Legion Commander Privacy Policy

Last updated: 3 November 2026

Legion Commander is an app by ProVision (Ramallah, Palestine) for the staff of organisations whose websites run on the Legion engine. It lets an authorised site admin capture photos, videos, voice notes and notes, and have an AI assistant turn them into posts on their own website. This policy explains what the app handles and where it goes.

Who can use it

There is no sign-up in the app. A phone can only be connected by an existing admin of a Legion website, from that website's control panel (two-step verification and a QR code), and the admin approves each phone. The app acts only with that admin's permissions.

What the app handles

  • Photos and videos you take with the camera or choose from your library, voice notes you record with the microphone, and notes and messages you type. The app uses the camera, microphone and photo library only when you tap the matching button.
  • Device details: the phone's name, platform and app version, shown to the admin in the panel's list of connected devices.
  • A security key made in your phone's secure hardware. Its private part never leaves the phone; the website keeps only the public part, used to check that sign-ins come from your phone (with Face ID or your fingerprint).

Where it goes

  • Everything you capture is uploaded to the website you connected, and stored by that website's owner like any other upload from its control panel. Videos and voice notes are stored privately; photos go to the site's media library so they can be used in posts. Nothing is published until you approve it in the app.
  • To write posts, the website sends what the AI needs (text, photos as images, the sound of voice notes and videos) through ProVision's AI gateway (legionengine.tech) to the AI providers that process it: Anthropic (Claude) and Google (Gemini). They process it to produce the reply and do not use it to identify you. The gateway does not keep the content; it records only usage figures (time, feature, size, cost).
  • ProVision does not sell data, show ads or track you across apps and websites. The app has no analytics or advertising code.

AI services and your permission

Before anything is sent to an AI service, the app shows what is sent and who receives it, and asks for your permission. Nothing is sent until you tap Allow and continue. You can withdraw it at any time in the app (Sites, AI and your data); stories then can't be opened until you allow it again.

  • What is sent: the messages you write in a story; the photos, files and voice notes you add to it, and the sound of its videos; and the parts of the website the task needs: section and field names, the entries being written, translated or checked, and the site memory the website's admins saved.
  • How it is collected: only from what you capture or type in a story, and from the website you connected. The app does not read your contacts, your location or other apps.
  • Who receives it: the website sends it over an encrypted connection to ProVision's AI gateway (legionengine.tech), which passes it to Anthropic (Claude) for writing, planning and reading photos and files, and to Google (Gemini) for turning voice notes into text and for translation.
  • What it is used for: only to produce the replies, drafts, transcripts and translations you ask for. It is not used for advertising, profiling or sale.
  • Protection: Anthropic and Google process the data as service providers under their commercial API terms, which require them to keep it confidential and secure and not to use it for their own purposes, including training their models. ProVision's gateway does not store the content.
  • Talk-to-type uses your phone's own speech recognition (Apple or Google) under that company's terms.

How long it is kept

Captures, stories and posts stay on the website until its admins delete them. The app keeps captures on the phone only until they are uploaded, and the list of connected websites in the phone's secure storage until you disconnect a site or delete the app.

Your choices

You can disconnect a website in the app at any time, and the website's admins can revoke any phone in the panel. To have content removed from a website, contact that website's owner. For anything about this app, write to info@provision.ps.