Privacy Policy
Effective July 23, 2026
Summary
PI Surveillance Log is an offline-first app. Fluid Bloom Media LLC does not operate a general case-content backend and does not receive your case records, observations, recordings, transcripts, photos, locations, reports, invoices, or client data during normal on-device use.
Data you enter
The app can store case and client labels, subject and vehicle profiles, surveillance sessions, observations, recordings and transcripts, photos, videos and documents, optional event location, investigator credentials, signatures, mileage, expenses, receipts, invoice data, and app defaults. This data is stored in the app’s private container on your device.
iCloud
On supported configurations, Apple’s private CloudKit service may sync app data among devices signed into the same Apple Account. Fluid Bloom Media LLC does not have access to the contents of your private CloudKit database. Apple’s terms and privacy practices govern iCloud.
Location, camera, photos, microphone, and speech
Location is requested only while the app is in use and only to attach a location to an event you trigger. Denial does not prevent logging. Camera, photo library, microphone, and speech-recognition permissions are used only after you choose those features. Recording starts only after you tap Record and is foreground-only. The app does not capture system phone-call audio, continuously track location, or record in the background.
Transcript analysis
On-device speech recognition and transcript analysis remain available without sending a recording to Fluid Bloom Media LLC. They may highlight possible names, places, organizations, and numbers and assemble a draft from exact transcript sentences. Highlights are unverified hints. Drafts remain excluded from reports until reviewed, and the original recording and transcript remain preserved. A Pro user may explicitly choose Enhanced Transcription for one selected recording. That recording is sent over HTTPS to the PI-specific Cloudflare processing service and ElevenLabs Scribe v2. fal.ai Whisper receives it only if ElevenLabs rejects the request before processing. fal requests disable input/output payload storage. The PI service retains retryable source audio for no more than 24 hours and a completed transcript for no more than seven days. Provider processing is governed by the provider’s privacy terms.
Purchases
Apple processes subscriptions. The app receives product and entitlement status but not your payment-card details. A PI-specific RevenueCat service receives an anonymous app identifier, Apple product and transaction information, and subscription status only to synchronize Pro access and subscription reporting. RevenueCat does not receive case content and this data is not used for advertising or tracking.
Sharing, export, and deletion
Case data otherwise leaves the app only when you use Apple services such as iCloud or explicitly export or share a file. Settings includes Export My Data and Delete My Data controls. Deletion removes local case content, settings, and the app’s anonymous service identity and requests deletion of PI-service transcription jobs; iCloud-synced deletion may propagate to your other devices. Removing the app may not itself delete data already synced to iCloud.
Analytics and advertising
The app includes no advertising SDK and does not use case content for analytics or tracking. It does not silently rewrite observations or generate unsupported factual claims.