iPhone and iPad: local files
The iOS app supports iPhone and iPad running iOS or iPadOS 17 or later. Ordinary viewing of supported NDE and ODAT scans takes place on the device. Importing or displaying a scan does not automatically upload the original scan file. The app keeps private local copies of imported scans and certificate or sight-test PDFs used by its personal tools.
Deleting the app removes its local app-container copies, not the original files in Files, iCloud Drive or another provider. Exported copies remain wherever you saved them. Platform backup and restore settings may affect local copies; this policy does not promise that iOS backups exclude these files.
iOS accounts and optional experience sync
Signing in can send the account email, name when provided and account identifier to the authentication service. When the optional experience-sync feature is available and used, experience methods and logs are uploaded to and downloaded from Supabase under that account identifier for backup and access across devices. This data is linked to your account.
The native iOS personal-sync feature synchronises experience records only; it does not upload certificate or sight-test PDFs. Optional services can be enabled or disabled by the public service configuration. A public sign-in does not authorise company or RME access.
Optional game leaderboard
When the online leaderboard is available and you choose to share a score, the service processes your display name, selected country, score, difficulty settings and associated timestamps. Scores are linked to an anonymous authentication identifier rather than requiring your personal sign-in. An anonymous identifier is still a persistent identifier; it is not a guarantee that the record is unlinked to you.
The public leaderboard displays the submitted name, selected country, score and rank. Country is selected by you, not obtained from GPS. A monthly ranking period is not automatic deletion of previous scores. Contact support for removal requests; clearing local app data does not itself delete submitted scores.
Optional public AI and feedback
AI analysis is separate from ordinary local scan viewing. If you consent to and start PAUT AI analysis when it is available, rendered candidate scan images and associated scan and measurement metadata are sent to the NDT Suite service and its configured AI provider, OpenAI. This workflow does not send the original NDE or ODAT file merely because you opened it. Public PAUT analysis uses a separate anonymous authentication scope.
Optional Echo assistance, when enabled, sends the question, relevant conversation text and bounded context to the AI provider. Public AI services also store the calling account or anonymous identifier, feature and request time for usage limits and abuse prevention. If you submit PAUT feedback, candidate fingerprints, measurements, AI labels and your corrections may be retained with the actor/account identifier for review and improvement of assistance.
AI providers may retain submitted content and responses under their applicable data controls and security policies. These services do not promise zero retention or immediate deletion at the provider. OpenAI documents default Responses API state retention of 30 days and abuse-monitoring retention of up to 30 days, subject to its controls and exceptions. Review https://developers.openai.com/api/docs/guides/your-data before submitting sensitive information. Do not send confidential inspection material unless you have permission. AI suggestions must be checked by suitably qualified personnel.
Android: public PAUT viewer
The public PAUT viewer can be used without an account. Supported .nde and .odat files selected through Android's document picker are read on the device so the scan can be displayed. The public viewer does not upload a selected scan merely to display it.
The app contains no advertising and does not sell personal information. Bundled demonstration scans are app content and do not contain user information.
Android and authorised connected features
If you sign in, the connected service may process your name, email address, account identifier, company membership, permissions, notification token and saved preferences. Personal tools may store certificate details, sight-test details, experience records and study progress. Files selected for company upload, reports, job images, messages and attachments are processed only when the relevant user starts or uses that feature.
If Google Play subscriptions are offered and used, the app and server may process the product identifier, purchase token and entitlement result. Payment-card details are handled by Google Play and are not provided to HQ NDT Inspection Pty Ltd.
Messages to developer and practice exams
Developer messaging is optional and does not require an account. When you send a message, the service stores the message, timestamps and your optional display name in private Supabase storage so the developer can read and reply. Other visitors cannot browse your conversation. A private browser/app cookie identifies your guest conversation; clearing browser or app data removes your access, but does not itself delete messages already sent.
You can request removal of a guest conversation by sending the request in that conversation. Do not send passwords, payment information or confidential inspection records. Short-lived, hashed network identifiers and request counts are used to limit abuse. Support messages are retained while needed to respond and for reasonable support, security and legal purposes.
Practice-exam answers and progress are saved on your device/browser, not submitted as certification results. Calculators operate in the browser; their input values are not sent to the developer-chat service.
Android: permissions and background transfers
Camera and microphone access is requested only when a user opens a feature that needs it, such as authorised company photo capture, voice input or communication. Notification permission is optional and may be used for reminders, messages and visible upload progress. The app does not request location or contacts access.
A user-started company file or image upload may continue through Android's foreground-transfer mechanism while another app is open or the screen is locked. Android displays an ongoing notification while that transfer is active.
Connected services, AI and sharing
Authorised company accounts may use Supabase-backed authentication and storage and may connect approved services such as Dropbox, OneDrive, Google, Xero or an AI provider. Information is sent only as required for the user-selected or company-authorised workflow. Service providers process information under their own terms and the permissions approved for the connection.
AI-assisted features are review aids. Relevant prompts, bounded excerpts or selected inspection information may be sent to the configured AI service when an authorised user uses those features. AI output must be checked by a suitably qualified person before use in an inspection decision or report.
Security and retention
Optional online services necessarily receive connection and request information. The developer-chat service uses hashed network identifiers for abuse limits. Hosting, authentication and AI providers may process operational logs under their own service settings and policies; this policy does not claim that all network diagnostics are absent. The app contains no advertising and does not use cross-app advertising tracking.
Support conversation content and submitted leaderboard or feedback records do not have a promised automatic expiry. Account and experience data is retained to provide the service, subject to deletion requests and applicable retention obligations. Short-lived usage or abuse-limit cleanup runs during service requests; it is not a guarantee that every record is deleted exactly 48 hours after creation.
Network connections use encrypted HTTPS or secure platform connections. Local app data is held in Android's application storage and application backup is disabled for private app data. No system can be guaranteed completely secure; users must also protect their device, account and inspection files.
Account and personal workspace information is retained while needed to provide the service and for a reasonable period for security, support and legal obligations. Company-owned jobs, messages, issued reports, financial records, safety records and audit evidence may be transferred, de-identified or retained when law, contract, safety or accreditation obligations require it.
Deletion and user control
On Android, a signed-in user can request account deletion from the Account screen. Users can also use the public account-deletion page or contact support. Requests are normally completed within 30 days after the account is verified; this is a request process, not instant deletion. Deletion includes the authentication account and associated personal app data, subject to disclosed legal and company-record retention requirements.
App-local data can be removed using Android's Clear storage control or by uninstalling the app. This does not delete an original inspection file from the storage provider selected by the user. Data already held independently by Google, Dropbox, Microsoft, Xero or another connected service remains subject to that service and the account controlling it.
Children and professional use
NDT AI Suite: PAUT Viewer is a professional inspection and education tool intended for adults and is not directed to children. The app does not knowingly collect children's personal information.
Policy changes and contact
If the app's data practices change, this policy and the applicable Google Play Data safety and Apple App Store privacy disclosures will be reviewed and updated for the released behaviour.
Privacy questions and requests can be sent to will.hqndt@gmail.com. Developer: HQ NDT Inspection Pty Ltd, Australia.
