Privacy Policy

1. Introduction

SpecInspect LLC ("SpecInspect," "we," "us," or "our") operates the SpecInspect mobile application and website at specinspect.com. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our services.

By using SpecInspect, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and company name when you create an account.
• Payment Information: Payment details processed through Apple's In-App Purchase system and RevenueCat. We do not directly collect or store your full credit card number.
• Project Data: Project names, project details, and submittal information you create within the app.
• Communication Data: Information you provide when contacting us for support or feedback.

2.2 Information Collected Automatically

• Usage Data: Search queries, products viewed, specs saved, and features used within the app.
• Device Information: Device type, operating system version, app version, and unique device identifiers.
• Photos: Camera photos taken within the app for product scanning via AI. Photos are processed in real time for product identification and are not stored on our servers after processing.

2.3 Information We Do Not Collect

• We do not store camera photos after they have been processed for product identification.
• We do not collect location data.
• We do not access your contacts, messages, or other apps on your device.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain our Service, including creating and managing your account, processing subscriptions, and delivering product specification data.
• To improve and develop our Service, including analyzing usage patterns, fixing bugs, and developing new features.
• To communicate with you, including sending subscription confirmations, product updates, and responding to support inquiries.
• To process payments, handled through Apple's In-App Purchase system and RevenueCat subscription management.
• To generate submittal documents based on your saved products and project data.
• To comply with legal obligations and enforce our terms of service.

4. Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We share data with third-party service providers who assist in operating our platform (see Section 5 for details).
• Legal Requirements: We may disclose information if required by law, regulation, or legal process, or if we believe disclosure is necessary to protect our rights or the safety of others.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
• With Your Consent: When you have given us explicit permission to share your information.

5. Third-Party Services

We use the following third-party services that may have access to your information:

• Apple Inc.: In-App Purchases, subscription billing, and App Store services. Apple processes your payment information according to its own privacy policy. Apple's Privacy Policy
• RevenueCat: Subscription management, billing analytics, and entitlement verification. RevenueCat processes transaction data to manage your subscription. RevenueCat's Privacy Policy
• OpenAI: AI-powered image recognition for product scanning. Photos sent for identification are processed in real time and are not stored by OpenAI beyond the processing period. OpenAI's Privacy Policy
• Resend: Transactional email delivery service for account verification, password resets, team invitations, and subscription notifications. Resend processes email addresses and email content to deliver messages on our behalf. Resend's Privacy Policy

Each third-party service operates under its own privacy policy. We encourage you to review their policies when using these services through our app.

6. Cookies and Tracking Technologies

SpecInspect uses minimal tracking technologies:

• Essential Cookies: Used to maintain your session and authenticate your account within the app.
• Analytics: We may use anonymized analytics to understand app usage patterns and improve our service. This data is aggregated and does not personally identify you.
• No Advertising Cookies: We do not use advertising cookies or sell data to advertising networks.

You can manage cookie preferences through your device settings. Disabling essential cookies may affect app functionality.

7. Data Retention

• Account Data: Retained for as long as your account is active. Upon account deletion, your personal data is removed within 30 days.
• Usage Data: Anonymized usage data may be retained indefinitely for analytics and service improvement.
• Project & Submittal Data: Retained for as long as your account is active. You may delete this data at any time within the app.
• Search History: Stored to improve your experience. You can clear your search history within the app at any time.
• Payment Records: Transaction records are retained as required by law and for dispute resolution purposes.

8. Data Security

We take reasonable measures to protect your personal information, including:

• Storing data in a PostgreSQL database on a secure, access-controlled server.
• Encrypting data in transit using TLS/SSL.
• Limiting access to personal data to authorized personnel who need it to perform their duties.
• Processing payments through Apple's secure In-App Purchase system and RevenueCat — we never directly handle or store your full credit card information.

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements. You can delete your account directly within the SpecInspect app by going to Account → Delete Account. This action is irreversible and will permanently remove your profile, saved specs, projects, and team associations within 30 days.
• Portability: Request a copy of your data in a structured, machine-readable format.
• Objection: Object to certain processing of your personal data.
• Withdraw Consent: Withdraw consent for data processing where we rely on consent as our legal basis.

To exercise any of these rights, please contact us at paul@specinspect.com. We will respond to your request within 30 days.

10. California Consumer Privacy Act (CCPA)

If you are a California resident, you have the following rights under the CCPA:

• Right to Know: You can request information about the categories and specific pieces of personal data we collect, how we use it, and with whom we share it.
• Right to Delete: You can request that we delete your personal information, subject to certain exceptions.
• Right to Opt-Out: We do not sell your personal information, so there is no need to opt out of sale.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

Categories of personal information we collect under CCPA:

• Identifiers: Name, email address, user ID
• Commercial Information: Subscription status, purchase history, product preferences
• Internet Activity: Search queries, products viewed, features used, interaction data
• Device Information: Device type, OS version, IP address
• Professional Information: Company name, job title (if provided)

We do not sell any of these categories of personal information.

