InspectAI is a professional inspection productivity tool. This policy explains what data we collect, how we use it, what leaves your device, and what controls you have. We're a small company — this is a plain-English document, not lawyer theater.
Contents
InspectAI is operated by Steps Ventures LLC, a Delaware limited liability company ("we," "us," "our"). Our registered address is on file with the Delaware Division of Corporations. For privacy inquiries, contact us at privacy@inspectai.app.
"InspectAI" refers to the iOS mobile application, the web platform at inspectai.app, and any related APIs or services we operate.
When you create an inspector account we collect: email address, password (hashed, never stored in plain text), full name (optional), inspection license number (optional), and company name (optional). This information appears on inspection reports you generate.
Each inspection you create is stored in our database and includes: property address, property characteristics (type, size, year built), room names, findings you log (title, description, severity, category, cost estimate), and any notes or annotations you add.
Photos and audio files you capture or select during an inspection are uploaded to our servers for report generation. See Section 5 for details.
LiDAR room scans (RoomPlan) and AR finding pins (ARKit) are captured and processed on your device. We store the resulting room dimensions and each pin's position relative to the scan, not GPS coordinates. See Section 4.
We collect standard server logs including IP address, browser/device type, pages visited, and timestamps. We use this for security monitoring, debugging, and aggregate analytics. We do not use session replay tools or behavioral tracking SDKs beyond standard server logs.
If you create API keys for programmatic access, we store a hashed version of each key. Raw keys are shown once at creation and never stored in recoverable form.
Specifically, the following data is sent to Gemini:
We use Google's Gemini API under a commercial agreement, which includes data processing terms limiting Google's use of API inputs to providing the service and prohibited from using your data to train Google's general models without additional consent. However, we encourage you to review Google AI's Terms of Service directly.
Practical implication: If an inspection involves sensitive personal information about property owners or occupants, be mindful that this information may be included in transcript text that is sent to Gemini. Use the minimum necessary identifying detail in spoken notes.
InspectAI's spatial features run on Apple's on-device frameworks. LiDAR room scans use Apple's RoomPlan, and AR finding pins use ARKit world tracking. These use the device's camera and motion sensors to build a local 3D understanding of the room you are standing in; the coordinates are relative to that scan session, not global GPS positions.
The app does not request location ("Location Services") permission and does not collect GPS coordinates. The camera and motion data used for scanning are processed on your device; we store the resulting room dimensions and the relative position of each finding pin alongside the inspection record, plus any room-scan model file you choose to keep. No raw camera feed or sensor stream is uploaded.
Photos taken during inspection are uploaded to our servers and stored in association with your inspection record. They are used to generate the report and are visible in the inspection's media library. Photos are retained for the life of the account unless you delete the inspection or close your account.
Audio recordings are transcribed on-device using Apple's on-device Speech Recognition (no data leaves your device during transcription). The resulting text transcript is then synced to our servers and, when you generate a report, sent to Gemini. The raw audio file is stored on our servers and retained for the life of the inspection record.
On-device AR processing: Room scanning and AR pin placement run entirely on-device via Apple's RoomPlan and ARKit. No raw images or video frames are transmitted to any server during scanning or AR capture.
When you enter client names, emails, or agent information into an inspection, you are collecting personal data about third parties. You are acting as the data controller for that information; InspectAI is the processor.
You are responsible for:
We use the data we collect to:
We do not use your inspection data for advertising, sell it to third parties, or share it with other customers.
Inspection data (findings, notes, media, reports) is retained as long as your account is active. If you delete an inspection from within the app, all associated data including media files is permanently deleted within 30 days.
To close your account and request deletion of all your data, email privacy@inspectai.app. We will delete your account and all associated inspection data within 30 days, except where retention is required by law (e.g., billing records) or where data has been aggregated and de-identified.
Note: We cannot delete data that has already been transmitted to Google Gemini as part of an API call. Google's data retention policies for API inputs apply.
We use HTTPS for all data in transit. Passwords are hashed using bcrypt. API keys are stored as hashes; raw keys are irrecoverable after creation. Database backups are encrypted. Access to production systems is restricted to authorized personnel via two-factor authentication.
No internet-connected system is perfectly secure. We cannot guarantee that data breaches will never occur. If a breach affects your account data, we will notify you as required by applicable law.
If you are a California resident, you have the right to: (a) know what personal information we have collected about you; (b) delete personal information we hold about you; (c) correct inaccurate personal information; and (d) opt out of the "sale" or "sharing" of your personal information. We do not sell or share your personal information for cross-context behavioral advertising.
To exercise your California rights, email privacy@inspectai.app with the subject line "California Privacy Request." We will respond within 45 days.
InspectAI is a professional tool intended for licensed inspectors and industry professionals. It is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us at privacy@inspectai.app and we will delete it promptly.
We may update this policy as the product evolves. If we make material changes, we will notify you by email (at the address on your account) at least 14 days before the change takes effect. Continued use of InspectAI after the effective date constitutes acceptance of the revised policy.
The date at the top of this document reflects the most recent revision.
For privacy questions, data requests, or concerns:
Steps Ventures LLC — InspectAI Privacy
Email: privacy@inspectai.app
We aim to respond to all privacy inquiries within 5 business days.