Who we are
This Privacy Policy applies to the Exhibit Truth mobile app and its companion website. NSF Labs LLC operates Exhibit Truth. For privacy questions, access, correction or deletion requests, contact info@NSFlabs.org with the subject “Exhibit Truth privacy request”.
Exhibit Truth is an independent educational project. You do not need an account to browse downloaded museum records or use self-guided tours. We do not sell personal information or use advertising trackers.
Museum browsing and offline information
Downloaded museum records, permitted reference images, image-matching indexes, tour progress, saved suggestions and preferences are stored on your device. Searching a downloaded collection and progressing through a self-guided tour do not create a public visit record.
If you connect to optional online services, the app sends the requests needed to retrieve collections, search a wider catalog and load leaderboards. These requests can include the museum identifier and your search terms. Loading uncached museum images contacts the image host. Servers and hosting providers receive ordinary connection information, including IP address, request path, time, app/browser information and error information.
Camera, photos and recognition
Camera and selected-photo access are used when you choose to scan an exhibit or label, or attach a photo to a suggestion. Label recognition and visual matching process images on your device. Scan images and recognized text are not uploaded to NSF Labs for recognition; the temporary scan copy is deleted after lookup. Photos you separately attach to a suggestion are handled as described below.
Text recognition uses Google ML Kit. Google documents collection of device and app information, installation identifiers, configuration, performance and error events for SDK diagnostics and usage analysis. This is separate from the on-device image/text processing. Exhibit Truth does not add an advertising or visitor-behavior analytics SDK. You can browse and search by typed title or accession number without using the scanner.
Optional location
Location is requested only when you choose a location-based feature. Near me compares your location with museum coordinates on your device; the app does not send those coordinates to its catalog server for this feature.
If you explicitly attach GPS to a suggestion, its coordinates, accuracy and capture time become part of the saved review card and the email you choose to send. Location is not required to suggest an object or museum. Avoid attaching a home address or precise location for a private collection. You can revoke location permission in your device settings.
Object and museum suggestions sent by email
The suggestion form prepares an email addressed to info@NSFlabs.org. It can include the museum/collection name, object title, accession number, notes, scripture references, proposed connection and tier, agreement selections, chosen photos and any GPS you attach. Museum suggestions may include city, country, street address, website and contact details you enter. A batch includes the separate details and photos for each item.
The app hands the completed card and attachments to your email app. You review and send it there. Your email provider and our email provider process the message, sender address, message headers and attachments to deliver it. Attached images may contain metadata; we do not promise that an email attachment is stripped of every metadata field. Do not include other people’s personal information without permission.
A local copy is saved on your device. “Opened in email” records the handoff, not delivery confirmation. Deleting a local copy does not recall a sent email or delete a draft or sent message in your email app. We use received suggestions for review, follow-up, rights verification and possible editorial inclusion. Submission does not automatically publish your email, photos or GPS location.
Optional server profiles and leaderboards
Server participation uses a random profile identifier and a device-held credential. Contributor profiles store a display name, leaderboard consent, and any server-submitted objects, review decisions and accepted-object credit. Only an opted-in public name and accepted-object count appear in contributor rankings. Email suggestions are separate from this server profile and do not automatically create leaderboard credit.
If visitor participation is enabled and you join, the server records only the objects you explicitly mark as visited, the related museum and request identifiers, timestamps and profile activity. The public museum leaderboard shows your display name and distinct-object count. These are self-reported visits, not verified attendance. Completing a self-guided stop does not award visitor or contributor points.
Display names are public when participation is enabled. Use a nickname, not contact details. Name changes and moderation actions are recorded with profile identifiers, previous/new names, timestamps and moderation reasons to address abuse. Offensive names may be replaced and editing restricted.
Reports, support and external services
An in-app correction report contains a random report identifier, the object, issue type, your note, app version and report time. Reports wait on your device until they are sent to the configured server. We use them to correct collection information and troubleshoot problems.
