Exact location
Exact coordinates and reported GPS accuracy are retained only in the restricted research record when consented. Public results use a hidden, rounded, or regional location according to the observer’s choice.
Original audio
Recording begins only after explicit microphone and research-recording consent. The active screen always shows a recording indicator. Audio is stored in a private object store and accessed through an authorized, audited route—not a public URL.
Local recovery
The active policy retains raw audio for 90 days. Authorized reviewers may play it; reviewer downloads are disabled. Audio is scheduled for deletion when its retention period expires, including after verification.
Events and audio chunks are first committed on the device. Unsynchronized material is not deleted merely because a network request failed. Local cleanup happens only after confirmed server persistence and the applicable retention choice.
Corrections and deletion
Human review adds a new transcript or interpretation and never rewrites the source layer. Observers can export their own structured data and may request account deletion subject to the published scientific retention policy.