RepairLens Privacy Policy

Our Privacy Commitment

RepairLens is a local-first home repair diagnosis app. Your photos and inspection history are stored privately on your iPhone. There is no account to create, and we use no behavioral advertising or analytics, show no ads, and do no cross-app tracking. No photos, issue notes, or diagnosis content are sent automatically or in the background. Anonymous subscription checks, device-attestation tokens, Google service installation and configuration requests, and limited service diagnostics may be sent automatically at launch or while you use the related service.

What we store on your device

RepairLens uses private app storage on your iPhone:

• Inspection photos: the required close-up plus any optional area-overview and appliance-label shots you take or import, stored as backup-excluded media files in the app's private container
• Inspection history: structured SwiftData records for your saved inspections, diagnosis results, and bounded follow-up chat threads
• Usage records: durable Keychain high-water counts for successfully completed free AI inspections, successful chat replies, and daily provider attempts used for abuse and cost protection
• Preferences: app-scoped local settings such as onboarding, theme, privacy lock, and the AI-upload notice

You can permanently delete an inspection, its photos, and its attached chat threads inside the app. Settings also provides a full inspection-data wipe. Uninstalling RepairLens removes its app-container data. Keychain high-water values used to prevent repeated free-inspection and same-day chat-limit resets may remain on the same device after an ordinary uninstall. They contain only encoded integer usage counts (daily chat values include a calendar-day marker), and no photos, diagnoses, chat text, or identity.

When a photo leaves your device: the AI diagnosis

Photos are sent off your device only when you tap Diagnose on an inspection. That tap is your choice, made per diagnosis; there is no background upload and no automatic sync. When you do run a diagnosis:

• What is sent: the photos in that inspection (the close-up plus any optional area-overview and appliance-label shots), any optional issue note you entered, and the prior diagnosis summary when you choose to re-diagnose the same issue.
• Metadata is stripped first: EXIF metadata (including GPS location) is removed from each photo before it leaves your device.
• Who processes it: Google's AI service processes the photos, optional issue note, prior diagnosis summary, and generated response solely to produce the result you requested.
• Not used for training: content submitted through Google's AI service is not used to train its AI models without permission. Google may temporarily cache inputs and outputs for up to 24 hours to operate the service; abuse-monitoring handling follows Google's API terms, and we configure or request reduced retention where available.
• The result comes back to your device and is stored in your on-device inspection history. LightPath Apps does not store your diagnosis unless you separately choose to send an optional content report described below.

If you never run an AI diagnosis, your photos never leave your phone.

When follow-up text leaves your device: AI chat

After a diagnosis, you can optionally ask RepairLens a follow-up question. Nothing is sent until you tap Send. For that request, RepairLens sends a compact text summary of the saved diagnosis, up to 12 recent chat messages, your new question, and your selected response language to Google's AI service. The diagnosis photos are not sent again in chat. The response returns to your device and is stored in a bounded local thread attached to that diagnosis. LightPath Apps does not store the thread unless you separately report one response. Free users currently receive up to 10 successful AI chat replies per local calendar day; Pro includes unlimited follow-up chat, subject to reasonable abuse and service-availability protections. Failed or cancelled requests do not consume the free successful-reply allowance. These limits and protections may change as described in the Terms of Service.

Optional AI content reports

If you choose Report this result or Report response, RepairLens sends the report reason, your optional comment, a bounded excerpt of that AI output, its identifier, the source-diagnosis identifier for chat, limited technical request details, app version, platform, timestamps, and an anonymous per-install identifier to a LightPath-operated reporting service hosted by Google. The report contains no photo and is not linked to an account or your identity. It does not include the rest of the chat thread. Reports are stored with Google for up to 180 days; short-lived quota records are stored for up to two days. You may request early deletion through our privacy requests page. Including the result identifier or, if unavailable, the approximate report date, reason, and comment helps us locate the anonymous record, but we may be unable to identify it without enough matching details. If the reporting service is unavailable, the app offers to copy the report so you can decide whether to email it to support instead.

