InspectFlowPrivacy policy
Last updated: 12 November 2026
Draft for review. This policy describes how the InspectFlow app works today. The operator's legal name and contact address will be added when the company is registered. Have it reviewed by a qualified adviser before relying on it in a contract.
InspectFlow is an inspection and quality management application for construction projects, available on the web, Android and iOS. This policy explains what information the app handles, why, where it is kept and what choices you have. "We" means the operator of InspectFlow.
Who uses InspectFlow
InspectFlow is used by companies and their project teams. Accounts are given access to projects by a project administrator; the app is not intended for the general public or for children. The company that runs a project decides who has access to it and is responsible for the project records its team enters.
Information we handle
| Information | What it includes | Why |
|---|---|---|
| Account details | Your name, email address, role, company and the projects you are assigned to. | To sign you in and show you only the projects you are allowed to see. |
| Sign-in and session data | An encrypted password held by our sign-in provider, when your session started and when it expires. | To keep accounts secure. Signing in on a new device ends the previous session. |
| Project records you enter | Inspection requests, locations, remarks, review comments, decisions, consultant responses and the history of each record, including the name of the person who took each action. | This is the purpose of the service: a traceable inspection record. |
| Files you attach | Site photos, drawings, marked-up drawings, test reports and generated cover sheets. | To attach evidence to the inspection it belongs to. |
| Notification token | An identifier for your device issued by Google's messaging service, if you allow notifications. | To notify you when an inspection needs your attention. |
| Security records | A log of security-relevant actions, such as sessions starting and records being deleted or restored. | To investigate problems and protect project records. |
What we do not collect
- We do not use advertising or analytics trackers, and we do not sell or rent information to anyone.
- We do not collect your location, contacts, call logs or messages.
- The camera is used only when you choose to take a photo for an inspection. Photos are reduced in size before upload; the original stays on your device.
Where information is stored
InspectFlow runs on Google Cloud (Firebase). Project records are stored in a Google Cloud data centre in Saudi Arabia, files in a data centre in Qatar, and requests are processed in Qatar and India. Sign-in and notifications use Google services that operate globally. Information is encrypted in transit and at rest. Google acts as our service provider and processes this information on our instructions.
Who can see your information
- Your project team. People assigned to the same project, in the same company, can see its inspections, attachments and the names recorded against each action.
- Administrators. Project administrators can see the users and records of their projects.
- Consultants and others outside the app. Documents you generate or download, such as a WIR cover sheet, are shared by your company outside InspectFlow under its own arrangements.
- The operator. We access data only to run, secure and support the service, or where the law requires it.
How long we keep it
Account details are kept while your account is active. Inspection records, their attachments and their history are project records that belong to the company running the project; they are kept for as long as that company uses the service, because they may be needed as contractual evidence. When an account is deleted, the name recorded against past actions remains in those records so the history stays accurate. Security records are kept for as long as needed to protect the service.
Your choices
- Access and correction. You can see your name and role in the app. Ask your project administrator, or us, to correct them.
- Deletion. You can ask for your account to be deleted. See Delete your account for how, and for what is removed and what is kept.
- Notifications. You can turn notifications off in your device settings at any time.
Security
Access is limited by role, project and company. Each account has one active session at a time, and sessions expire automatically. Files are served only to signed-in users with access to the project. No system is perfectly secure; if you believe your account has been misused, contact us straight away.
Changes to this policy
If we change how InspectFlow handles information, we will update this page and the date at the top.
Contact
Questions or requests about this policy: info@inspectflow.ae