Last updated 26 September 2026
Your photos are sensitive. ModelIQPro treats them as biometric data and handles them with care.
Nothing, until you allow it. On the "Before your first scan" sheet you confirm you are 18 or older, that the photos are of you, and that they may go to Anthropic, the AI company that writes the read. After that, each scan sends downsized copies of your three photos over an encrypted connection, through our server, to Anthropic. The shoot-day routine sends your four quiz answers, and your latest scan photo only if you choose that. To stop either, tap Turn off sharing in Profile, and the next scan or routine asks again before anything is sent.
Anthropic does not use what you send to train its models. It deletes your photos, your answers and the read it writes within 30 days, unless its safety review flags them, in which case it may keep them for up to two years.
No photo, no read and no quiz answer. To limit how many scans one caller can run, it keeps a salted hash of the network address each request comes from, with a count. Once it is two days old, it is deleted the next time anyone scans. Its log keeps the size and cost of each call, and what went wrong when a call failed, for 7 days. The log never keeps a photo, an answer or the words of a read. When the AI's reply cannot be read, it keeps only the reply's length.
Our host, Supabase, keeps a record of each request for 7 days, for security and to keep the service running: the IP address it came from, your phone's user agent (the app and system version it sends), the city and postal code that Cloudflare, our host's network, works out from that address, with its region and country, and technical details of the connection. We cannot turn that off. It is used only to run the service, and none of it is used to track you.
The app saves your photos, your reads, your labels, your plan progress and your shoot-day routine on your phone, inside the app, until you delete them. None of it is saved on our servers. Anthropic's copy of what you send, and of the read it writes, is separate: it deletes that within 30 days, unless its safety review flags it. Your phone's own backup, such as iCloud, may include what the app saves.
Delete a single scan from the bottom of its read, or delete everything at once from Profile. Deleting removes the read and the photo files the app keeps on your phone, including the camera's full-size copies. The image of a casting card you share is deleted when the share sheet closes. If your phone does not report that the sheet closed, it is deleted at the latest when you next share a card, or when the app next starts after it was fully closed, for example by swiping it away. Coming back to the app while it is still running does not delete it. Delete all removes any left behind. If a file cannot be deleted, the app says so, tries again on the next delete, and Profile offers to finish it. Our server keeps no copy. Deleting in the app does not reach Anthropic's copy, which Anthropic deletes on its own within 30 days, unless its safety review flags it.
We never sell your photos or your data, never share them for advertising, and run no analytics, no trackers and no ads. There is no account.
If you leave your email on the ModelIQPro page to hear when the app is out, we keep that address for that one message and nothing else, and we delete it when you ask.
Adults only. You must be 18 or older.
When this policy changes, the new version goes up on this page with its new date, and the app points out any material change.
ModelIQPro is made by SVLTMK LLC. Questions about your data are welcome at the address below.
SVLTMK LLC, maker of ModelIQPro