PuzAI Privacy Policy

What PuzAI does not do

• No accounts. PuzAI does not ask for a username, email, phone number, or login of any kind. There is no server-side account because there is no server.
• No analytics. PuzAI does not include Firebase Analytics, Google Analytics, Mixpanel, Amplitude, Sentry, Crashlytics, or any other analytics or telemetry SDK. There are no tracking pixels, no install pings, no usage counters.
• No advertising. PuzAI shows no ads and links to no ad networks. The Android build explicitly removes the com.google.android.gms.permission.AD_ID permission.
• No network of PuzAI’s own. PuzAI itself has no server and makes no network requests of its own. The Android build declares no INTERNET permission, so the OS prevents PuzAI’s own network calls regardless of code. The iOS build sets NSAllowsArbitraryLoads = false and NSAllowsLocalNetworking = false. Static checks in scripts/privacy_audit.sh fail the build if any networking API surface is referenced. The one exception is the App Store / Google Play in-app purchase flow, which is handled entirely by Apple and Google — not by PuzAI (see Purchases below).
• No cloud sync. PuzAI does not use iCloud, Google Drive, Firebase Storage, or any third-party cloud. Projects and photos live in the app’s private sandbox on this device only.
• No third-party sharing. PuzAI does not share data with any third party because PuzAI has no data to share — see above.

What PuzAI stores on your device

The following data lives in PuzAI’s sandboxed app storage and is visible only to PuzAI on this device:

1. Project records — the project name, piece-count estimate, creation date, and a list of attached image file names. Stored as JSON files in the app’s Application Support / internal storage directory.
2. Imported photos — when you tap “Take photo” or “Choose from Library,” PuzAI copies the selected image bytes into its private images folder. Photos are never uploaded.
3. Pipeline output — temporary, in-memory only. Piece groups, colour clusters, and on-device hints are not persisted between launches.

Deleting a project removes the JSON record AND recursively removes every photo in that project’s images directory. Uninstalling the app removes everything PuzAI ever wrote.

Camera and photo library access

PuzAI requests:

• Camera access — only when you tap “Take photo” or open the Live AR view inside Match Mode. iOS prompts via NSCameraUsageDescription; Android prompts via the runtime CAMERA permission flow. The Live AR view streams the camera feed through ARKit on-device to anchor overlays on the puzzle board — frames are never recorded, never persisted, and never uploaded. PuzAI does not run the camera in the background or access it for any purpose outside these explicit user actions.
• Photo library access — only when you tap “Choose from Library.” iOS uses PhotosPicker (PHPickerViewController under the hood), which does NOT require library permission and returns only the photo you explicitly select. Android uses ActivityResultContracts.PickVisualMedia, which has the same single-photo scope.

On-device intelligence (Apple Foundation Models)

PuzAI is a sorting assistant: it groups your pieces into colour and region buckets, points out likely edge pieces, and offers region hints to help you organize your work — it does not solve the puzzle or place pieces for you. When you run the piece-sorting pipeline on a device that supports Apple’s Foundation Models framework (iOS 26+ with Apple Intelligence enabled, on a capable iPhone or iPad), PuzAI may use the on-device language model to phrase a colour- or region-group hint as a more natural sentence. This processing happens entirely on your device. The model does not see your photo bytes — only the colour family name, piece count, and (when available) the matched reference zone label. The model output is shown on screen and discarded when you close the app.

If Apple Intelligence is not available, low-power mode is on, or your device runtime is below iOS 26, PuzAI uses a deterministic heuristic hint instead. The user-facing UI is identical.

On Android, the equivalent on-device LLM path (Gemini Nano via AICore) is currently scaffolded but not wired. When it ships, the same data-handling rules will apply: only the small numeric/label context is sent to the on-device model; never the photo.

Purchases

PuzAI is free to download and includes a 3-day full-access trial. Starting that trial happens locally on your device and does not contact Apple or Google, create a subscription, or charge you. After the trial, a single one-time purchase at the store-displayed local price unlocks the app permanently. There is no subscription. Purchase, restore, receipt verification, refund handling, and localized price display are handled by Apple’s App Store (iOS) or Google Play (Android) through their own systems. PuzAI never sees or receives your name, payment card, or billing details, and no puzzle, project, or photo data is ever involved in a purchase. The developer receives only anonymous, aggregate sales figures from Apple and Google — never anything tied to you. Apple’s and Google’s handling of the transaction is governed by their own privacy policies.

Children and the Family Sharing tier

PuzAI does not target children under 13 and does not knowingly collect any data from anyone of any age. The app is age-rated 4+ in the App Store catalog because it contains no objectionable content; it is suitable for younger users but is designed for adults working on jigsaw puzzles.

Changes to this policy

If PuzAI ever changes a privacy-affecting behaviour (for example, if a future release adds an opt-in cloud-backup feature), this document will be updated and the change will be summarised at the top of this file with the effective date. The current architecture does not permit any such behaviour; adding it would require new code that violates the static privacy audit in scripts/privacy_audit.sh, which would be visible in the open source diff.

Trademarks

PuzAI is a trademark of Rizk Corsight, LLC. Apple and App Store are trademarks of Apple Inc.; Google Play and Android are trademarks of Google LLC. All other product and company names are used for identification only and remain the property of their respective owners.

Contact

Privacy questions or requests:
Rizk Corsight — rizkcorsight@rizkcorsight.com

Source code transparency: PuzAI’s repository contains a scripts/privacy_audit.sh script that statically verifies the absence of network code paths. The CI workflow runs this check on every push and PR — a build that breaks the privacy guarantees cannot land.