Privacy & pilot details

What is stored

The pilot stores your account email, a password hash, uploaded visit ZIPs, photos, audio, notes, and phone transcripts. Files are held on the pilot operator's Mac in private local storage. The operator can access the server files for support and operation.

Keep your original visit files. This is an early pilot with limited availability and no guaranteed backup or retention service. You can download your original ZIP or delete an uploaded visit from its detail page. Contact the person who invited you for account deletion or assistance.

Private visits and sharing

Visits are visible only to the signed-in account that uploads them unless you create a share link. A share link gives anyone holding it read-only access to that visit's photos, audio, notes, and phone transcript until it expires or you revoke it. It does not reveal your email address or other visits.

Shared photos are served without embedded EXIF or GPS metadata, and narration is remuxed without source metadata. Property names, spoken words, notes, and visible content may still identify people or places. Review that content before sharing. Saved recipient copies cannot be revoked. Original ZIP downloads, available only to the owner, retain the original export metadata.

Phone transcripts only

This pilot reuses transcripts supplied by the iPhone app. Uploading does not send media to an AI provider, create an AI report, or purchase server transcription. If the ZIP contains no transcript, its photos and audio remain available with a missing-transcript message. Phone recognition may make mistakes.

Accounts and connections

Enrollment is by an email-bound invitation from the pilot organizer. Passwords are protected with Argon2id hashes. Essential session cookies keep you signed in on the website. The iPhone app stores a separate revocable sign-in token in the device Keychain; the server stores only its hash. Native sessions expire after 30 days. Signing out revokes that phone session and resetting your password revokes all phone sessions. There are no advertising or analytics trackers.

When accessed through the public pilot address, an encrypted Cloudflare tunnel carries requests to the local server. Cloudflare processes connection information as the network provider. The operator can explicitly connect an invited account to Pacific West. That connection adds Pacific West as a separate upload destination in the app; it does not send your personal library there. Pacific West uploads require the phone’s existing activation and property permissions, and use Pacific West’s AI processing and Zammad ticket workflow. The app names the destination before you consent. Personal-library uploads never create tickets or AI reports.

Pilot limits

Each ZIP can be up to 90 MB, with at most 200 photos and six hours of audio. Account storage and visit limits are shown in the library. Sharing is included in the free pilot. No billing or paid AI features are enabled.