No data leaves the app
No Internet permission, backend, advertising, analytics, attribution, remote crash reporting or account service.
REFERENCE BAY · P
Privacy centre
Project Seventeen keeps only a few fixed planning choices on the device and sends nothing to the publisher or a third party.
The short version
Release 1.0.0 is deliberately data-minimal.
Four kinds of preset state
One pattern ID, preparation-ticket IDs, Ready Lock IDs and the Reduce Motion preference may remain in app-private storage.
No sensitive input
No free text, name, email, phone, donor, beneficiary, child, member, health, location, media or financial field.
Two ways to reset in app
Reset planning choices, or clear all local state. Android Clear storage and uninstall are also available.
The public policy below comes from the same canonical 18-section JSON bundled in the Android release.
Important boundaries
Local-first design does not remove the need for careful real-world handling.
Screenshots are outside the data model
Avoid using screenshots or unrelated device notes to create sensitive parallel records.
Real records stay with responsible owners
Partner contact, permissions, incidents, safeguarding and financial records remain in authorised systems.
New behaviour requires review
Any account, SDK, permission, network, form, link-opening, contact or storage change requires a new policy and Play declaration audit.