Privacy Policy

Last updated: September 26, 2026

Personal Asset Vault, LLC, doing business as Acier (“we,” “our,” or “Acier”), operator of the Acier service (the “Service”), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, protect, and share your information when you use our mobile application, website, and related services.

1. Information We Collect

Information You Provide

  • Account information: When you sign in, we use Sign in with Apple. Apple provides us with a stable, app-specific user identifier and, only if you choose to share it, your name and a relay or real email address. We do not collect or store passwords; authentication is handled entirely by Apple.
  • Property information: Property names and physical addresses you enter. The app uses Apple’s geocoding service to convert each address to coordinates (latitude and longitude) so we can retrieve risk information for the property (see Section 4).
  • Inventory data: Photos, item descriptions, valuations, and room/property organization. Your inventory is stored on your device and in your personal iCloud account. Acier does not keep a copy of it on our servers.
  • 3D room scans: Optional LiDAR room captures and room thumbnails. These are stored on your device and in your iCloud account, like the rest of your inventory.
  • Insurance documents: Policies you upload for AI analysis. The PDF is kept on your device so you can open and share it. Before the policy is sent for analysis, Acier looks for the insured’s name, street addresses, and dates of birth and removes them on your device. Scanned and photographed pages get the same check, and a page that cannot be checked stops the upload. The redacted policy is processed through a stateless AI proxy and Acier does not keep it after analysis. The resulting coverage analysis, and any values you correct, are saved with your inventory.
  • Coverage conversations and assessments: When you chat with the Underwriter Agent or answer an assessment, your messages and answers are sent for AI analysis together with a summary of your coverage and inventory and your property’s city, state, and ZIP code, never its street address. The conversation is stored on your device, not on our servers.
  • Voice input (optional): If you record a voice note, your speech is transcribed by Apple’s speech recognition, which may process audio on your device or on Apple’s servers under Apple’s privacy policy. Acier receives only the resulting text, never the audio.
  • Payment information: Processed entirely by Apple through the App Store. Acier does not collect, process, or store any payment card or billing details. We receive Apple’s transaction records for your purchases so we can verify subscriptions and add captures, and we keep your capture balance with your account.

Information Collected Automatically

  • Precise location (Pro / Pro+, when granted): If you grant “While Using the App” location permission, we capture your device’s location once per capture session to stamp where items were cataloged. Location is not collected in the background and is never used for advertising or tracking.
  • Device type, operating system version, and app version (for compatibility and debugging)
  • Anonymous aggregate totals, while “Share Anonymous Analytics” is on in Settings (it is on unless you turn it off): at most once a day, how your number of items and policies, total estimated item value and its value range, and items per category changed since the last report, plus your current Protection Score. We add them to a single daily total for all users and do not store them with your account or any identifier.
  • AI usage records: for each AI request, the feature used, the AI model, the token counts and the time, linked to your account so we can understand what the service costs to run. They contain none of your content and are deleted with your account.
  • Crash reports that you choose to share with developers through Apple (to identify and fix bugs)

Information We Do NOT Collect

  • Contacts or address book
  • Browsing history
  • Advertising identifiers or third-party tracking cookies
  • Background or continuous location
  • Identifiable analytics through any third-party SDK
  • A server-side copy of your inventory

2. How We Use Your Information

  • Service provision: To operate the app, sync your data privately to your account, and process AI analysis requests on your behalf
  • AI processing: Item photos, descriptions, redacted policy text, and coverage questions are sent to Anthropic through our stateless AI proxy for identification, valuation, and coverage analysis. Acier does not keep them after the request completes. Anthropic does not use them to train its models and deletes them under its commercial data-retention terms.
  • Risk data lookups (Pro / Pro+): When you add a property, the app sends its coordinates to our servers, which round them to about 100 meters and query public government data sources (FEMA’s National Flood Hazard Layer, the USDA Forest Service Wildfire Hazard Potential dataset, and the USGS National Seismic Hazard Model) to retrieve risk information for the property’s location. Only the rounded coordinates are sent to these services; no user identifier or address text is included.
  • Capture-session location stamping: When you grant location permission, your device location at the time of a capture session is associated with the items cataloged in that session, so you can see where each item was inventoried.
  • Service communications: To send essential account-related notifications (security alerts, subscription changes, legal-document updates)
  • App improvement: Anonymous aggregate totals help us understand usage patterns and improve features
  • Security: To detect and prevent unauthorized access, fraud, and abuse

We do not use any of the information above for advertising, ad measurement, or sharing with data brokers.

