Summary
PlanoVerity does not require an account, does not contain advertising or cross-app tracking, and keeps analysis on-device unless you explicitly enable a secure AI draft for an audit.
Data you create
Audit photos, planogram references, variance decisions, correction notes, reviewer labels, and timestamps are stored in the app’s protected local container. They remain on the device unless you intentionally export or share them using Apple-provided controls, or explicitly enable the secure AI draft described below.
On-device processing
PlanoVerity normalizes imports, removes embedded image metadata, extracts bounded text signals with Apple Vision, compares approved-source and shelf text, builds review candidates, and generates reports locally. This complete workflow remains available when managed AI is off or unavailable.
Optional secure AI draft
The secure AI switch is off by default and applies only to the audit where you enable it. PlanoVerity renders and downsizes the approved planogram, re-encodes selected shelf evidence, extracts bounded OCR, and sends only that prepared package to PlanoVerity’s first-party gateway. The gateway authenticates the app with App Attest and verifies App Store access before sending the request to OpenRouter’s paid multimodal route. OpenRouter routes the request to the selected model provider with zero-data-retention required, provider data collection denied, and model/provider fallbacks disabled. Model output is schema-bounded, must cite supplied evidence handles, and remains advisory until you review it.
Gateway records
The gateway does not store planogram images, shelf images, OCR text, prompts, or model responses. It retains content-free App Attest key state, short session state, request hashes, entitlement plan, quotas, and cost counters for security, replay prevention, abuse prevention, and allowance enforcement. These bounded records expire automatically, with the longest routine retention period no more than 35 days. No OpenRouter credential is stored in the app.
Purchases
Apple processes subscriptions and lifetime purchases. PlanoVerity receives product and entitlement status from StoreKit but does not receive your full payment-card details or Apple Account password.
Diagnostics
PlanoVerity does not include a third-party analytics or crash-reporting SDK in version 1.0. Apple may provide aggregated diagnostics according to your device and App Store privacy settings.
Retention and deletion
Local audit data remains until you remove it or delete the app. Exported files are controlled by the destination you choose. PlanoVerity has no user account or server-side content store. The app can request authenticated deletion of its content-free gateway installation records; routine gateway records also expire automatically as described above.
Children
PlanoVerity is a professional business tool and is not directed to children.
Security
App-owned files use Apple data-protection controls and are excluded from backup where appropriate for sensitive project evidence. No security measure is absolute; protect the device with a passcode and keep the operating system current.
Contact
Questions or privacy requests: [email protected].