Privacy Policy

RCU Field Observations · Last updated 31 July 2026

Introduction

RCU Field Observations ("the App") is a tool for field verification officers working in-house at a lender or for an RCU vendor agency, used to capture and submit field verification reports. This policy explains what information the App collects, why, and how it is handled.

Information We Collect

When you use the App, we collect: your Google account name, email address and profile picture (for sign-in and to identify the investigator on each report); your device's GPS location at the time of each visit; photographs you capture during a visit; voice recordings and their on-device transcripts/translations; and the case details you enter (application number, applicant name, findings, checklist responses, recommendation).

How Your Information Is Used

This information is used solely to compile and transmit field investigation reports to the recipients you specify. Location, photographs and voice transcripts are embedded into the PDF report for that case and are not used for any other purpose.

On-Device Processing

By default, voice-to-text transcription and language translation run entirely on your device — using Android's built-in speech recognition, the optional on-device Whisper engine, and Google ML Kit's on-device translation. In this default configuration your voice audio and transcript are not sent to any cloud speech or translation service.

Optional Cloud Translation

Settings lets you supply your own Google Cloud Translation API key. If, and only if, you enter one, the text of your transcript is sent to Google Cloud Translation for a more accurate translation, under your own Google Cloud account and its terms. Leave the key blank — the default — and no transcript text ever leaves your device. You can remove the key at any time in Settings.

Network Use

The App has no server of its own and sends none of your case data to the developer. It uses the network only to: sign you in with Google; download the optional Whisper speech model and ML Kit language packs; and, if you configured a key, call Google Cloud Translation. Reports leave your device only through the email app you choose.

Where Your Data Is Stored

Captured photos, generated PDF reports and your case history are stored locally on your device. Report emails are sent using your device's own email app — the App does not operate its own mail server and does not retain a copy of sent emails beyond the local report history.

Third-Party Services

The App uses Google Sign-In for authentication and Google Play services (location, ML Kit) to provide its features. Use of these services is subject to Google's own privacy policy.

Data Retention and Deletion

Case history, saved photos and generated reports remain on your device until they are auto-purged after the retention period you set in Settings, or until you delete them, clear the App's data, or uninstall the App. Uninstalling removes everything the App stored. Because the data is encrypted with a key held in your device's secure hardware, it is not included in Android cloud backup or device-to-device transfer — use Settings → Export Backup to move it deliberately.

Payment

Any purchase is handled entirely by Google Play. The App never sees or stores your card, bank or billing details.

Your Responsibility

Because this App is used to collect information about third parties (loan applicants) during field visits, you must handle all captured data — photos, location, findings — as confidential and use it strictly for the authorized investigation purpose.

Your Legal Position

You, or the organisation you work for, decide what data is collected on a visit and what is done with it. The developer of the App never receives it and cannot access, retrieve or delete it on your behalf. Where the law treats you as a data fiduciary or controller for the applicants and third parties you record, that responsibility rests with you.

Contact

For questions about this policy, contact i3enoy@gmail.com. If you use the App on behalf of a lender or agency, also follow that organisation’s own data handling and confidentiality rules.