Privacy Policy

Interior AI Reno Planner for iPhone and iPad · Effective September 11, 2026

Summary

Projects live on your iPhone or iPad and, when iCloud is on for this app (the iOS default), in your own iCloud account.
We run no servers and never see your data; no analytics, tracking, ads, sign-in, or third-party code.
Only the optional AI Quote Review sends data outside Apple: quote details, including client name, address, and notes, go to Anthropic under your key.
Deleting a project clears device and iCloud; only a dated folder-ID marker and old temp-folder exports linger.

Who we are

Interior AI Reno Planner is made by Caribinal Creations Ltd., Winnipeg, Manitoba, Canada, accountable under PIPEDA. No sign-in, no servers: the app sends us nothing. We hold only what you email us; Apple may show us anonymous crash reports if you have opted in to sharing analytics with developers.

What the app stores and why

Everything is typed, scanned, or picked by you (plus AI Quote Review replies), used only for quotes, plans, and reports. A deletable sample project (fictitious client "Jordan Example") is seeded on first launch.

Per project:

name, type, statuses, dates; client name, address, postal code, phone, email, notes;
scan geometry, raw scan walks, 3D models, floor plans, markers;
takeoffs with your prices, estimates, quote settings, ROI, permit and planning data;
captioned photos; AI Quote Review chat; Price Analysis postal code.

Your business (device only, never synced; may be in iOS backups): name, contact, phone, email, address, GST number, logo, price book, fixture assemblies, settings.

Anthropic API key, if added: Keychain, this-device-only, sent only to Anthropic; never in iCloud Keychain, project files, or backups.

Where your data lives

Your device. Everything starts on your iPhone or iPad and, with iCloud off, stays there, visible in the Files app and to a paired computer. A diagnostic log without project data stays in the app cache.

Your iCloud. Project records sync to your private CloudKit database; project files, photos and scans included, to iCloud Drive under "Caribinal Scanner". Device-only projects move there whenever the app next opens with iCloud on. Sync is automatic; no in-app switch (see Withdrawing consent).

Third parties. We share with no one; Apple and Anthropic receive data only from you, under your own accounts and terms. Nothing else leaves unless you export, share, or copy it.

AI features

Price Analysis and Assistant (on-device). Apple Intelligence; nothing reaches a server. Price Analysis reads your quote data, price book, and postal-code region. The Assistant reads client details, notes, statuses, and quote totals; on request it changes a status or adds a note without confirming (edits sync). Chats aren't saved; the postal code is.

AI Quote Review (optional; needs your own Anthropic key). Each message sends Anthropic the project name, type, client name, address, and notes; room dimensions and counts; takeoff lines with quantity, price, and note; totals, estimate range, and recent messages. Not sent: the separate phone, email, and postal code fields, photos, scans, or your business profile; anything typed into address or notes does go. The conversation is saved in the project folder (and syncs), not in backups; "Clear Conversation" erases it. Anthropic's privacy policy and API terms, accepted when you get a key, govern that data. We never see it, control its retention, or verify Anthropic's protection; read those terms first.

Camera, LiDAR and photos

Camera permission is requested only for room scanning, which keeps measurements and a 3D model, never video or depth frames. Site photos, your logo, and plans to trace come via Apple's pickers: the app sees only what you choose. Photos are re-saved as JPEG (normally dropping location tags); a traced blueprint becomes a project photo, shown in PDF reports. No location, contacts, microphone, or Bluetooth.

Exports leave only when you tap Share and pick a destination.

PDF Report: your business details (with phone, email, GST number), client name, address, phone, email, project notes, prices, and captioned photos.
Permit Package: your business details, client name, address, compliance report, and takeoff with prices; no photos.
Plan image, DXF, CSV: layout, labels, or prices, plus takeoff-line notes; project name in the filename. 3D model: geometry only.
Project backup (.cbproj): the whole project, client details and photos included, minus the AI chat; opening one imports it.

Exports (and backups you open) sit in a temp folder until iOS clears it, even after project deletion.

Your clients' information

Client details belong to the homeowners you work for. PIPEDA (which applies in Manitoba) or your provincial privacy law makes you responsible. Tell clients how you use their information, keep it only as long as needed, and answer requests to see or correct it. Not legal advice; see priv.gc.ca for small-business guidance. Tell clients before using AI Quote Review, which sends their name, address, and your notes to Anthropic.

Data retention and deletion

Data stays until you delete it.

Projects: deleting removes the record and files from every device and iCloud. A marker (folder ID and date only) stays in iCloud about 30 days.
Within a project, photos, scans, plans, and the AI chat are deletable; raw scan walks and conflict copies stay until the project is deleted.
API key: "Change API Key" replaces it; revoke it with Anthropic; iOS may keep it after uninstall.

Withdrawing consent. Turn off iCloud for this app (Settings > your name > iCloud > Saved to iCloud) before creating projects. If you turn it off later, projects already stored in iCloud Drive may not be reachable in the app until iCloud is back on, so delete projects in-app first (with iCloud on) or clear the app's iCloud data in Settings. Uninstalling removes local data only. For AI Quote Review, revoke your key; data already sent follows Anthropic's retention terms. We hold no copy, so nothing is ours to delete; email us with any request.

Security

iOS encryption and your passcode protect the device; the app adds no lock, so anyone who can unlock it or use a paired computer can read project folders. AI Quote Review uses HTTPS. Apple encrypts iCloud data but, under standard protection, holds the keys; turn on Advanced Data Protection for end-to-end encryption.

Children

A contractor tool, not directed to children under 13; we knowingly collect nothing from them.

Changes to this policy

Updates are posted on this page with a new effective date.

Contact

Privacy Officer, Caribinal Creations Ltd., Winnipeg, Manitoba: info@caribinalcreations.com. Support: https://caribinalcreations.ca. Unresolved concerns may go to the Office of the Privacy Commissioner of Canada.