Privacy Policy

The short version

• The app works without an account and without internet. An account is needed only for backup and for sharing or publishing a place.
• Backup is off until you turn it on. When it is on, your scanned places — and where each one is — are copied to our server. Nothing else is.
• Anything you say to the app stays on your iPhone. Voice control is optional, and your speech is turned into text on the device — never recorded, stored or sent anywhere.
• Camera vision is optional and runs on the device. No picture is ever uploaded or saved. What the camera remembered never leaves your iPhone, even with backup on.
• A published place is public. A code on a wall can be scanned by anyone who sees it, so the map behind it can be downloaded by anyone who sees it.
• We never ask for medical or diagnostic information.
• We do not sell your data, and we do not run advertising.

Backup — off until you turn it on

ICIDO can keep a copy of the places you have scanned on our server, so that a lost or replaced iPhone does not mean losing your maps, and so that you can share a place with someone else. This is off when you install the app and stays off until you switch it on in Settings. Nobody is opted in.

When backup is on, each backed-up place carries:

• The place itself — its geometry and layout, the rooms and tagged spots in it, and the names you gave them.
• Where the place is — the location stamped on it when you scanned it, so a place restored onto a new iPhone can still be found nearby. This is the location of the building, recorded once at scan time. It is not a record of where you go.

That is the complete list. Backup does not include anything you have said to the app, anything the camera remembered, your visit history, trails or heat maps, or your location at any time other than the moment a place was scanned.

Turning backup off deletes every place held for you. Deleting a single place from backup keeps it recoverable for seven days, in case you deleted the wrong one, and then removes it permanently. Deleting your account removes everything at once. None of this touches the places on your iPhone.

Your account

An account is needed only for backup and for sharing or publishing a place. You can sign in with Apple, or with an email address and password. Here is everything we hold about an account:

• An account identifier, so we can tell your places from someone else’s.
• An email address — the one you typed if you signed up by email; if you used Sign in with Apple, either your real address or the private relay address Apple gave us, depending on what you chose in Apple’s sign-in sheet.
• Your name, only if you used Sign in with Apple and chose to share it. Apple sends it once, the first time you sign in, and we keep what it sent.

To delete your account: in the app, go to Settings → Account → Delete account. This removes the account and every place held in backup for it, immediately and completely — there is no waiting period and no request to send. The places on your iPhone are not affected. You can also delete an account from this website, or by emailing us.

Places you publish

You can publish a place as a code — a QR code and a short web address — so that other people can scan it and get the map. A code on a wall is readable by anyone who walks past it, so the map behind it is effectively public. Publish buildings, not homes. Publishing never happens on its own; it is a separate action you take for one place at a time.

• Anyone who scans the code downloads that map. They need no account, and nothing about them — not their routes, their history, their location, or their camera — is sent to ICIDO or to you.
• Our web server records, for each request it receives, the requesting IP address, the time, the address requested and the browser or app that asked. Those logs are kept for fourteen days and then deleted. We keep a count of how many times each code has been fetched and when it was last fetched; that count carries no information about who fetched it.
• Unpublishing stops the code working immediately. If you re-walk a place and back it up again, the same code hands out the new map — codes already printed keep working.

What the app records — on your device only

• Camera & LiDAR — used live to scan rooms and to recognise where you are inside a saved place. Camera frames are processed on the device in real time and are not recorded, stored, or transmitted. If you turn on Camera vision, ICIDO can optionally keep the text descriptions it produced — never the pictures. See Camera vision below.
• Location (optional) — if you grant it, an approximate location helps identify which saved place you are in more quickly, and is stamped on each place when you scan it. It is stored on the device. The only time it leaves is with the place it belongs to, if you turn on backup; your location at other times is never transmitted.
• Motion & barometer — used to detect when you change floors. Processed on the device only.
• Microphone (optional) — used only while you are actively holding a voice conversation with the app. Audio is transcribed on the device and is never recorded, stored or transmitted. See below.
• Your maps and history — scans, tagged spots, rooms, buildings, trails and heat maps are held on your iPhone. Trails and heat maps never leave it. Scans, rooms, buildings and tagged spots leave it only if you turn on backup.

Microphone and speech

ICIDO has an optional voice control feature. When you tap the microphone button, ICIDO listens so you can ask it to guide you somewhere, tag the spot you are standing on, scan an area, or describe your surroundings.

Your speech is converted to text entirely on your iPhone. ICIDO uses Apple’s on-device speech recognition and explicitly requires it: if your iPhone cannot recognise speech locally, the voice feature is switched off rather than sending your audio anywhere. ICIDO does not use, and cannot fall back to, server-based speech recognition.

• Audio is never recorded to a file, never stored, and never transmitted.
• Audio is processed only while you are actively using the microphone button, and the microphone is released the moment the conversation ends or you leave the screen.
• The text of what you said is used only to carry out that one command. It is kept in memory for the length of the conversation so follow-up questions (“how far now?”) make sense, and is discarded when the conversation ends.
• Nothing you say is used for advertising, analytics, profiling, or training any model.

Understanding what you asked for is also done on your iPhone, using Apple Intelligence where the device supports it. On iPhones without Apple Intelligence, ICIDO matches your words against a fixed list of commands locally. In neither case does anything leave the device — and this is true whether or not backup is on.

You can decline microphone access, or withdraw it later in iOS Settings → ICIDO. The rest of ICIDO is unaffected: scanning, navigation, Find Me and everything else work exactly the same without it.

Camera vision

ICIDO can optionally answer questions about what its camera is looking at — “what do you see?”, “read that sign”. This uses a vision model that runsentirely on your iPhone.

