Privacy Policy

Effective date: August 19, 2026 · Last updated: August 19, 2026

1. Who this policy covers

CampVision AI ("the app") is an iPhone app developed and published by William Liu ("we", "us", "our"), an independent developer. This policy explains how the app handles information. It applies to the CampVision AI iOS app and to this website, which is a single static page that sets no cookies and runs no analytics.

CampVision AI is a paid, one-time purchase. There are no subscriptions, no in-app purchases, and no user accounts.

2. What we do not collect

We do not collect, receive, store, or have access to any of the following:

• Your photos, or any image you capture or analyze in the app.
• The analyses, plans, titles, or notes the app generates for you.
• Your name, email address, phone number, or any contact information.
• Your location or GPS coordinates.
• Account credentials of any kind, since there are no accounts.
• Device identifiers, advertising identifiers (IDFA), or any tracking identifier.
• Usage analytics, event logs, session recordings, crash reports, or diagnostics.
• Contacts, calendars, health data, microphone audio, or your photo library contents.
• Payment or billing information.

We do not operate any server that the app talks to. There is no backend, no database, and no account system in which your information could be held.

3. What the app stores on your iPhone

Everything the app creates stays in the app's private storage area (its iOS "sandbox") on your device. That includes:

• Photos. Each photo you take in the app is saved into the app's own private folder, along with two derived copies: a resized version (longest edge 1024 px) that is fed to the AI model, and a small thumbnail (longest edge 256 px) used in the session grid.
• Analyses. The text the on-device model produces (a short title, a description of what it can see, the items it spotted, the step-by-step plan, and any safety warnings) plus the raw model output, which is kept on the device for troubleshooting.
• Session details. A randomly generated session ID, the date and time the session was created, the mode you chose (Emergency, Camping, or Fun), which model produced the analysis, how long the analysis took, and the session's status.
• App settings. Which AI model is active, the progress marker for an interrupted download, and whether you chose to skip setup for now.
• AI model files. The downloaded model files themselves (see section 5). These are between roughly 0.5 GB and 1.6 GB depending on which model you install.

Session records are kept in a local SQLite database on the device; the images are stored as ordinary files in the app's private folder alongside it. Other apps cannot read them, and neither can we.

Device backups. Because your sessions live in the app's documents folder, they are included in your iPhone's normal backups if you have iCloud Backup or computer backups turned on. Those backups belong to you and are governed by Apple's terms and encryption. We have no access to them. The large AI model files are deliberately excluded from backup so they do not consume your iCloud storage; if you restore to a new device, you simply download the model again.

4. On-device processing

All image analysis happens locally on your iPhone, using a small vision-language model (SmolVLM2) that runs on the device's own processor and GPU. Your photo is never uploaded, never sent to a cloud service, and never seen by us or anyone else. There is no "AI API" behind the app.

Because the model runs locally, the app works fully offline (in airplane mode, with no cellular service, and with no Wi-Fi) once the one-time model download in section 5 has finished.

Your photos and analyses are not used to train, fine-tune, or improve any AI model. Nothing leaves the device to be used for any purpose.

5. The one network request: the model download

The only time CampVision AI uses the internet is during first-time setup (and later, only if you choose to download or re-download a model from Settings). The app downloads the AI model files over an encrypted HTTPS connection from Hugging Face, at huggingface.co, which redirects the download to Hugging Face's content delivery network. These are plain file downloads: the app sends no information about you, your photos, your analyses, or your device's contents in these requests.

As with any request to any website, the servers that serve the download will see your device's IP address, the file that was requested, the date and time of the request, and the standard technical information a device sends with a web request (such as a user-agent string and, for a resumed download, which byte range is being requested). Those logs belong to Hugging Face and its CDN provider, not to us. We never see them and cannot access them. Hugging Face's handling of that data is governed by its own privacy policy at huggingface.co/privacy.

If a download is interrupted, the app saves your progress and resumes from where it stopped, which means it re-contacts Hugging Face when you resume. Once both model files are on your device and verified, the app makes no further network requests of any kind.

6. Permissions

CampVision AI asks for one permission of its own, and iOS asks you before granting it. You can change your answer at any time in Settings → CampVision. Denying a permission never notifies us: we do not find out either way.

