platform speech provider, Render, OpenRouter, the applicable downstream AI processor, and security systems may process limited non-content technical metadata for their billing, security, reliability, abuse-prevention, and legal-compliance periods. OffGrid AI does not control those metadata retention periods.
- Images, PDFs, and other exports you choose to save remain on your device until you delete them.
Data Deletion
Because OffGrid AI FieldGuide does not create user accounts or retain a cloud chat, face, or media history, there is no account-history or face-record deletion step. To request deletion of identifiable optional feedback, content reports, or support correspondence, email support@offgridaitoolkit.com with the subject OffGrid AI FieldGuide Data Deletion Request. Include the approximate submission date and enough detail for us to identify the record. After reasonable verification, we will delete the identifiable matching records unless retention is required for security, fraud prevention, legal compliance, or an active dispute.
Files saved to your phone can be deleted directly with your Gallery or Files app. Uninstalling OffGrid AI FieldGuide removes app-private data, but it may not remove files you separately saved to Downloads, Gallery, or another shared folder. See the step-by-step OffGrid AI FieldGuide Data Deletion page.
Device Permissions
The app asks for permissions only when you use the related feature:
- Camera for taking photos or recording video.
- Photo or media access for choosing files to upload or saving generated visuals.
- Microphone for voice input or video recording.
- Motion sensors for the tap-to-enable compass heading.
- Network access for online AI responses.
Accounts, Payments, Ads, And Analytics
OffGrid AI FieldGuide does not require user accounts, does not include in-app purchases, does not show ads, and does not include third-party advertising analytics. If this changes in a future version, this policy and the store privacy disclosures will be updated before release.
Storage And Saved Guides
When you tap Save Image, Save Guide PDF, or Export, the app saves the selected output to your phone or browser download location. Saved outputs are controlled by you and remain on your device unless you choose to share them.
Feedback And Content Reports
If you submit feedback or report an AI response, OffGrid AI stores the category, the details you type, basic app context, and the reported AI response only when you choose to include it. Reports do not automatically include your full chat history, account information, or uploaded media. Reports are retained only as long as reasonably necessary for product support, safety review, and resolution, and you may request deletion using the process above.
Operational Logs
Like most online services, the hosting platform and server may process basic technical information for security, reliability, abuse prevention, and troubleshooting. Render service logs contain request path, time, network address, request ID, response timing and size, user-agent information, and limited error details and retain those logs for up to 7 days. OffGrid AI does not intentionally write prompt text, response text, uploaded media, or generated-image content to its application logs.
To enforce free daily limits without creating an account, the server stores a one-way hash derived from the network address with daily request counters. The original network address is not stored in this usage table, the counters contain no prompt or media content, and these anonymous counters are deleted after 31 days.
Third-Party Processing
iOS: The named providers above process content only after you consent and deliberately use an AI feature. OpenRouter Zero Data Retention routing, denied provider data collection, and fixed allowlists are enforced for every iOS AI request. Main FieldGuide requests can move among only the four named Gemma 4 processors, with Google Cloud Vertex AI allowed only for the disclosed Gemini fallback. Image Studio text-only prompt preparation uses the same four Gemma 4 processors, and Google-powered image generation is restricted to Google Cloud Vertex AI.
Android and web: Content is processed only after you deliberately submit it. These experiences request the legacy OpenRouter Zero Data Retention route, under which the available downstream ZDR processor can vary. Technical request metadata may still be processed for billing, security, reliability, and abuse prevention. Do not submit sensitive personal, medical, legal, financial, confidential, or third-party information unless you have the right to share it and are comfortable sending it to these online services.
Provider information: Render Privacy Policy, OpenRouter Privacy Policy, OpenRouter Zero Data Retention, and Google Cloud Privacy Notice.
Safety Note
AI can make mistakes. Verify important survival, medical, legal, financial, or safety information before acting on it.
Contact
Questions or privacy requests can be sent to support@offgridaitoolkit.com.