App interface · Indoor Gate v4
Scans stay outside.
The worker camera preview can open indoors, but nothing is saved, credited, or uploaded until OutdoorGate proves OUTDOOR. A ceiling plane flips INDOOR instantly. Walking back outside recovers in about three seconds.
Env scanREC ∅
Confirming you're outside…
Capture is allowed only while the gate is OUTDOOR. UNCERTAIN keeps the preview live but disables Complete Scan — no frames persist until outdoors is proven.
- State
- UNCERTAIN
- captureAllowed
- false
- Ceiling cues
- 0
- Purge events
- 0
- Deny by default. UNCERTAIN shows a small “Confirming you're outside…” chip. Complete Scan stays off.
- Hard indoor block. Full “Go outside” overlay plus an audited “I'm outside — continue” override.
- 10-second privacy purge. Frames from the walk inside are dropped before any upload.
- Override yields to a ceiling. The pin survives weak GPS, but a classified ceiling plane clears it.
Policy details live in the privacy policy. This page is the review surface for the same copy the iOS scan screens already ship.