• Camera: the one permission the app asks for up front. It is needed to take the one photo each session is built around. The camera is used only while the capture screen is open, and only for still photos. The photo goes straight into the app's private storage and is analyzed there, on your device. It is never uploaded. If you deny camera access, the app cannot analyze anything new, but any sessions you already have remain readable.

Everything else is left alone:

• Location: never requested. The app does not access, use, or store your location, and no session contains GPS coordinates.
• Microphone: never requested. The app takes still photos only; it records no audio and no video.
• Photo library: the app analyzes photos you take with its own camera. It never browses, reads, or indexes your photo library. The one exception is yours to trigger: if you choose Save Image after sharing a result card, iOS shows its standard add-only Photos prompt, and that permission can only add the card you chose to save. Nothing is ever read from your library, and no photo ever leaves your device.
• Notifications, contacts, calendars, health, motion, Bluetooth, local network, and app-tracking permission: not requested and not used.

7. Sharing a session

You can share a finished session as an image card. The card is drawn on your device and handed to the standard iOS share sheet. Nothing is uploaded to us or to any service in the process, and sharing works with no signal. Where that image goes is entirely your choice: whichever app, person, or destination you pick receives it, and from that point the receiving app's or service's own privacy terms apply. The card contains your photo and the plan the app generated, so share it only with people you intend to share those with.

If the card cannot be drawn for some reason, the app falls back to sharing the original photo instead. A photo shared this way may carry the standard photo metadata iOS records at capture time, such as the date and camera settings.

8. Retention and deletion: you control it

We cannot retain or delete your data, because we never receive it. Everything is on your device and stays there until you remove it. There is no retention period set by us, and nothing expires on its own.

• Delete a single session (its photo, thumbnail, analysis, and record): press and hold the session's card on the home screen, then choose Delete. The record and the session's files are removed from the device.
• Delete a downloaded AI model: open Settings → Offline setup and remove the download you no longer want. (The app keeps at least one model installed so it can still work; you can remove either one whenever the other is installed.)
• Delete everything: delete the app from your iPhone. iOS erases the app's entire private storage (every photo, analysis, setting, and model file) along with it.
• Backups: if you have device backups turned on, a copy of your session data may still exist in your own iCloud or computer backups after deletion. Those are managed by you through Apple.

9. No accounts; purchase and payment

CampVision AI has no sign-up, no sign-in, no profile, and no cloud sync. You never give the app an email address, a password, or any identity.

The app is a paid, one-time purchase from the Apple App Store. Apple processes that purchase; we never see your payment details, your Apple Account, your name, or your address. Apple provides developers with aggregated, anonymized sales and download statistics, which cannot identify you. Refunds are handled by Apple, not by us: see reportaproblem.apple.com.

10. No analytics, no tracking, no ads

The app contains no analytics SDK, no crash-reporting SDK, no advertising SDK, no attribution or marketing SDK, and no third-party trackers of any kind. It does not use cookies, pixels, fingerprinting, or any similar technology.

We do not access the advertising identifier (IDFA) and we do not track you across apps or websites owned by other companies. Because of this, CampVision AI never shows the App Tracking Transparency prompt. There is nothing for you to opt out of.

This website is a single static page. It sets no cookies, loads no fonts, scripts, images, or other resources from any other server, and runs no analytics.

11. No sale or sharing of personal information

We do not sell your personal information. We do not share it for cross-context behavioral advertising. We do not rent, trade, or disclose it to data brokers, advertisers, or any other third party, and we could not, because we never receive it in the first place. We have never done any of these things.

The only circumstance in which we could disclose information is if we were legally compelled to hand over something we hold; in practice we hold nothing about you, so there would be nothing to produce.

12. Children's privacy

CampVision AI is not directed to children under 13 (or under 16 in the EEA and the UK), and we do not knowingly collect personal information from children. In fact we do not knowingly collect personal information from anyone: no data is transmitted to us from the app, and there is no account, profile, or contact field a child could fill in.

This means we have no data belonging to a child to disclose or delete. If you are a parent or guardian and have a question about the app, contact us at liuwilliam12@gmail.com. Content in the app is general outdoor guidance intended for adults or supervised use, and it is not a substitute for professional survival training or emergency services.

13. California privacy rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act as amended by the CPRA gives you rights over personal information a business collects about you.

