Eidos — Privacy Policy
Last updated 31 October 2026. Separate sections cover the browser worksheet, the released Eidos app, and a planned update clearly marked below.
The browser worksheet
The free worksheet holds your entries in this page's memory. Its code does not send them to a server, put them in the address or feedback email, or write them to cookies, local storage or a database. There is no analytics or third-party script in the tool.
The site is hosted on GitHub Pages. Loading its pages and files makes normal web requests to that host. Links and optional email feedback are separate actions; your email provider and recipient receive anything you choose to send. Do not include confidential or third-party personal data.
Copy asks your browser to write the selected preview to the clipboard; permission and clipboard history depend on your browser and operating system. Clear worksheet resets the page's fields and preview. It does not erase the clipboard, external copies, or browser-managed autofill or session history. Copy what you need before closing or refreshing: the worksheet has no saved-draft or recovery service.
The Eidos app
The Eidos app has no account, no server and no analytics. It makes no network requests of its own and requests no device permission. The only outside service involved is Apple's App Store, if you choose to buy Eidos Pro.
What Eidos stores, and where
Everything you enter stays in the app's own storage on your device: your work topics, examples, your contribution and notes, links, dates, the purpose you set for a summary, interview answers and the legacy model settings. PDFs you attach are chosen with the system file picker and copied into the app's container; Eidos never reads other files. Each time you share a summary, Eidos keeps a private history of when it happened, how many examples and which fields were included — never who received it.
Planned update: private drafts and saved outputs
The following features are being prepared and are not yet included in the App Store release. This section describes their local data use; it does not announce their availability.
- A sharing draft stores a private name, references to the examples you selected, field choices, timestamps and revisions in the app's local database. The private draft name is not part of the shared text.
- Saving an output version keeps the exact preview text you explicitly selected, together with its draft and selection references and date. Updating an example, changing language or improving interface wording does not silently rewrite that saved text. A separate current preview lets you review differences before preparing another draft.
- The app keeps local activity for each saved output, such as when a share sheet was opened, completed or dismissed. It does not store a recipient or establish delivery or a read receipt.
- Deleting a draft or an included example also removes its retained output versions from the app's local record. Erase targets your local work record, including drafts, saved outputs and activity. If saving fails, use the displayed retry action before closing the app. External copies and device backups remain outside this action's control.
Device permissions
None are requested. Attaching a PDF uses the system file picker, which needs no permission. Eidos contains no usage-description strings for camera, microphone, location, contacts, photos, health, or tracking, because it uses none of those. There is no advertising identifier and no App Tracking Transparency prompt, because there is nothing to track.
The consent ledger
The permissions on the Fidelity screen are Eidos's own, internal to the app: they describe which of your own evidence sources the fidelity computation is allowed to consider. Granting one does not give Eidos access to anything on your device; it changes a number in a local calculation. Revoking one does not delete the earlier entry — the ledger is append-only, so what was visible when can still be audited later. Nothing in that ledger leaves the device.
What is sent anywhere
Nothing, except what you share yourself: a summary leaves the app only when you send it through the iOS share sheet, to the app and person you choose. Eidos contains no analytics SDK, no crash reporter, no advertising identifier, and no code that contacts Norea Studio or any third party. The composition and judging that the app performs run on-device and deterministically; no model provider is contacted and no API key exists.
What Norea Studio receives
Nothing, unless you email me. Then I have your message and your address.
Purchases
Eidos Pro is an optional auto-renewing subscription (monthly or yearly). Apple processes the payment through your Apple Account; Norea Studio never sees your payment details, name or Apple ID. The app only learns, from Apple's signed transaction data checked on the device, whether Pro is active. Apple provides developers with sales reports that do not identify you. Manage or cancel the subscription in your Apple Account settings. If Pro ends, nothing you saved is hidden, locked or deleted.
Where Apple makes it available, Eidos Pro can also be offered as a one-time Lifetime purchase. The offer and price come from the App Store. Restore Purchases checks existing eligible purchases; erasing local work does not cancel a subscription or erase Apple's purchase history. If Pro is no longer active, existing work remains readable, editable and shareable; free limits apply when adding new items.
Personas
The figures in the persona library are historical and public-domain, and each carries a rights record stating the basis. Entries without a record are marked memorial only and are never represented. No living person is profiled from public data by this app.
Children
Eidos is not directed at children and collects nothing identifying about anyone.
Your rights under GDPR and KVKK
Access, rectification, portability, erasure, and objection all concern data held by a controller. Norea Studio holds none of your Eidos data — there is no server-side copy to produce, correct, export, or delete. Deleting the app removes its local app data from that device. Offloading removes the app software while retaining its documents and data on the device. Device backups and any copies you make outside the app may remain under your own or a recipient’s controls; Norea Studio cannot remotely erase them. If you email me, that message is the only personal data I hold, and you can ask me to delete it at any time.
Changes
Changes move the date at the top; the earlier text remains in this site's public history.