Privacy Policy

This Privacy Policy describes how The Last Manual ("we," "us," or "our") accesses, collects, uses, shares, retains, and deletes information in connection with the The Last Manual mobile application (the "App") and our website at thelastmanual.com (the "Site").

App name: The Last Manual. Android package: com.thelastmanual.app. Privacy contact: support@thelastmanual.com.

This policy is written to meet Google Play's User Data requirements: it is publicly available over HTTPS, labeled as a privacy policy, names the App, and discloses the data we access, how we use it, who we share it with, how we protect it, and how it is retained or deleted.

Depending on the features you use and the permissions you grant, the App may access the following personal and sensitive data on your device:

• →Precise location (GPS): Map blue-dot, surrounding-area downloads, and offline routing stay on your phone. If you search for a place or request a road-following route while online, the search text and coordinates go to OpenStreetMap Nominatim and OSRM (see §5). We do not send GPS to The Last Manual servers.
• →Camera and flashlight: SOS / Morse torch signalling and the lux meter. Images are processed on-device and are not uploaded to us.
• →Microphone: Morse Decoder Listen meters nearby tones (whistle, radio, another phone). Audio is not stored or uploaded.
• →Bluetooth: nearby Comms peers, callsign, and chat. Messages travel in the clear over BLE to nearby devices; they are not end-to-end encrypted.
• →Emergency contacts you type in: stored only on the device. We do not upload your phonebook.
• →Notifications: timer and other in-app alerts you enable.
• →On Free: advertising identifiers, IP address, and device/ad diagnostics via Google AdMob (see §5).
• →If you buy Pro: purchase tokens and an anonymous app-user id via Google Play and RevenueCat (see §5).

Stored locally on your phone (not uploaded to The Last Manual servers as part of normal App use):

• →Bookmarks, checklists, recent reads, theme, panic, battery-saver, and related preferences
• →Emergency contacts you enter
• →Offline article library, map region downloads, and optional on-device AI model
• →Map waypoints you save
• →Bluetooth Comms callsign, chat history, and background-Comms preference
• →Ask chat history on this device (not uploaded to us)
• →PDF export counter used to enforce the Free limit

Location is requested at runtime when you use Map (Pro). Camera, Bluetooth, and notifications are requested when you use those features. Denying a permission disables the related feature; the rest of the App still works.

We use information only to operate features you choose:

• →Provide the offline library, Map, Ask (on-device AI), Comms, PDF export, tools, and settings
• →Show ads on Free, or unlock Pro and hide ads after a Play purchase
• →Download library and map packs you request
• →Send App-related notices you enable (for example timer alerts)
• →Run the Site, including waitlist signup and automatic analytics
• →Respond to support requests and in-app feedback you send us
• →Comply with law and protect the App against abuse

We do not use on-device reading history, checklists, waypoints, or emergency contacts to build an advertising profile. We do not operate Document Vault, Inventory Tracker, Safety Burst, Dead Man's Switch, or end-to-end encrypted mesh chat.

Ask the Manual is an optional on-device assistant. After you choose to install it, the App downloads Google's Gemma 3 1B model (~690 MB) from Hugging Face and runs it on your phone with llama.rn. Questions, retrieved article excerpts, and generated answers stay on the device. We do not operate a cloud LLM, and we do not receive your Ask prompts or replies.

Hugging Face sees standard download metadata (IP address, the model file requested) when you install or update the model. After the file is on the phone, Ask works offline. Hugging Face's policy: huggingface.co/privacy.

Ask is a field-manual lookup, not a counselor. Questions that look like suicide or self-harm are not sent to the model.

We do not sellpersonal and sensitive user data (we do not exchange or transfer that data to a third party for money). We share data only as described here: with service providers who help run the App or Site, when you tap a feature that opens another company's product, or if required by law.

We handle personal and sensitive data as follows:

• →App traffic to our hosts and to Google / RevenueCat / Hugging Face / OSM uses HTTPS (TLS).
• →On-device notes, contacts, waypoints, and preferences stay in the App’s private storage. Uninstall or Android “Clear data” removes them.
• →We do not run a The Last Manual login, so there is no password database of ours to breach.
• →Comms over BLE is not encrypted. Do not send secrets over mesh chat.
• →We do not operate a first-party crash reporter or analytics SDK inside the field App.

App (no The Last Manual account). Local data is kept on the device until you clear App storage or uninstall. We cannot remotely wipe your phone. Step-by-step instructions: Data Deletion.

Because the App does not create a The Last Manual account, there is no in-app “delete my account” button for a cloud profile we control. Google Play purchase history remains with Google; uninstalling does not cancel or delete that Play record.

Site waitlist. We keep your name and email until you ask us to delete them, or until we no longer need the list for launch notices. Use the form on the Data Deletion page, or email support@thelastmanual.com. Support emails are kept only as long as needed to handle the request.

In-app feedback. We keep feedback for as long as it helps us fix or improve the App. To have feedback you sent deleted, email support@thelastmanual.com with the email you entered or the date and wording of the message.

Third parties.Google (ads and Play), RevenueCat, Hugging Face, OpenStreetMap / OSRM, PostHog, Supabase, OpenFreeMap, and retailers retain data under their own policies. We cannot erase advertising identifiers or Play receipts stored only in those systems; use your device advertising-ID reset, Play account tools, or those companies' privacy controls.

• →Stay on Free with ads, or buy Pro (ad-free; full library, Map, Ask the Manual, Comms, unlimited PDFs, full toolkit)
• →Deny location, Bluetooth, camera, or notification permissions
• →Reset your advertising ID in Android settings; use AdMob / UMP privacy options where shown
• →Decline Site analytics cookies (Cookie settings in the footer)
• →Clear App data or uninstall to delete local App data
• →Skip installing the on-device Gemma model (Ask stays locked until you do)
• →Use the Data Deletion form (or email us) to delete a waitlist signup

The App is not directed at children under 13 (or the equivalent age of digital consent in your region), and it is not designed for Google Play's Families program. Ads are rated for teen+ content and are not tagged as child-directed. We do not knowingly collect personal information from children. If you believe a child provided information to us (for example a waitlist email), contact us and we will delete it.

Our hosts and vendors (including Google, RevenueCat, Hugging Face, OpenStreetMap / OSRM, Supabase, and PostHog) may process information in the United States and other countries. If you use the App or Site from the EU/UK, that transfer is part of providing the service you requested (downloads, ads, purchase restore, model install, online map search/routing, or waitlist).

We may update this policy when the App or Site's data practices change. The "Last updated" date above will change when we do. Material changes will be posted on this page.

Privacy questions and deletion requests: email the address below. We aim to respond within a reasonable time (typically 30 days).