Privacy Policy

Nothing

No account, no cloud database, no analytics, no advertising SDK, no tracking SDK, no third-party crash reporting. Because we receive no data from the app at all, there is no personal data held by us to access, correct, export, sell or delete — and no request you could make would produce any, because none exists. We also cannot identify you, count you, or tell whether you use Overplan.

Overplan's privacy manifest declares no tracking, no tracking domains and no collected data types. The one required-reason API it declares is the system preferences store, used to remember your own settings. Your App Store purchase is between you and Apple, under Apple's privacy policy; Overplan is pay-once, with no subscriptions, no in-app purchases and no advertising.

One channel is not ours and is worth naming: Overplan never sends a crash report, but Apple's system can. TestFlight collects crashes as part of how it works, and an App Store copy does the same only if you have switched on Apple's analytics sharing. Those reports come from the operating system, describe where the code stopped, and contain no part of your plans.

Nothing collected from anyone, including children

Overplan requires no account, gathers no personal information, and contains no advertising, no social features and no links to user-generated content.

The app makes no network requests

This is a statement about the code, not an intention: no server calls, no cloud storage, no sync, no remote configuration, no third-party libraries of any kind. Everything Overplan draws, renders, bakes and exports it does with what is already on the device. The Help and Privacy pages inside the app are bundled copies of these pages, so even they fetch nothing. Put the device in Airplane Mode and every part of Overplan still works.

Two taps hand off to another app, and they are the only two: the email address below opens Mail, and the mcfinapps credit at the end of the Help page opens your browser. Handing a link to the system is not the app connecting to anything.

MacThe Mac app declares the "outgoing network connections" entitlement, and still makes no network request. A sandboxed Mac app cannot start the system web view's helper process without it — even to show a local file, which is exactly what these two bundled pages are. Without it the Help window opens and stays blank for ever. It grants a capability the app never uses; a network monitor will show Overplan making no connections. If that ever changes, this page changes first.

Camera and LiDARiPhone · iPad

Scanning uses the camera and LiDAR sensor through Apple's ARKit and RoomPlan. Camera access is the only permission Overplan ever asks for, and it is asked for when you first start a scan, not at launch. The camera view and depth stream are processed on your device and are never stored or uploaded: what is saved is geometry — walls, floors, doors, windows and their dimensions. No photographs or video are recorded; the app has no way to take a picture. The camera runs only while the scanner is on screen.

Overplan declares no other permission purpose, so it cannot request or receive your photo library, microphone, location, contacts, calendar, health data, Bluetooth or notifications, any account of any kind, or an advertising identifier. Everything except scanning — sketching, tracing, editing, measuring, AR, PDF and 3D export — needs no camera at all.

MacThe Mac app asks for no permissions whatsoever and cannot ask. There is no LiDAR sensor and no scanner in it: the scanning code is not in that app, it declares no camera purpose, and it holds no camera entitlement. Its sandbox grants exactly four things — the sandbox itself, read/write for files you pick in an Open or Save panel, tokens so a document you opened yesterday opens today, and the network entitlement explained above. Nothing for your Documents, Desktop, Downloads or Pictures folders.

Files you pick, and nothing else

Overplan can open an image or PDF to trace over, a 3D model to place, or an .overplan plan — and each arrives the same way: you pick it, and the app is given that one file. It cannot browse your storage, list your documents or open anything you did not choose. The photo library is never involved, even for a photo of a paper plan: that is chosen through the document picker, not Photos.

A file you pick is copied into Overplan's own storage so the plan keeps working after the original moves. Your original is never modified.

MacOne thing the Mac app stores about your files, stated plainly: when you open a plan it saves a small system-issued token — a security-scoped bookmark — so the same document reopens after you quit, and Open Recent leads somewhere rather than to an error. It identifies where one file you chose lives, stays in the app's own container, and is transmitted nowhere.

Ordinary files, and they are yours

Every plan is one .overplan file carrying the room itself: walls, openings, ceiling height, room names and areas, your furniture and measurements, and the original scan or drawing kept separately so it can be restored. It describes the layout of a real place, which for most people is a home — treat sharing one the way you would treat sharing a floor plan of where you live.

iPhone · iPadYour plans are deliberately visible to you: open Files → On My iPhone (or On My iPad) → Overplan, and copy, move, rename, AirDrop or back them up like any other document. The flip side of a visible folder, said plainly: anything with access to your device's files can reach them there. mcfinapps cannot.

MacA plan you open by double-clicking it stays where you keep it and is edited there — nothing is copied. The app's own library keeps its copies inside its sandbox container rather than planting a folder in your Documents, because that folder is yours; use Export to put a plan somewhere you chose.

Overplan has no iCloud container and does not sync. Your settings live in the app's own preferences and are not shared between your devices. Because plans sit in the app's storage, your operating system may include them in a backup you control — an iPhone or iPad backup, or Time Machine — which is Apple's, not ours, and we have no access to it.

Sharing is always your action

Overplan can hand out seven things, all generated on your device: the editable .overplan project, three PDFs (a to-scale Drawing, a True scale 1:1 drawing for CAD, and a rendered Presentation), and three 3D models (USDZ, GLB, OBJ). Every one of them can reveal the layout, dimensions and openings of the space you scanned. None is created or sent automatically — a file leaves only when you choose it and then choose a destination in Apple's own share sheet.

Once you have shared a file, that copy is out of Overplan's hands and out of ours. The recipient, and any service you sent it through, handles it under their own terms.

Viewing your room in ARiPhone · iPad

View in AR builds a model of your room on your device and opens it in Apple's Quick Look viewer, which uses the camera to place it in the space around you. While Quick Look is open the camera is in its hands, not Overplan's: it draws your model onto a surface it finds, and nothing about that view is recorded or handed back — no photograph, no video, no measurement of the room you are standing in. Nothing is uploaded, and no file is shared unless you then choose to share it.

MacThere is no AR on the Mac and no button for it — no pass-through camera, so nothing to place a model in.

What this policy cannot promise

An app that keeps everything on your device also cannot do some things for you:

• We cannot recover a plan you delete. There is no copy on a server, because there is no server. Your backups are the only way back.
• We cannot unshare a file. Once it has left your device, retrieving it is between you and whoever received it.
• We cannot protect a plan from your device. Overplan's storage has the operating system's own protection — your passcode, or your account and FileVault on a Mac — and no separate password of its own.
• We cannot see anything to help you with. A support conversation depends entirely on what you tell us.

Changes, and getting in touch

If this policy changes, the revised version is posted here with a new date and the copy inside the app is updated with the next release. Any future feature that would materially change how data is handled will be described here before it is used.

Questions about Overplan and privacy: mike.mcfin@gmail.com. Overplan is made by mcfinapps, independent software from Finland.