Privacy Policy

RedlineRoom (“the app”) is made by Andrey Tyurin (“we,” “us”). This policy explains what the app does and does not do with your information. It is written to be read, not to be hidden behind legalese.

Your permission for AI transcription

The first time you circle a markup, RedlineRoom asks whether you allow AI transcription, and names who receives the image (our transcription service and Anthropic’s Claude). Until you tap Allow, no image leaves your device. If you choose Don’t Allow, you type each item yourself — everything else in the app works the same. You can change your answer at any time in Settings → Privacy & AI transcription; turning it off stops all sending, including items saved for retry while you were offline.

What we send off your device, and to whom

Only after you allow AI transcription, and only when you transcribe a markup (circling a detail and writing a note next to it sends that markup automatically), the app sends:

• A cropped image of that one markup region (the loop and its handwritten note), together with a second, slightly wider crop of the sheet area immediately around it that helps the AI read your note in context. The surrounding crop is bounded in the app itself: if it would cover more than half the page, it is not sent at all. The same limit applies to the markup crop: a circle drawn around more than half the sheet is not sent (you type that item) — neither image is ever the whole sheet. Both go to our transcription service at redlineroom-api.cpmtek.com, which forwards them to Anthropic’s Claude API to convert your handwriting into text. The images contain whatever is drawn or written inside the cropped area, so avoid circling personal details you don’t want transcribed.
• A random device identifier (a UUID generated on your device and stored in the iOS Keychain) used only to count your free transcriptions and to verify an active subscription.

If you subscribe, the app also sends your device identifier together with Apple’s signed subscription confirmation to our service — at purchase, at app launch, and when connectivity returns — so the server knows your device is Unlimited. This confirmation contains no name, email, or payment details.

Like any internet request, each request reaches our service with your device’s IP address. Our service is reached over HTTPS through Cloudflare’s network. To limit abuse, the service stores a SHA-256 hash of the IP address (not the address as sent) with the times of that day’s requests. A hash of an IP address can be matched back to the address by trying every possible address, so we treat it as personal data: it is deleted automatically 24 hours after the last request from that address, and used for nothing else.

That is the entire outbound data flow.

What we never send

• Your full drawing or PDF — only the cropped markup region and its bounded immediate surroundings (never more than half of one page).
• Your project names, file names, or notes other than the markup being transcribed.
• Your location, name, email, or any account information — there is no account.
• Any contacts, microphone, or advertising identifiers.

Photos you attach (optional)

You can optionally attach a photo of a condition to a punch item, using your camera or your photo library. These photos stay on your device. They are included only in a PDF you choose to export and share, and are never sent to our transcription service or to Anthropic. The camera or photo library is accessed only at the moment you add a photo.

Retention

• The cropped images are used to produce text and are not retained on our servers after the response is returned.
• Anthropic processes the images under its commercial API terms to generate the text. By default Anthropic does not use API inputs or outputs to train its models, and deletes API inputs and outputs within 30 days; it may keep them for up to 2 years if they are flagged for a violation of its Usage Policy, or longer where the law requires. See Anthropic’s retention policy, its training policy and its commercial terms.
• The random device identifier is stored with the times of its transcriptions in the last 30 days, only to enforce the free-transcription cap, and — if you subscribe — with whether the subscription is active and when it expires. A device’s usage record is deleted automatically 30 days after its last transcription. None of this is linked to your identity or used to track you across apps or websites.
• The hashed IP address is deleted 24 hours after the last request from that address (see above).

Subscriptions and payments

Subscriptions are sold and processed by Apple through the App Store. We never receive or store your payment details. Purchase and restore are handled by Apple’s StoreKit; we only receive Apple’s signed confirmation that a subscription is active, to unlock unlimited transcriptions.

Tracking

We do not track you. The app contains no advertising SDK, no analytics SDK, and no third-party trackers. It does not present an App Tracking Transparency prompt because there is nothing to track. NSPrivacyTracking is false and there are no tracking domains.

Children

RedlineRoom is a professional tool and is not directed to children under 13. We do not knowingly collect information from children.

Your choices

Because there is no account and we retain no cropped images, there is no personal profile to access or delete. If you don’t allow AI transcription (or turn it off in Settings) and never subscribe, no markup image leaves your device — drawing, the punch list, typed items, and PDF/CSV export all work fully on-device. To manage or cancel a subscription, use Settings → Apple Account → Subscriptions on your device.

Changes to this policy

If we change this policy we will update the date above and post the new version at this URL before the change takes effect.

Contact

Questions about privacy: amtyurin@gmail.com.