What we keep, and where

Pardes Guard keeps as little as it can. This is all of it.

On this phone
Without an account, everything stays in this browser: your journey, checks, cases, document scan results and settings. Vault files always stay on the phone, even with an account. Clearing the browser removes them.
With an account
Your journey, checks, cases, scan results, settings and the records of your vault files (name, size and fingerprint, not the file) are saved in Google's Firebase database, so you can open them on another phone.
Sent to Google's Gemini
The photos, PDFs and voice notes you choose to check, so that Gemini can read them. They are not kept by this app. They are sent to Google's Gemini on Google Cloud, so use sample papers while this is a prototype.
Shared, only if you choose
Warnings about an agent (as scrambled codes, if you switch it on); reports you send to our team; star ratings; and a family code, which shows a case's name, status and steps to whoever has it.
Who can see your data
You. With an account, staff of our partner organisations can also read your journey, checks, cases, vault records and reports, to help you. The team gives staff this role in the Firebase console; no one can give it to themselves in the app. Your family sees only what a family code shows.
Never kept
The photos you check or scan, once they have been read; voice notes; passport numbers; dates of birth; passwords. The app never asks for a government website password and never fills in a government form for you.
Delete it all
In More, "Delete everything" removes all of the above, then your account.