3. How We Protect Your Information

  • Encryption in transit (TLS) for all data exchanged with our servers, and at rest for the data our providers store
  • No server copy of your inventory: Your inventory, photos, and 3D scans are stored on your device and in your iCloud account. Even in response to legal demands directed at Acier, we cannot produce your inventory contents, because we do not hold them.
  • Sign in with Apple: Authentication is handled by Apple. Acier never sees your password or biometric data.
  • Face ID lock (optional): Face ID is handled entirely by Apple on your device. Acier never receives biometric data.
  • Photos are not stored by Acier: Images sent for AI analysis are not stored on our servers after the analysis completes.
  • Access controls: Database-enforced access controls keep each user’s account records separate.
  • Token rotation: Authentication tokens are automatically rotated to minimize risk from token compromise.
  • SOC 2 Type II infrastructure: Our backend runs on Fly.io, which is SOC 2 Type II certified, with automatic patching, intrusion detection, and continuous monitoring.
  • Periodic security audits and code review

4. Data Sharing and Disclosure

We do not sell your personal information, and we do not share it with advertisers or data brokers.

We share limited information only with:

  • Apple: Authentication (Sign in with Apple), storage of your inventory and 3D scans in your iCloud account, speech recognition for voice notes, and App Store payment processing. Apple’s handling of this data is governed by Apple’s privacy policy.
  • Infrastructure providers: Our backend runs on Fly.io (SOC 2 Type II certified), which hosts our stateless AI proxy. Our database provider holds account records, purchase records, capture balances, AI usage records, and anonymous aggregates. None of them holds your inventory.
  • AI processing (Anthropic): Item photos, descriptions, redacted policy text, and coverage questions are sent to Anthropic for analysis. Acier does not keep them; Anthropic does not train on them and deletes them under its retention terms.
  • Market reference services: To price some items, we send a minimal identifier (such as an ISBN, a catalog number, or a wine’s producer and vintage) to reference services (listed in our AI disclosure). For records, when no catalog number is found, the words you typed or dictated about the item may be used as the search. They never receive your photos or account information.
  • Government risk-data sources: FEMA, the USDA Forest Service, and USGS receive only approximate coordinates when we look up risk data for a property. No user identifier or address text is sent.
  • Legal requirements: When required by law, subpoena, or court order. Acier cannot produce your inventory contents, because we do not hold them.
  • Business transfer: In the event of a merger, acquisition, or sale, users will be notified in advance.

5. Your Rights and Choices

  • Access: View all your account and inventory data directly in the app at any time
  • Export: Generate PDF reports, CSV exports, and a full archive of your inventory, on every plan
  • Correction: Edit any inventory item or account information at any time
  • Deletion: Permanently delete your account and all associated data. Server-side data is irreversibly deleted within 30 days, except the Apple purchase ids described in Section 6. Inventory data stored privately in your account is removed when you delete your account in the app. Deleting only the app leaves your iCloud copy, which you can remove in iOS Settings under your name, then iCloud.
  • Opt-out: Unsubscribe from non-essential communications at any time
  • Data portability: Export your data in machine-readable formats

6. Data Retention

  • Account information is retained while your account is active
  • Inventory data is retained in your private account for as long as you choose to keep it
  • All server-side data is permanently deleted within 30 days of account deletion. Apple purchase ids are kept, with no link to your account, so a purchase is never credited twice.
  • Anonymized, aggregate usage data may be retained indefinitely
  • Data required for legal compliance may be retained as required by law

7. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children. If we discover that a child under 13 has provided information, we will promptly delete it.

8. International Data Transfers

Your information may be processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers. Your inventory is not stored on our servers, wherever processing takes place.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notice. Continued use of the Service after notification constitutes acceptance of the updated policy.

10. Contact Us

Questions about this Privacy Policy? Contact us at contact@acier.io.

For security concerns, contact security@acier.io.