• No image, video, or frame from the camera is ever uploaded or transmitted, and the picture itself is never saved — whatever your settings.
• The model is a separate download of about 370 MB, delivered by the App Store the first time you turn the feature on, under the same terms as an app update. Downloading it tells Apple you are downloading it, and tells us nothing.
• Reading text (signs, labels, screens) uses Apple’s on-device text recognition, which is part of iOS. It needs no download and sends nothing anywhere.
• If ICIDO cannot identify something, it can offer a “Look this up” button. That opens the standard iOS share sheet with the camera image so you can send it to an app of your choosing. ICIDO transmits nothing itself — the image leaves your iPhone only if you tap that button and then pick a destination, and what happens next is governed by that app’s terms, not ours.
• You can remove the model at any time in Settings → Camera vision.
• Everything else in ICIDO works without it, including all questions about where you are and how far away things are, which are answered from your own saved map.

Remembering what was seen — off unless you turn it on

ICIDO can optionally keep the descriptions it produced, so you can later ask “where did I leave my keys?”. This is a separate switch in Settings → Camera vision, and it is off by default. When it is on, ICIDO stores, on your iPhone only:

• the text description the model produced,
• the question you asked,
• which place and room you were in, and roughly where you were standing,
• the date and time.

No images are kept — only text. This record is never uploaded, is excluded from iCloud backup, is kept until you delete it, and “Clear” in Settings erases it completely. With the switch off, each answer is spoken and forgotten, and nothing is written down at all. This record is never included in backup. It is a written account of the inside of your home, and it stays on the device that made it.

Information you give us — only if you register on this website

A website account is separate from an app account, and none of this is needed to use the app. If you choose to create an account here — for the newsletter, beta testing, or joining as a developer or organization — we ask for:

• Name — so our replies can address you properly.
• Email address — to identify your account, verify it, send a welcome message, and contact you about your account.
• Country, state or region, and city — for language and regional defaults, and to understand where ICIDO is used, in aggregate.
• Preferred language — so we write to you in your language.

Everything else is optional and clearly marked as such. You may skip all of it, and you can change or remove it later at any time:

• User type, intended uses, and goals for using ICIDO
• Mobility preferences — as preferences only, never a diagnosis
• Community participation, beta testing, and newsletter choices
• Developer details and organization details, if you are joining in those capacities

The Data Collection Policy lists every field individually, with its purpose and how long it is kept.

What we never ask for

ICIDO does not request, and you should not send us, medical diagnoses, clinical records, disability certifications, or any special-category health information. Where registration asks about mobility, it asks only how you would like the app to behave — never why.

Security log

For any account, we keep a security and support log of account events: account created, signed in, signed out, a place backed up, published or deleted, consent accepted, password reset requested, account deleted. Each entry records what happened, when, and the IP address the request came from. We use it to keep accounts secure, to diagnose problems you report, and to produce aggregate counts. It is not used for advertising or profiling, and it is not sold.

Consent records

If you register here and accept the Terms of Service, this Privacy Policy, and the Data Collection Policy, we store which version you accepted and the moment you accepted it — for this document, the identifier privacy-3.0. If a document changes materially, we will ask you to review and accept the new version.

Email

If you register by email, we send a welcome email, and account-related messages such as email verification and password resets. Product news and newsletters are opt-in only, and every one carries an unsubscribe link. Turning off the newsletter never affects your account.

Where your data is stored, and for how long

Our server runs on Amazon Web Services in the United States (the us-east-1 region, in Virginia). Everything sent between the app and the server, and between your browser and this website, is encrypted in transit.

Backed-up places are stored as files on that server. They are kept outside the web server’s reach, under names that cannot be guessed, readable only by the software that serves them, and there is no address anywhere that lists them. A published place can be fetched only through its own code, which is 32 random bytes long and cannot be walked or enumerated. We do not currently encrypt these files at rest on the disk, and we would rather say so than claim a protection that is not there.

Account information is kept for as long as your account exists. Backed-up places are kept for as long as backup is on. A place you delete from backup is recoverable for seven days and is then removed for good. When you delete your account, your account, your places and your consent records are erased at once; security log entries are kept for a limited period and then deleted, and web server access logs are deleted after fourteen days. Anonymous aggregate counts that cannot identify you may remain in our totals.

Your locally stored maps are governed by your iPhone. If you use iCloud device backup, they may be included in your own encrypted Apple backup, under Apple’s control — that is separate from ICIDO backup and happens whether or not ICIDO backup is on.

Your rights

Whether you have an app account or a website account, you can at any time:

• Turn backup off, which deletes every place held for you
• Delete a single place from backup, or unpublish a code
• Delete your account, from inside the app or from this website
• See and correct everything in a website profile
• Change your communication preferences, including the newsletter
• Request a copy of your account data, by emailing us

Depending on where you live, you may have further rights under laws such as the GDPR or the CCPA — including objecting to processing and lodging a complaint with your data protection authority. Write to us and we will help.

Sharing

We do not sell your personal data, and we do not share it for advertising. We use a small number of service providers to operate the service — cloud hosting and email delivery — and they process data only on our instructions. Beyond that, we share information only if the law requires it.

Separately, you can share a place. You can export it as a .spacemap file through the standard iOS share sheet, which goes only where you send it; or, with backup on, you can publish it as a code, which anyone who sees the code can use. Both are always started by you.

Children

ICIDO is not directed at children, and we do not knowingly create accounts for children under 13 (or the minimum age in your country). If you believe a child has registered, contact us and we will remove the account.

Changes

If this policy changes, the version, effective date and identifier at the top will change. If you hold an account, material changes will be surfaced and will require your acceptance.

Contact

Questions, requests, or complaints about privacy: Nader@schoolfablab.com

This document is written in plain language for clarity. It is not legal advice, and it has not been reviewed by a lawyer.