Effective date: 1 January 2026 · Last updated: 31 May 2026
Summary: By default, DeCiphr stores all your data locally on your device, and the developer cannot see it. Creating an account is optional. If you choose to create an account to sync between the DeCiphr mobile and web apps, your coded data and project metadata are uploaded to your own private DeCiphr account so both apps can share them — but your photographs always stay on your device and are never uploaded. When you run an AI analysis, your image is sent to Anthropic solely to perform the analysis and is not retained beyond the API request.
This Privacy Policy explains how DeCiphr — the research platform at deciphr.tech, comprising the web application (app.deciphr.tech) and the mobile application, together referred to here as "the app" — developed by Salem M. Alajmi ("the developer"), handles your information. DeCiphr provides AI-assisted visual analysis, designed for researchers across the humanities and social sciences. This policy applies to both apps.
By using DeCiphr, you agree to the practices described in this policy.
When you use DeCiphr without an account ("local mode"), all of the following is stored exclusively on your device using local storage. None of it is transmitted to or accessible by the developer:
Local mode has no cloud backup: If you use DeCiphr without an account, your data is stored only on your device and cannot be recovered if your device is lost, reset, or damaged. We recommend exporting to CSV regularly — or creating an account (see Section 3) to sync and back up your data.
Creating a DeCiphr account is optional and turned off by default. Before any data leaves your device, the app shows you a notice and asks you to confirm that connecting an account turns on cloud sync — your data will no longer be stored only on your device.
If you create or connect an account, the following are uploaded to your own private account in DeCiphr's cloud database so the mobile and web apps can share your work:
Your photographs are never uploaded. Images always remain on your device, even when you use an account. Only the coded data and metadata above are synced.
This data is stored solely to provide the sync feature and let you access your work across devices. It is not sold, shared with third parties, or used for advertising or for training AI models. Cloud hosting and database services are provided by Supabase, acting as a data processor on the developer's behalf. Access is protected so that only you, signed in to your own account, can read or write your data.
You can stop syncing at any time by signing out (your synced data remains in your account), or you can request deletion of your account and all associated cloud data by contacting the developer (see Section 11).
When you run an AI analysis in DeCiphr, the following is transmitted to Anthropic's servers via the Claude Vision API:
This transmission occurs solely to perform the analysis and return the result to your device. According to Anthropic's API usage policy, images and inputs sent via the API are not used to train Anthropic's models and are not retained beyond the API request.
For full details, refer to Anthropic's Privacy Policy: anthropic.com/privacy
DeCiphr requests access to your device's location only when you photograph a sign in the field. Location data (latitude and longitude) is attached to that photograph and stored on your device alongside the image. In local mode it never leaves your device. If you use an account, these coordinates are included in the cloud sync described in Section 3, so the same field data is available across your devices. Location data is only included in an AI analysis request if explicitly relevant to the analysis prompt.
DeCiphr requests access to your camera and photo library solely to allow you to capture or import images for analysis. The app does not access your photo library beyond images you explicitly select. Photographs are stored on your device and are never uploaded to the cloud, even when you use an account.
Whether you use local mode or an account, DeCiphr does not include third-party advertising SDKs or analytics SDKs, does not sell or share your data, and does not use your content for advertising or AI model training.
In local mode, the developer has no access to your images, analyses, frameworks, location data, or memos. If you create an account, the coded data and metadata listed in Section 3 are stored in your private cloud account, accessible only to you when signed in; the developer does not use this content for any purpose other than providing the app's sync feature.
If you submit your email address via the waitlist form on the DeCiphr website (deciphr.tech), that email address is collected and stored by Netlify Forms solely to notify you of future updates. It is not shared with any third party and will only be used for DeCiphr-related communications. You may request removal at any time by contacting the developer.
DeCiphr is designed for use by researchers and is not directed at children under the age of 13. The app does not knowingly collect personal information from children.
If this privacy policy changes materially, the updated version will be posted at this URL with a revised effective date. Continued use of the app after any changes constitutes acceptance of the updated policy.
If you have any questions about this privacy policy, or wish to delete your account and associated data, please contact:
Salem M. Alajmi
PhD Researcher · University of Reading
PAAET, Kuwait · University of Reading, UK