Legal · Privacy Policy
Privacy Policy
CARI — CISO AI Readiness Index (iOS application)
Summary. CARI does not collect, transmit, sell or share any personal data. It has no user accounts, no analytics, no advertising and no third-party SDKs, and it makes no network requests. The assessments you save are stored only in the app's private storage on your own device.
Who this policy covers
This policy applies to the CARI (CISO AI Readiness Index) application for iPhone and iPad, published by Prof. Dr. Šarūnas Grigaliūnas (CISO.lt). It describes how the app handles information. It does not apply to any other website or service.
Data collected by the developer
None. The developer receives no data from this app whatsoever. The table below reflects the app's App Store privacy disclosure.
| Category | Collected | Detail |
|---|---|---|
| Contact information | None | No account, sign-up, email address or name is requested at any point. |
| Identifiers | None | No device ID, advertising ID or user ID is read or generated. |
| Usage & analytics | None | No analytics or telemetry SDK is present in the app. |
| Diagnostics & crash data | None | No crash-reporting service is integrated. |
| Location | None | The app requests no location permission. |
| Contacts, photos, files | None | The app requests no access to any system data source. |
Information stored on your device
CARI is an assessment tool, so it stores what you enter — locally, and only locally:
- Assessment inputs — the six AI-literacy ratings, technology effectiveness, baseline process hours and organizational leverage coefficient.
- Saved assessments — when you tap Save, the app writes a record containing those inputs, the name and any notes you chose to add, and the date it was saved.
These records are written to the app's own sandboxed storage on your device using Apple's on-device database framework. They are not synced to iCloud, not backed by any server, not transmitted anywhere, and not accessible to the developer or to any third party. They may be included in your own encrypted device backups if you have those enabled, which remain entirely under your control.
Anything you type into a notes field is stored verbatim on your device. Because these records may end up in your device backups, avoid entering information you would not want kept there — the app cannot inspect or filter what you write.
Your control over this data
- Delete individual records — press and hold any saved assessment in the History tab and choose Delete.
- Delete everything — removing the app from your device permanently deletes all saved assessments along with it.
- Export — you may share an assessment as a text report or export your history as CSV. This is initiated by you, and the destination is chosen by you through the standard iOS share sheet. Once you send data to another app or service, that recipient's own privacy policy governs it.
Because no data ever reaches the developer, there is nothing held about you to access, correct, port or erase on request. Your rights under the GDPR and comparable laws are satisfied directly through the controls above, which you exercise on your own device.
Network activity and third parties
CARI makes no network requests in the course of normal use. It contains no analytics, crash-reporting, advertising, attribution or tracking services, and shares data with no third party — it holds none to share.
The only exception is explicit and user-initiated: the governance reference screens include links to official published sources such as EUR-Lex, ISO, NIST and ENISA. Tapping one opens that address in your browser, at which point that organization's own privacy policy applies. No information about you is passed along with the link.
Children's privacy
CARI is rated 4+ and contains no objectionable material. It is designed for security and governance professionals. It does not knowingly collect information from anyone, including children, because it does not collect information at all.
Data retention
The developer retains nothing, because the developer receives nothing. Records you save remain on your device until you delete them or remove the app.
Changes to this policy
If this policy changes, the revised version will be published on this page with an updated effective date. Material changes to how the app handles information will also be described in the App Store release notes for the version that introduces them.
Contact
Questions about this policy or about privacy in the app can be sent to info@ciso.lt.
Prof. Dr. Šarūnas Grigaliūnas · CISO.lt · Lithuania