NConform Privacy Policy

This Privacy Policy describes how the NConform mobile application ("the App") handles your information. The App is published by Iron Stratos LLC ("IronStratos," "we," "us," or "our"). IronStratos is the trade name of Iron Stratos LLC. For our website privacy policy, see ironstratos.com/privacy.

Plain-English summary: NConform stores your nonconformance, audit, and training data on your device only. We don't have a user database, we don't have user accounts in v1, and we can't see your records. The only data that leaves your phone is the text you send to our AI pattern-detection feature (which is processed in real time and never stored on our servers) and standard advertising identifiers used by Google AdMob to show ads on the free tier.

1. Information Stored on Your Device

The App stores the following information locally on your device using your phone's app storage. None of this data is transmitted to IronStratos servers:

Nonconformance records (NCRs) — text you enter describing nonconformances, dispositions, and corrective and preventive actions (CAPA).
Audits — LPA layered process audit checklists, findings, and results you record.
Training records — training assignments, completions, and competencies you log, including items generated by the NCR-to-training closed loop.
Safety observations — observations and near-miss notes you capture.
Photos — images you attach to NCRs, audits, training records, and observations. These are saved to the App's private storage on your device.
Settings — your name, company, department, and role (used to personalize reports and exports).

Uninstalling the App removes all of this data. There is no cloud sync and no user account in v1.0.

2. AI Pattern Detection

When you use the App's AI pattern-detection features, the relevant text from your NCRs, audits, training records, and safety observations is sent to our processing endpoint, which analyzes it in real time to surface recurring patterns and suggestions.

This text is processed in real time to generate a response and is not stored on our servers.
Photos are not sent for AI processing. Only text content is transmitted.
AI output is assistive only and may be incomplete or inaccurate — see our Terms of Service.

3. Advertising (Google AdMob)

The free tier of the App displays ads served by Google AdMob. AdMob collects your device's advertising identifier (such as the Android Advertising ID) and ad-interaction data, and may collect device information to deliver and measure ads.

Google's data practices are governed by the Google Ads policy and Google Privacy Policy.
Users who complete the one-time in-app purchase do not see ads. Removing ads disables AdMob entirely within the App.
You can reset or limit your Android Advertising ID in your device settings under Google → Ads.

4. Device Information

The App uses standard device APIs to function — for example, requesting camera access to take photos, photo library access to attach images, and storage access to save data. These are governed by your device's permission system and you can revoke them at any time in your phone's settings.

The App reports anonymized crash data through Expo's standard error reporting. No personally identifying information is included in crash reports.

5. No User Accounts

The App does not require an account in v1. We do not collect your name, email address, or any other identifying information server-side. The "name" field in Settings is stored locally on your device and only used to personalize reports and exports — it is never transmitted to IronStratos.

6. Data Retention and Deletion

Because all data lives on your device, you control retention. To delete data:

Delete a single NCR, audit, training record, or observation — use the in-app delete control on the corresponding screen.
Clear all App data — go to your device's app settings, find NConform, and tap "Clear data" (Android) or uninstall the App.
Uninstalling removes everything. There is no server-side copy to delete.

Pareto charts and PDF exports you generate are produced on your device from your local data.

7. Children's Privacy

The App is intended for adult users in industrial workplaces and is not directed to children under 13. We do not knowingly collect any information from children.

8. Changes to This Policy

We may update this Privacy Policy as the App evolves (for example, when we add cloud sync or accounts in a future version). We will post any changes on this page and update the "Last updated" date. Material changes will be communicated via an in-app notice.

9. Contact

If you have questions about this Privacy Policy or how the App handles your data:

Iron Stratos LLC
[BUSINESS ADDRESS]
info@ironstratos.com