Privacy policy
DiagramUp
Effective date: September 23, 2026
DiagramUp turns diagrams into interactive study materials. This policy explains what information the app handles, where processing happens, and the choices available to you.
In plain terms: ordinary scanning uses Apple Vision, OpenCV, and DiagramUp’s caption filtering on your device and works offline. If you choose Enhanced Scan for a particular image, DiagramUp sends that selected image through a Broweleit Ventures service to Google Cloud Vision for additional text recognition. Enhanced Scan is optional and requires consent for each image.
Information DiagramUp handles
Diagram images. Images you capture with the camera or select from your photo library, including cropped and cleaned versions created for study.
Study content. Deck and diagram titles, detected and edited labels, label locations, confidence information, definitions you enter for flashcards, and related study settings.
Study activity. Practice results and progress, including scores, accuracy, attempts, hints, and session information.
App preferences. Choices such as whether iCloud sync and daily study reminders are enabled.
Camera and photo-library access
DiagramUp requests camera access only when you choose to photograph a diagram and photo-library access only when you choose to import an image. The app does not scan or collect unrelated photos. You can revoke either permission at any time in your device’s Settings app.
On-device image processing
Normal scans use Apple Vision for text recognition and OpenCV-based image cleanup on your device. DiagramUp also filters likely page captions and figure identifiers locally. These local operations do not send diagram images, detected text, or label locations to Broweleit Ventures or Google and do not use your Enhanced Scan quota.
Optional Enhanced Scan
Enhanced Scan is a limited beta feature. It is never used as a silent fallback. When you choose it, DiagramUp explains the upload and asks for consent for that specific image before sending an upright JPEG copy to a Broweleit Ventures backend and then to Google Cloud Vision for online text recognition.
The backend and Google Cloud Vision process the image and recognized text in memory to answer the request. Broweleit Ventures does not write the image or OCR text to its database, object storage, or application logs. Google states that image data used for online, immediate-response Vision operations is processed in memory and is not persisted to disk. Google uses submitted content as needed to provide the Vision API service. See Google’s Cloud Vision Data Usage FAQ.
The DiagramUp service and its quota database are hosted in Oregon, but the current Vision request uses Google’s global endpoint. Google does not guarantee that global-endpoint processing remains in Oregon or another particular region.
Enhanced Scan currently allows up to 100 accepted requests per Apple account in each UTC calendar month. A separate 1,000-unit global monthly beta limit can pause the feature for everyone. These are beta safeguards, not subscription benefits; no DiagramUp subscription is currently deployed. An accepted request may count against a limit even if Google later times out or returns an error.
Sign in with Apple and operational records
Enhanced Scan asks you to sign in with Apple immediately before upload. DiagramUp requests no name or email scopes. A fresh Apple identity token is sent to the backend for authentication, held only in transient memory while the request is handled, and not stored by Broweleit Ventures.
The backend converts Apple’s stable account subject into a keyed HMAC identifier. It does not store the Apple subject itself. The identifier, quota and request counters, request latency, and diagnostic service data are used only to provide the feature, prevent replay, enforce limits, diagnose failures, and control cost. For privacy disclosure purposes, Broweleit Ventures treats these operational data categories as linked to the pseudonymous account identifier and used for app functionality. They are not used for tracking.
Request-state records are assigned a seven-day expiration, short rate-limit windows a two-day expiration, and monthly account and global counters a 60-day expiration. Google Cloud Firestore removes expired records asynchronously, so deletion may occur after the stated expiration rather than at that exact moment.
Google’s hosted request logs can include an IP address and HTTP or service metadata such as request time, status, response size, and latency even though DiagramUp’s application does not log images, OCR text, Apple tokens, or Apple account subjects. The active Google Cloud _Default log bucket retains these logs for 30 days.
Local storage and optional iCloud sync
DiagramUp keeps the study content needed to provide its features on your device. If you turn on iCloud sync, the app stores copies of decks, diagrams, and study sessions in the private CloudKit database associated with your Apple ID. Synced information may include diagram images, labels, definitions, and progress.
Apple operates iCloud and CloudKit and processes that data under Apple’s terms and privacy policy. Broweleit Ventures does not use a separate app account and does not receive your Apple ID password.
Notifications
If you enable study reminders and grant notification permission, DiagramUp schedules a daily reminder locally on your device. The reminder does not require Broweleit Ventures to collect a device token or send a remote push notification.
Analytics, advertising, and tracking
DiagramUp does not include third-party analytics, advertising, attribution, crash-reporting, or cross-app tracking SDKs. We do not sell your personal information or use your study content for advertising.
Service providers and disclosure
Apple processes information when you use iCloud sync or Sign in with Apple. Google Cloud processes the selected image and related request data only when you choose Enhanced Scan. Google may also process infrastructure and service metadata under its own terms and privacy commitments. We may disclose information if required by applicable law or legal process, or when necessary to protect users, Broweleit Ventures LLC, or the public.
Data retention and deletion
Local information remains on your device until you clear it in the app, remove it through device controls, or uninstall the app. Information synced through iCloud remains in your private CloudKit database according to your iCloud settings and Apple’s retention practices.
You can use Clear study data in DiagramUp’s Settings. This clears local study data. If iCloud sync is enabled and available, DiagramUp also attempts to delete its synced deck, diagram, and study-session records from your private CloudKit database. You can also manage DiagramUp’s iCloud access in your device settings.
Clear study data does not reset Enhanced Scan quota or automatically delete cloud usage, request-state, or hosted log records. Those records follow the expiration periods above. For a privacy request, email support@broweleitventures.com. Do not send an Apple password, identity token, or other authentication credential. Because the service requests no name or email and stores a keyed account hash, we may be unable to match an email address to a particular operational record. We cannot promise immediate deletion of records that are subject to asynchronous expiration or must be retained temporarily for security, abuse prevention, or legal obligations.
Children’s privacy
DiagramUp is a general study tool and may be used by students. This policy does not claim that DiagramUp has been independently verified for compliance with child-specific privacy laws. Parents and guardians should review the app’s camera, photo-library, notification, iCloud, Sign in with Apple, and Enhanced Scan choices and manage them as appropriate for the child’s device and account.
Security
DiagramUp reduces privacy risk by keeping ordinary scanning local, using per-image consent for Enhanced Scan, avoiding backend storage of images and OCR text, and using Apple’s private CloudKit database for optional sync. No storage or transmission system is perfectly secure, so protect your device and Apple account with appropriate passcodes and account security.
Changes to this policy
If this policy changes, the revised version will be published on this page with a new effective date.
Contact
Questions or privacy requests can be sent to support@broweleitventures.com. DiagramUp is published by Broweleit Ventures LLC.