Scrim — Privacy

Scrim collects nothing, stores nothing about you, and sends nothing anywhere. This page says exactly what that means and how each sentence is checked.

What Scrim reads

The live camera preview and the device’s gravity vector. The preview frame is converted into a 256-bin brightness histogram and then released; no frame is written to disk, kept in memory beyond the current measurement, or shown to anything but you. The gravity vector comes from CoreMotion and says nothing about where you are.

What Scrim stores

Three settings, on this device, in the standard user-defaults store: your accelerometer-noise figure, the half field of view you selected for the converging-verticals model, and the display headroom you chose to compare against. Nothing else — no photos, no measurements, no history.

What leaves the device

One thing, and only if you have a paired Apple Watch with the Scrim watch app open: the frame decision. That is a small set of numbers — the verdict, the horizon angle, its band, and the clipped fraction — sent over Apple’s own device link between your phone and your watch. No image is ever sent, and nothing reaches Anthropic, Apple, us, or any server. If you have no watch, nothing leaves the device at all.

What Scrim does not do

• No network requests of any kind. There is no server to talk to.
• No analytics, no crash reporting, no identifiers, no advertising, no tracking.
• No account, no sign-in, no email address.
• No photo library access. Scrim measures the live frame; it never reads your photos.
• No microphone, no location, no contacts, no calendar.
• No in-app purchases, so no purchase data.

The one permission

Camera. Without it there is no frame to measure. iOS asks you once and you can withdraw it at any time in Settings; Scrim then simply has nothing to measure and says so.

How these sentences are checked

Each claim above corresponds to a check that runs on every build and fails the build if the claim stops being true. The source is scanned with comments stripped for URLSession, URLRequest, CFNetwork, NWConnection, CLLocationManager and StoreKit, and for image-writing calls such as CGImageDestination, AVAssetWriter and PHPhotoLibrary. The permission keys that must be absent are checked for absence; the camera key that must be present is checked for presence. A privacy promise nobody measures is worse than none at all, because people rely on it.

Children

Scrim is rated 4+ and contains no user-generated content, no messaging, no web browsing and no advertising. It has nothing to collect from anyone, of any age.

Changes

If any of this ever changes, this page changes with the release that changes it, and the corresponding build gate changes too — they cannot drift apart.

Contact

Questions: hello@norea.studio.