Privacy Policy
Effective August 9, 2026
MotifGuard is a local-first creative review app from NexLevel. Deterministic inspection and human decisions stay on device. An optional managed explanation processes only text excerpts you explicitly select under the limited conditions described below.
What stays on your device
Imported creative images, PDFs, full brand manuals, exact coordinates, local audit reports, decisions, and exports are processed and stored on your Apple devices. MotifGuard does not upload those raw files to our service. Local operating-system backups and device sync remain subject to your Apple settings.
Optional managed explanation
Nothing is sent merely because you open a finding. If you choose Explain approved evidence, you must select each exact text excerpt before the send control becomes available. MotifGuard then sends the selected excerpts, opaque evidence handles, an App Attest proof, and Apple-signed app/entitlement evidence to a NexLevel gateway. Raw images, PDFs, full manuals, exact coordinates, source hashes, complete reports, and human decisions are rejected by the request contract and remain on device. The gateway uses OpenRouter only, with an exact paid DeepSeek route configured for zero data retention and collection denied. Prompt content and the returned explanation are processed synchronously and are not persisted or intentionally logged by NexLevel. The explanation is advisory and cannot approve or publish creative work.
Data retained for security and allowance enforcement
The gateway retains pseudonymous hashes derived from the app installation and Apple app-ownership or entitlement identifiers, the applicable plan/product class, bounded request identifiers, timestamps, status, and conservative cost/credit counters. This data is used only for app functionality: authentication, replay prevention, abuse control, purchase verification, and finite allowance enforcement. It is not used for advertising, tracking, profiling, or sale. Content, raw Apple signed payloads, provider bodies, model output, and clear transaction identifiers are not retained. Short-lived replay tokens expire after seven days; minimal quota and hashed commerce records may be retained as needed to prevent restored allowance or double redemption.
Purchases and trials
Apple processes App Store payments, subscription renewals, refunds, restoration, and seven-day trial eligibility. MotifGuard reads verified StoreKit entitlement state on device to unlock export features. If you use managed explanation, Apple-signed app and entitlement evidence is verified by the NexLevel gateway and the minimal pseudonymous records described above are retained. NexLevel never receives payment-card details. You can manage or cancel subscriptions in your Apple Account settings.
Security
MotifGuard uses platform protections including complete file protection, atomic local persistence, bounded import validation, privacy-safe notifications, and StoreKit verification. Prepared PDF and JSON share copies live in a report-hashed temporary directory and are removed after share dismissal, report deletion, entitlement loss, or next launch. No system can promise absolute security; we design to minimize both access and retained data.
Apple Watch
The Watch app receives a minimal campaign status and sanitized finding summary. A Watch action is sent through a versioned, idempotent message to the reachable iPhone and is only confirmed after acknowledgment. Raw creative files are not transferred to the Watch.
Tracking, advertising, and analytics
MotifGuard does not sell personal data, show third-party ads, perform cross-app tracking, or embed third-party behavioral analytics. The public website has no advertising trackers or analytics scripts.
Retention and deletion
You can delete local reports and their complete audit history inside the app. Removing the app deletes its local app container subject to Apple backup behavior. Authenticated service deletion removes the installation's App Attest key, active sessions, and challenges, but minimal pseudonymous quota and commerce records may remain to prevent allowance restoration, replay, or duplicate redemption. App Store purchase records may remain with Apple as required for transactions and restoration. For a privacy request, contact us using the address below.
Children and international use
MotifGuard is a professional productivity tool and is not directed to children under 13.
Your choices
You control which files you import, which local reports you retain, and what you choose to share through Apple’s system share sheet. For a privacy request, contact privacy@nexlevel.com.br.
Changes
If this policy changes materially, the effective date will be updated and an appropriate notice will be provided in the app or on this page.