• Categories collected: none. In the preceding 12 months we have not collected any category of personal information listed in Cal. Civ. Code §1798.140(v) from users of the app.
• Sources: not applicable. Nothing is collected.
• Business or commercial purpose: not applicable.
• Sold or shared: we have not sold or shared personal information, including the personal information of consumers under 16, and we do not do so now.
• Disclosed for a business purpose: none.
• Sensitive personal information: we do not collect or use it, so there is nothing to limit.

You still have the right to know, to delete, to correct, to opt out of sale or sharing, and to limit the use of sensitive personal information. You may exercise any of these by emailing liuwilliam12@gmail.com. Our honest response will normally be that we hold no personal information about you; where that is the case we will confirm it in writing. You may use an authorized agent, and we will never discriminate against you for exercising a privacy right. To delete the data on your own device, follow section 8.

14. GDPR and UK GDPR rights

Controller. For the limited processing described below, the controller is William Liu, contactable at liuwilliam12@gmail.com. Given the scale and nature of this processing, no Data Protection Officer or EU/UK representative is required.

What is processed. Personal data created in the app (your photos, the analyses, and session details) is processed solely on your own device, under your control, and is never transmitted to us. We do not act as a controller or processor of that data because we have no access to it and no means of obtaining it.

Legal basis. The only processing connected to us is the model-file download described in section 5, in which Hugging Face and its CDN provider observe your IP address as an inherent part of delivering a file over the internet. To the extent this constitutes processing on our behalf, the legal bases are Article 6(1)(b) (performance of the contract to supply the app you purchased, since the app cannot function without the model files) and Article 6(1)(f), our legitimate interest in delivering those files reliably and resumably. Hugging Face acts as an independent controller of its own server logs. We do not process special-category data under Article 9, and there is no automated decision-making that produces legal or similarly significant effects about you.

International transfers. Because the model files are served from a global content delivery network, your download may be served by a server outside your own country, including outside the EEA or the UK. This transfer is inherent to any internet download and is handled under Hugging Face's own terms and safeguards.

Retention. We retain nothing, because we receive nothing. Data on your device is retained until you delete it (section 8).

Your rights. You have the right of access, rectification, erasure, restriction of processing, data portability, and objection, and the right to withdraw consent where consent is the basis. In practice, the most direct way to exercise every one of these over your app data is on the device itself: the app gives you the data in readable form, lets you delete any session, and lets you delete everything by deleting the app. If you would like us to respond formally to a request, email liuwilliam12@gmail.com and we will reply within 30 days.

Complaints. You have the right to lodge a complaint with your local supervisory authority. In the UK this is the Information Commissioner's Office (ICO); in the EEA it is the data protection authority of the country where you live or work.

15. Security

The strongest protection here is structural: data that is never transmitted cannot be intercepted, and a service that holds no data cannot leak it. There is no server of ours to breach.

On the device, your sessions live in the app's private iOS sandbox, protected by the operating system's isolation between apps and by iOS's file encryption, which is tied to your device passcode. We recommend keeping a passcode and Face ID or Touch ID enabled, and keeping iOS up to date. Anyone with your unlocked device can open the app and view your sessions, so treat the device itself as the lock.

The model download is made over HTTPS with iOS App Transport Security enforced (unencrypted connections are disallowed), and each downloaded file is verified against an exact expected size before the app will use it; a file that does not match is discarded and re-downloaded. No method of electronic storage or transmission is completely secure, but no personal data is transmitted to us at any point.

16. Third parties

The app integrates with only two outside parties, neither of which receives data about you from us:

• Apple: distributes the app through the App Store and processes your purchase. Your interaction with Apple is governed by Apple's privacy policy.
• Hugging Face: hosts the AI model files the app downloads once during setup, as described in section 5. It sees your IP address as part of serving that download and is governed by its own privacy policy.

There are no other third-party services, SDKs, or partners. If we are ever involved in a merger, acquisition, or sale of assets, there is no user database to transfer, and we would update this policy before any change in how the app handles data.

17. Changes to this policy

If this policy changes, the revised version will be posted on this page with a new effective date at the top. If a future version of the app introduces a feature that handles information differently, we will update this policy before that feature ships, and describe the change plainly. Because the app has no accounts and no way to contact you, this page is the place where changes are announced; we encourage you to check it if you want to stay current.

18. Contact

Questions about this policy, or about privacy in CampVision AI, go to liuwilliam12@gmail.com. We aim to reply within a few business days, and within 30 days for formal privacy requests.