We use email and hosting providers to operate the service and authorized reviewers to assess suggestions. They receive the information needed for those functions. We may disclose information when required by law or to protect the service and its users. We do not sell or rent your information.
Museum websites, independent operators, JW.org, Watchtower ONLINE LIBRARY, GitHub and Buy Me a Coffee have their own privacy practices. They receive information when you choose to visit or contact them. Donations are processed by the donation provider; Exhibit Truth does not collect payment-card details. GitHub issues may be public, so do not post private information there.
Website data and storage
The companion website does not require an account, use advertising cookies, embed third-party videos, or load visitor analytics scripts. Fonts and artwork are served with the site. The manual search and walkthrough run in your browser; their inputs are not submitted to us.
The Exhibit Truth website is hosted through Sites infrastructure using Cloudflare. Its user manual, walkthrough and privacy resources on nsflabs.org are hosted on Cloudflare Pages. Hosting and security services process connection details such as IP addresses, browser information, requested pages and timestamps to deliver and protect the site. The hosting layer may use strictly necessary security cookies. Following a contact or provider link leaves the website and uses the selected service.
Retention and deletion
Local downloads, progress, drafts and preferences remain until you remove them, clear the app’s storage or uninstall it. Use My submissions to delete saved suggestions; use Downloads to remove cached images and indexes. Bundled museum data can return with the app. Your device may retain images in its photo library or temporary files according to operating-system behavior; manage those separately.
Server contributor profiles and their uploaded submissions remain until you delete the profile or request removal. In Contributions, “Delete my submissions and profile” removes the current server profile, uploaded submission records/photos and credit, plus the app’s saved suggestions. Turning off public leaderboard participation hides your ranking but does not delete the profile. Server deletion requires a connection.
For visitor participation, Settings offers “Leave and delete my record”. Tracking stops on the device immediately; reconnect if deletion is queued. Server cleanup is configured to remove visitor profiles after more than 365 days without activity. Removing the app alone does not tell an online server to delete its records.
Email suggestions, support messages and reports are retained while needed for review, corrections, follow-up and resolving disputes, or until a valid deletion request is fulfilled. Moderation/audit records may remain for abuse prevention and accountability even after a profile is removed; request review of any retained personal information. Source-attributed editorial catalog content is maintained separately from contributor identity. Any legally required retention is limited to the relevant purpose.
To request deletion outside the app, email info@NSFlabs.org. Identify Exhibit Truth and include the sending address or submission ID, public alias and relevant server/museum if available. Never send your private profile credential. We may ask for proportionate information to verify ownership. Removing our copy cannot remove messages from your own email provider or copies already delivered elsewhere. Backup copies may persist until replaced through the provider’s normal backup process.
Security, choices and your rights
Release builds require HTTPS for configured app services. Profile credentials use the device’s secure storage, and administrative review requires authentication. Local drafts include the content you choose to save; protect your device with its lock and security settings. Email security also depends on the providers handling the message. No storage or transmission method can be guaranteed completely secure.
You can decline camera/photo/location permissions, browse without participation, hide your public contributor ranking, leave visitor participation, delete a profile and request access, correction or deletion of personal information. Depending on where you live, you may also have rights to restrict or object to processing, receive a portable copy, or complain to your local data-protection authority. Contact us to exercise applicable rights.
Information may be processed where our hosting, email and SDK providers operate, including outside your country. We use the information to provide requested functions, review contributions, respond to support requests, protect the service and meet applicable legal obligations. Optional location, email submission and public participation require your choices.
Children and policy changes
The app is a general-audience educational companion, not a service designed to collect children’s personal information. Children should use it with a parent or guardian and should not submit personal details or join public rankings without appropriate adult involvement. If you believe a child’s personal information was sent to us without appropriate permission, contact us so we can investigate and remove it as appropriate.
We will update this policy when the app’s practices change and revise the effective date. Material changes that require a new choice or consent will be disclosed through the relevant app flow. The app includes an offline copy of this policy; the website carries the current published version.
Provider information
Contact: info@NSFlabs.org