BivouacNight for iPhone & iPad
Privacy Policy
The short version is on the tin: there is nothing to collect, because the app never
asks. What follows is the same substance as the policy inside the app, in the same voice.
Last updated: 25 August 2026
Applies to: BivouacNight 1.0 and later
In one line
No account, no analytics, no advertising, no tracking. Your service log lives in the
app's own private container on your device. The only thing that ever leaves the phone
is a question you deliberately send to the assistant, after you have read its notice
and agreed to it.
NoneData collected
NoneData linked to you
NoneTracking across apps
OptionalAssistant network use
Nothing about you is collected
There is no sign-up, no login and no profile. BivouacNight runs no analytics, no crash
reporting and no advertising or attribution code, and it never asks for your contacts
or your location. We do not know who you are and there is no account for us to attach
anything to.
Your log stays on this phone
Sessions, job cards, timers, notes, the parts inventory, the crew list and the photos
you take are written into the app's own private container on the device. They are not
uploaded anywhere and other apps cannot read them. If you use iCloud device backups,
those files may be included in your own encrypted backup, which is controlled by you
and by Apple.
The assistant is the only thing that uses the network
The Chief tab stays shut until you read the notice on it and agree. After that, pressing
send transmits your question, up to the last twelve turns of that conversation, and a
summary the app builds from your own log — the session, the job cards, the crew names
and hours you entered, the crate contents — to OpenAI, which generates the answer with
the model gpt-4o-mini. Nothing else is attached. OpenAI handles what it receives under
its own policy at
openai.com/policies/privacy-policy.
Decline, and the on-device assistant still orders your board with no connection at all.
A team that would rather run the assistant on its own OpenAI account can enter a key in
Settings. That key is kept in the iOS Keychain on the device and is used only to
authorise the calls you trigger; clearing it removes it from the Keychain.
Photos you send for a reading
Photo inspection has its own notice and its own agreement. When you use it, one
compressed photo, the system you picked and the question you typed go to the same
service and come back as a reading. No location data, no other photos and nothing else
from your phone goes with it. The picture itself is kept in the app's storage and
appears in your log; deleting the inspection deletes the photo from the device.
What the answers are worth
The app records what you enter and works out estimates from it. It is not a workshop
manual, and a language model cannot inspect a vehicle — from a photograph or from a
description. Every reading and every suggestion is something to verify on the car
before you act on it.
Permissions the app may ask for
Each of these is requested only at the moment you use the feature, and the app works
without any of them.
- Camera — so you can photograph a part or a piece of damage and file the picture in your service log.
- Photo library — so you can attach a picture you already took to your log.
- Notifications — an optional evening reminder to open the session. It is scheduled by the device itself: no push server, no token, nothing leaves the phone.
Erasing everything
We hold nothing, so there is nothing for us to delete on your behalf. Settings can wipe
the whole log, the inventory, the photos and the assistant threads in place, and
clearing a key you added removes it from the Keychain. Deleting the app removes the
entire container.
Age and changes
The app is made for a general audience and is not directed at children under 13, and we
knowingly gather information from no one. If the app's behaviour changes, this text and
the date above change with it.