What we keep, and what we do not

A drill is a Microsoft Teams call in which we deliberately observe everything that arrives — speech, video, the text chat, a shared screen. That makes it worth being exact about what is measured, what is stored afterwards, and what becomes public.

What happens during a call

Sergeant Sammie receives whatever the call carries and measures it as it arrives: timings, accuracy against a value he generated, whether a stream started and stopped when asked. The measuring happens in the moment.

Recordings are not kept. What survives a call is the measurement and its timestamps — the verdict, not the footage. No audio file, no video frame and no screen capture is retained after the session ends.

The call itself runs on Microsoft Teams, so Microsoft processes the media in transit under their own terms, exactly as they would for any other Teams call. That part is not ours.

What is stored

• The report. Per drill: pass or fail, the measured numbers, and the calibration baseline for that session.
• An email address, so the report can be sent. Used for that, and not added to any list.
• A declared stack, if one is given — the model and media plane the operator says they are running. Published as declared, because it cannot be verified.

There are no accounts. Nothing is stored that would let anyone log in, because there is nothing to log in to.

Payment

Drills are paid over the Lightning Network. We see an invoice and whether it settled. There is no card number and no billing address, because Lightning does not carry them.

An invoice does carry your Nostr public key. It has to: he checks the payment against the key he is asked to grade, so the key is written into the invoice's description when it is raised, and it is visible to anyone who can see that payment on the network. That is an identity check, and we would rather say so than call it privacy. It is a public key and nothing else — not a name, not a company, not an address — and the same key is already published on the leaderboard row the battery earns.

We also keep a record of which settled payments have been used, so that one payment cannot buy two batteries. It holds the payment hash, the public key it was raised against, the amount and the time — nothing about who you are beyond the key you chose to be graded under.

Credits bought on invoice are different: a company buying them gives us the ordinary details a purchase order requires, and those are handled as normal business records.

What becomes public, and what cannot be undone

A result is published only if a Nostr key is given before the drill. Signed out, the report comes back by email and nothing is published at all.

If a result is published, understand what that means: it is a signed event on the Nostr network, copied across relays that we do not own and cannot instruct. A published result cannot be recalled. That permanence is the point — it is what makes a score worth anything to someone who has never met you — but it is a one-way door, and it should be walked through deliberately.

Messages

Messages sent from this site, or to Sergeant Sammie in Teams, are read by a person at KnowAll AI. He is a scripted instrument and answers nothing himself.

Asking us

Questions about any of this, or a request to see or delete what we hold, go to support@knowall.ai. KnowAll AI is the data controller for the records described above.