Tactical Vibes — Privacy Policy

Last updated: October 15, 2026

Tactical Vibes ("the App"), including its App Clip, is developed by O Williams Consulting LLC under the Gratus1 brand ("we," "us"). This policy explains what the App collects, where it is kept, what leaves your device and why, and how you can control or delete it.

In short: your firearms, gear, photos, serial numbers, range logs and maintenance records stay on your iPhone or iPad. We do not run a server that holds them, we do not sell personal information, and we do not use your data for advertising. The only content that leaves your device is what you send to the cloud AI service — and only after you have allowed it.

Information the App Keeps on Your Device

Data	How it is collected and used
Your inventory	Firearms, optics, ammunition, accessories, wishlist and Collections you enter. Stored in the App's private storage on your device so the App can show, organise and match your gear.
Serial numbers, photos and purchase details	Entered or attached by you for your records and the Vault Report. Stored only on your device; never sent to us or to the AI service.
Range sessions and maintenance logs	Entered by you to track rounds, cost and care. Stored only on your device.
Home Screen widget	A small summary of a Collection you pin, written to storage shared only with the App's own widget. Item names are hidden unless you turn them on.

The App's storage is protected by your device's built-in encryption and is included in your own device backups (iCloud or computer) under your Apple ID; we cannot see those backups. Export Backup creates a file that you keep and control; Import Backup restores from it. The Vault Report creates a file on your device that you choose whether to share.

Third-Party AI Service

The AI Build Advisor, build pictures and CCW Reciprocity use artificial intelligence (AI). When your device has Apple Intelligence, many requests are answered on the device and nothing is sent. Some requests are sent to a cloud AI service run by another company. Before anything is sent, the App shows you what will be sent and who receives it, and asks your permission. If you choose "Not now", nothing is sent. You can withdraw permission at any time in the App under Account → Cloud AI.

Who receives it	Cloudflare, Inc., through its Cloudflare Workers AI service. The models are Meta's open Llama models and Black Forest Labs' FLUX image model, run on Cloudflare's own servers.
What is sent	Only what a feature needs: what you type to the AI Build Advisor, together with the makes, models and calibers of the gear you own so the build fits it; a text description of a suggested build to draw its picture; the state you choose in CCW Reciprocity, or your location coordinates if you tap "Use my location" (used once to find your state, not stored).
What is never sent	Serial numbers, photos, purchase details, range and maintenance logs, and your Apple ID.
How it is sent	Over an encrypted (HTTPS) connection to our own Cloudflare Worker, which checks the request comes from a genuine copy of the App (Apple App Attest), applies rate limits, and passes the text to Cloudflare Workers AI.
What it is used for	Only to produce the answer, build or picture you asked for, which is returned to you in the App. We do not store what you send. To answer repeated requests quickly, the AI's reply is kept for up to 24 hours under a one-way fingerprint of the request, then deleted automatically.

Cloudflare processes this data on our behalf as a service provider under its data processing terms. Cloudflare states that it does not use Workers AI customer content to train AI models and does not make it available to its other customers. We chose Cloudflare because its protections for your data are the same as, or stronger than, those in this policy. We do not use your requests to train AI models.

Information That Leaves Your Device

Cloud AI requests — only as described above, and only with your permission.
Sign in with Apple (optional). If you choose to sign in, we receive the identifier Apple provides and the name and email Apple chooses to share (which may be a private relay address). These are stored in our account system (Supabase) to recognise you. Your inventory is not uploaded.
App security and reliability. To stop abuse of the AI service, the App registers an anonymous Apple App Attest key with our Worker. The App also reports simple, anonymous counts such as "on-device AI answered" or "AI request failed". These contain no content, no device identifiers and nothing about your gear.
Retailer links. Purchase links open third-party retailers in your browser. We do not sell firearms, ammunition or accessories, and we do not receive information about what you buy. Those retailers' own privacy policies apply.

We do not use third-party advertising or analytics SDKs, we do not track you across other companies' apps or websites, and we do not sell or share personal information.

Data Retention and Deletion

Data on your device stays until you delete it or delete the App. In the App, Account → Delete Account & All Data permanently erases everything the App stores on your device, withdraws cloud AI permission and signs you out. If you signed in with Apple and also want your sign-in record removed from our account system, email us at the address below and we will delete it. You can also stop using Sign in with Apple for the App in your iPhone's Settings → your name → Sign in with Apple.

A note on AI-generated information. AI build suggestions and CCW reciprocity results are provided for information only and may be incomplete, out of date or wrong. Laws change; always confirm carry and transport laws with official sources before you travel. Follow all federal, state and local laws.

Your Rights

Depending on where you live, you may have rights to access, correct, export or delete your personal information, and to object to certain processing. Most of your data is on your device, where you can view, edit, export (Export Backup) or erase it yourself. For anything we hold — such as a Sign in with Apple record — contact us at the email below.

Children's Privacy

Tactical Vibes is intended for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 13.

Security

Your records stay on your device under its built-in protection. Data that leaves the device travels over encrypted connections, and our AI Worker accepts requests only from genuine copies of the App. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Changes to This Policy

We may update this policy as the App evolves. Material changes will be reflected by updating the "Last updated" date above. If what the App sends to the AI service, or who receives it, changes, the App will ask for your permission again.

Contact Us

Questions about this policy or your data: support@gratus1.io