Subscriptions (RevenueCat)

RepairLens Pro is purchased through the Apple App Store. To unlock Pro without requiring a RepairLens account, the app uses RevenueCat. RevenueCat receives an anonymous, randomly generated identifier, Apple transaction or receipt information, and limited service data such as device/OS, request timing, and IP/network information to validate and operate your entitlement. This identifier is not an account and is not used by us for advertising or cross-app tracking. Payment-card details are handled by Apple; neither LightPath Apps nor RevenueCat sees your payment card. See the RevenueCat Privacy Policy and Apple Privacy Policy.

Google service operation

RepairLens uses a Google app-integrity service, together with Apple App Attest, to protect service requests from abuse. The optional content-report endpoint rejects requests without valid attestation; app-integrity attestation is also configured for diagnosis requests. Attestation contains no photos or diagnosis content. Google's installation, configuration, integrity, and service-operation features may process an anonymous installation identifier, device-integrity material, IP/network information, request timing, and limited technical diagnostics. We do not use this data for behavioral advertising or cross-app tracking. See Google's Privacy Policy.

Third-party processors

Services involved in RepairLens's off-device flows include:

• Google: provides the AI processing service for metadata-stripped photos, optional issue notes, prior diagnosis summaries, generated responses, and the follow-up chat context you choose to send. Google also provides the app-integrity, configuration, anonymous installation, reporting, and limited diagnostic services described above.
• RevenueCat: validates and operates Pro subscription entitlements using an anonymous identifier, Apple purchase records, and limited technical data.
• Apple App Store: processes purchases, payment details, receipts, and subscription status under Apple's privacy policy.

We do not sell your data, use it for advertising, or use it to track you across apps or websites.

What RepairLens does NOT collect

• No behavioral or advertising analytics
• No advertising identifiers, ad networks, or cross-app tracking
• No Location Services access and no photo GPS metadata sent; ordinary IP/network information may still be processed by service providers as described above
• No account, email address, or login
• No contacts and no microphone access

Permissions RepairLens requests

• Camera: used to photograph the home problem you want diagnosed. This is the app's core function. Usage description shown by iOS: "RepairLens uses the camera so you can photograph a home problem to diagnose it. Photos stay on your device until you choose to run an AI diagnosis."
• Photo Library (read, optional): to import existing photos of a home problem instead of taking new ones. Usage description shown by iOS: "RepairLens lets you import existing photos of a home problem. Imported photos stay on your device until you choose to run an AI diagnosis."
• Face ID (optional): used only to unlock RepairLens when you turn on Privacy Lock. Usage description shown by iOS: "RepairLens uses Face ID to unlock the app when Privacy Lock is turned on."

That is the entire list. RepairLens does not request access to your location, contacts, or microphone.

A note on safety

RepairLens is informational only and is not a substitute for a licensed contractor, home inspector, electrician, plumber, or trained garage-door technician. Every diagnosis includes this disclaimer. RepairLens is designed to escalate signs of gas, electrical, structural, major water or sewage problems, mold, asbestos, or loaded/high-tension garage-door parts such as springs, cables, bottom brackets, and winding cones. When the model output identifies one of these known hazards, app-owned post-processing overrides internally inconsistent severity or DIY fields with an Urgent — get help now warning and professional guidance. Follow-up chat is buffered as structured output rather than streaming raw model text. Before display, the app checks the source diagnosis, the retained conversation window, a bounded app-owned safety state derived from earlier visible turns, and the new response. A known or newly flagged hazard is replaced with app-authored professional-only guidance; a diagnosis that already recommends a professional never receives procedural repair instructions; and a question about a different issue is directed to start a new photo diagnosis. Detection remains a best effort, not a guarantee that every hazardous condition will be recognized. See our Terms of Service for the full disclaimer.

Children's privacy

RepairLens is not directed at children under 13 and we do not knowingly collect data from them. The app keeps your photos and inspection history on your device except for the explicit diagnosis, follow-up chat, and optional content-report flows described above; anonymous entitlement, integrity, configuration, and diagnostic service data may also be processed as described above.

Changes to this policy

We may update this privacy policy from time to time. Changes will be reflected on this page with an updated revision date at the top. Because we don't collect contact information, we cannot notify you directly, so please check this page if you want to confirm the current version.

Contact

If you have questions about this privacy policy or about RepairLens's privacy practices, please contact us at:

• Email: [email protected]
• Support: RepairLens support page
• Data requests: privacy requests page