Privacy Policy
The short version
V1 keeps your saved health and routine records on your device. Optional online JARVIS features use outside services for general AI answers, JARVIS voice and live searches. Information you include in an online question is sent to those services, so do not include personal or sensitive details you do not want to send.
Which version does what. Online JARVIS features already exist in versions distributed through TestFlight.
The first-use permission screen and the setting to withdraw that permission are new in release 5.0 (36), which is still being prepared. Versions distributed before that release do not display the first-use screen, and this policy does not claim they do. The section “Your choice in release 5.0 (36)” below describes that release specifically.
Your local records
Compounds, protocols, schedules, injection history, body-map sites, inventory, saved calculations, weight, labs and profile records are stored in the app's own storage on your device.
V1 does not automatically attach these records to online questions. Questions routed to your local records are answered on your device, using the device's voice. Selecting a research subject for an online question can send that subject's identifier, not the saved compound record. Typing or speaking information from a record into an online question does send that information as part of the question.
The app has no V1 account or sign-in, and no record-sync service. Local reminders are scheduled with iOS. Changing online JARVIS permission does not disable local records or reminders.
Online JARVIS and the services involved
V1's online requests pass through our own services, hosted by Cloudflare and Vercel.
| Feature | Information sent | Recipient and purpose |
|---|---|---|
| General AI answers | Your question, recent general conversation, and any deliberately selected research subject identifiers; retrieved reference material may also be included | Anthropic, to generate an answer |
| JARVIS voice | General answer text | ElevenLabs, to generate speech returned to your device |
| Live information and watched topics | Search queries and topics, including queries derived from a general question | Brave Search, to retrieve sources |
| Service protection | Installation-specific App Attest identifier, public key, assertions, request timing and usage counts | V1's Cloudflare service, to verify the app, prevent replay and enforce limits; Apple participates in App Attest registration |
| Service operation | Connection information, including IP addresses, and bounded request outcomes | Hosting providers and V1, to deliver requests, troubleshoot and protect the service |
Watched topics are stored on your device. Active watches can check while V1 is open and online; they do not start background checks. A watch lookup uses search, not AI generation. General questions may use both search and AI.
The iPhone app requires on-device speech recognition: microphone audio is not uploaded by V1 for transcription. Recognised text used for an online question is sent just as typed text is. Generated JARVIS audio is different from your microphone recording — ElevenLabs creates it from the answer text.
Your choice in release 5.0 (36)
On first use of that version, including an upgrade without a current choice, V1 presents the online JARVIS explanation. Allow online JARVIS enables the online features. Not now · stay on device keeps them off. Saved voice settings alone never count as permission. When there is no saved voice preference, voice replies start on after online permission is granted; a saved “off” preference is preserved.
Your versioned choice and its date are saved on that device. You can review or withdraw it in Settings → JARVIS Voice → Online JARVIS. Withdrawal prevents new online requests, cancels requests still waiting in the app, and discards late results. It cannot recall information already sent, ensure that a provider stops work it has already received, or erase provider records. If a choice cannot be saved, V1 reports that limitation and online access remains blocked for the session. This screen does not request microphone permission.
Retention and deletion
V1's installation verification record contains the public key, signature counter, usage limits and activity times. Our service expires this stored record after 30 days of inactivity. Short-lived challenge records expire after two minutes. Application diagnostics contain request outcomes and counts, not question text, answer text or microphone audio. Hosting access logs are separate and can contain connection information.
Our reviewed production environment has no server memory or private vault configured. The conversation service receives recent conversation with each request rather than maintaining a user conversation database. That does not mean outside providers retain nothing:
- Anthropic's published API policy normally deletes inputs and outputs within 30 days, with contractual, abuse-prevention and legal exceptions. See its API retention policy.
- ElevenLabs retains text inputs and generated audio by default. Zero-retention mode requires eligible service access and request configuration, and V1 does not request that mode. We switched off model-improvement use for new submissions in our ElevenLabs workspace on November 5, 2026; that does not erase earlier submissions or disable normal retention. See retention and model improvement controls.
- Brave's API notice describes query retention for up to 90 days for billing and troubleshooting, subject to legal obligations. See its API privacy notice.
Contact us about privacy or deletion requests using the address above. Turning online JARVIS off does not automatically send a deletion request to providers.
- Deleting the app removes its stored records from that device. Copies in backups, and information already sent to services, are separate; deleting the app does not erase them.
- Device backups are yours to control. iCloud or computer backups may include app records. Their settings and retention are controlled by you and your backup provider.
External links, Apple information and advertising
The built-in Research Library can be read locally. When you tap a link, your device opens it in your web browser, outside the app. V1 Protocol does not add your records, your compounds, or anything else from the app to that link. The destination website receives ordinary browser connection information and has its own policy.
Apple may provide app-distribution statistics or diagnostics under its own settings and terms. Those are distinct from V1's local record store. V1 contains no advertising and no advertising-tracking integration; online processing is not the same as advertising tracking. V1 is not directed to children.
Changes and contact
We update this policy when the app's practices change. A material change to the online permission requires a new version of the in-app choice. Questions: Andre@v1protocol.com.