What 'private by default' really means here

When we say “private by default”, we mean the default behaviour of the app does nothing sneaky.

• No accounts are required, so there’s no server that holds your identity.
• No background uploads of your content.
• Contacts are excluded from every export unless you explicitly opt them in, per share.
• iOS File Protection is enabled on the project bundle, so a locked device means locked data.

We think that’s the posture a site team deserves. You’re capturing operational details about real buildings; that data shouldn’t drift into someone else’s CRM by accident.

See the security page for the full picture.