11. GDPR Compliance

If you are a resident of the European Economic Area (EEA) or the United Kingdom, you have rights under the General Data Protection Regulation (GDPR):

• Lawful Basis: We process your data based on contract performance (delivering the service), legitimate interests (improving the service), and consent (where required).
• Right to Access: You can request confirmation of whether your data is being processed and obtain a copy.
• Right to Rectification: You can request correction of inaccurate data.
• Right to Erasure: You can request deletion of your data in certain circumstances.
• Right to Restrict Processing: You can request that we limit how we process your data.
• Right to Data Portability: You can request your data in a structured, commonly used format.
• Right to Object: You can object to processing based on legitimate interests.

To exercise these rights, contact us at paul@specinspect.com. If you are unsatisfied with our response, you have the right to lodge a complaint with your local supervisory authority.

12. Do Not Sell My Personal Information

SpecInspect does not sell your personal information. We have never sold, and will never sell, your personal data to any third party for advertising, marketing, or any other purpose. This includes:

• We do not sell your name, email address, or contact information.
• We do not sell your search history, product views, or usage data.
• We do not sell your device identifiers or IP address.
• We do not share your data with advertising networks, data brokers, or analytics companies for monetization.

Under the CCPA, "sale" is broadly defined to include making data available to third parties for advertising. SpecInspect does not engage in any such practices. The third parties we share data with (Apple, RevenueCat, Resend, OpenAI) are service providers who process data solely to deliver our service — not to sell or advertise to you.

13. In-App Privacy and Data Practices

When you use the SpecInspect mobile app, the following data practices apply:

• Camera Access: The app requests camera access solely for the purpose of scanning products. Photos are processed in real time via AI for product identification and are not stored on our servers after processing.
• No Location Tracking: The app does not collect, access, or store your GPS location.
• No Advertising: The app does not include any advertising SDKs, ad networks, or tracking frameworks.
• No Third-Party Analytics: We do not use third-party analytics platforms (such as Google Analytics, Firebase, or Mixpanel) that track you across apps or websites.
• Local Storage: The app stores your recently viewed products, saved specs, and preferences locally on your device. This data does not leave your device unless you explicitly choose to share it.
• Account Deletion: You can delete your account and all associated data at any time by going to Account → Delete Account in the app. Deletion is permanent and removes your personal data, saved items, projects, and team associations within 30 days, subject to legal retention requirements.
• Subscription Management: Subscriptions are managed through Apple's In-App Purchase system. You can view, manage, or cancel your subscription at any time in Settings → Apple ID → Subscriptions.

14. Apple App Store End User License Agreement

Your use of the SpecInspect app on Apple devices is also subject to Apple's standard App Store End User License Agreement (EULA). In the event of a conflict between this Privacy Policy and the Apple EULA regarding the use of the app on Apple devices, the Apple EULA shall prevail.

15. Apple Privacy Manifest

SpecInspect includes a PrivacyInfo.xcprivacy manifest in accordance with Apple's privacy requirements. Our privacy manifest declares the following:

• NSPrivacyTracking: We do not track users across apps or websites. This value is set to false.
• NSPrivacyTrackingDomains: Our app does not track users across apps or websites, so this list is empty.
• NSPrivacyCollectedDataTypes: The data types we collect are declared in our App Store Connect privacy nutrition labels (see Section 16).
• NSPrivacyAccessedAPITypes: We declare usage of the following required reason APIs:
  • UserDefaults (C56CD, reason: storing user preferences and app state locally)
  • File timestamps (C717, reason: checking file modification dates for cache management)

16. App Store Privacy Nutrition Labels

SpecInspect declares the following data collection categories in our App Store Connect privacy nutrition labels:

Data Linked to You

• Contact Info: Email address, name (for account creation and communication)
• Financial Info: Payment method (processed by Apple via In-App Purchase — we do not directly access your credit card number)
• User Content: Photos (for product scanning, processed in real time, not stored)
• Search History: Product searches (to improve search results)
• Identifiers: User ID, device ID (for account management and fraud prevention)
• Usage Data: Product views, feature interactions (for app improvement)

Data Not Linked to You

• Diagnostics: Crash data, performance metrics (aggregated, not linked to your identity)
• Other Data: App interaction patterns (aggregated for service improvement)

Data We Do NOT Collect

• Sensitive info (racial/ethnic data, sexual orientation, political opinions, health data)
• Location data (GPS or precise location)
• Contacts
• Browsing history (outside the app)
• Photos (beyond real-time scanning; we do not store your photos)
• Home address, date of birth, social security number, phone number

17. Children's Privacy

SpecInspect is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete such information immediately. If you believe a child under 13 has provided personal data to us, please contact us at paul@specinspect.com.

18. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will:

• Update the "Last updated" date at the top of this page.
• Notify you via the app or by email for material changes.
• Obtain your consent where required by law before changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

19. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: