Inspectly for Tesla
SmartHarmony AI · Inspectly

Privacy Policy

How Inspectly handles inspection information, photos, AI, purchases, and your privacy choices.

Last updated: October 21, 2026

1. Who we are

This Privacy Policy explains how SmartHarmony AI LLC (“we”, “us”) handles personal information for Inspectly for Tesla (“Inspectly”), our inspection app, and the Inspectly pages on smartharmonyai.com. Inspectly is an independent product and is not affiliated with, endorsed by, or operated by Tesla, Inc.

For privacy questions or requests, contact support@smartharmonyai.com and identify Inspectly in your message. Our Support page explains what to include.

2. The short version

  • The free Essential Check stays on your phone. Its answers are never uploaded, backed up, or sent for AI analysis.
  • Your original photos stay on your phone. For a paid inspection, the app uploads a verified copy of each photo (a JPEG of at most 2000 pixels, with embedded metadata such as location removed) to our storage on Cloudflare, whether or not cloud backup is on.
  • Cloud backup is optional and off by default. It stores your paid inspections on our servers so you can restore them on another phone.
  • When you delete an inspection on your phone, its cloud backup and photo copies are deleted from our servers the next time the app connects.
  • AI analysis (the Virtual AI Inspector) runs only after you allow it: the first time you finalize a paid inspection with AI analysis, the app asks for your permission before anything is sent. Your checklist answers, notes and photo copies are processed by our third-party AI service providers on our behalf (OpenAI, and Anthropic as an alternate), only to prepare your analysis, never to train AI models. We do not include your VIN or location fields, but photos are sent as they are. You can withdraw permission in Settings → Privacy → Privacy preferences.
  • Dictation and short spoken commands (such as “looks good” while you check a car) use your phone’s speech recognition. Inspectly does not save, keep, or upload audio. When recognition cannot run on your phone, Apple (iPhone) or your phone’s speech service, usually Google’s (Android), processes the audio under its own privacy terms.
  • “Share usage analytics” is on by default: how you use the app goes to Google Analytics (with your random account identifier) and PostHog so we can improve Inspectly. You can turn it off in Settings → Privacy.
  • “Ad measurement” tells us which of our ads led to your install and purchases, using your phone’s advertising identifier, through our attribution partner Tenjin and our purchase partner RevenueCat. On iPhone it requires your App Tracking Transparency permission (you can change it at any time in iOS Settings). On Android it is on by default and you can turn it off in Settings → Privacy → Privacy preferences. In the EU/EEA, the UK and Switzerland, Ad measurement (Android) and usage analytics are also on by default; after you have used the app for a while it shows a short choice sheet with both switches on and a “Turn off” button, and you can change either choice at any time in Settings → Privacy → Privacy preferences. Google never receives advertising identifiers or advertising consent from Inspectly. We never send your inspections, VIN, photos, or notes for ad measurement.
  • Our servers run on Cloudflare. Purchases are processed by Apple or Google, with RevenueCat helping validate them. We never receive your full payment-card details.
  • You can delete your data in the app. If you use Inspectly without signing in, Settings → Your data → Delete my data erases the inspections and photos on your phone and everything our servers hold for your phone’s guest account (backups, photo copies, AI analyses, credit wallet) and your customer record at RevenueCat. It also works offline: your phone is cleared at once and our servers are cleared automatically the next time the app is online. If you signed in with Apple or Google, Delete my account does the same for your account.
  • We do not sell personal information or use your inspection content for advertising.

3. Information we handle

Inspection and vehicle information

You may enter a vehicle model, year, configuration, optional VIN, colour and other vehicle details, delivery center and date, inspection location, checklist answers, issue descriptions, notes (including private notes), markings on photos, and photos. We use this information to tailor the checklist, record your observations, and provide the features you request. Reports are generated on your phone and contain the identifying details you include.

Account identifiers and sign-in

When you first use a cloud feature (buying or unlocking an inspection, AI analysis, cloud backup, or signing in), the app creates a random account identifier and a random device credential. The device credential is kept in your phone’s secure storage, and our servers keep only a one-way hash of it. You do not need to give us your name or email address to use Inspectly.

If you choose Sign in with Apple (iPhone) or Sign in with Google (Android) so you can recover your purchases and backups on another phone, we store only that provider’s stable account identifier for this app. We do not request your name or email address from Apple. Google’s sign-in token can contain your name and email address; we use the token only to verify the sign-in and do not store them. We never receive your Apple or Google password.

Purchase and credit information

Purchase records include product identifiers, store transaction references, the environment (for example, test or production), purchase and refund events we receive from RevenueCat, and your inspection credit balance and its history. We use them to grant access, apply refunds correctly, prevent duplicate crediting, and keep accounting records.

Diagnostics and usage

Usage analytics. Unless you turn off “Share usage analytics” (Settings → Privacy or Privacy preferences; on by default, including in the EU/EEA, the UK and Switzerland), the app sends product-usage events to Google Analytics for Firebase and to PostHog, both processed in the United States. Only a fixed list of event names (for example, “inspection started”, “paywall viewed” or “inspection pack selected”) and properties (such as vehicle model, year, screen placement, product or a count) can be sent; notes, photos, location, email and VIN-like text are excluded.

Google Analytics also collects its own app events (such as first open, session start and app update), an app-instance identifier, device model, operating system, app version, locale, and an approximate country or region derived from your IP address. It receives your random Inspectly account identifier as its user ID, so usage across your phones can be counted as one person; it never receives your name, email, VIN, location, notes, or photos. After the store confirms a purchase or a refund and our server has applied it to your inspection balance, our server sends one purchase or refund record (product, price, currency, and store transaction reference) to Google Analytics, linked to your random account identifier and the app-instance identifier, unless you turned off usage analytics. We use Google Analytics only for our own product and sales reporting; it is not linked to Google Ads, all Google advertising consents (ad storage, ad user data and ad personalisation) are always denied, and the app gives Google Analytics no advertising identifier (no IDFA or IDFV on iPhone, no advertising ID or Android ID on Android). PostHog does not determine your location (its GeoIP lookup is turned off). PostHog receives a random analytics identifier (not your account identifier), app version, operating system, device model and locale; its IP capture is turned off, so it does not store your IP address. We do not use analytics data for personalised advertising.

When you turn the setting off, the app stops sending events, resets the Google Analytics data on your phone (a new app-instance identifier is used if you turn it back on), and removes the app-instance identifier from RevenueCat.

Crash and error reports are sent to Sentry so we can keep the app working. They include device and app information, the error and a short trail of recent app activity (for example screens opened and the addresses of network requests), and for a sample of sessions performance timings. Before a report leaves the phone, user details, VIN-like text and precise coordinates are removed, and request addresses are shortened to the server and route: query strings (such as the coordinates sent to the weather service) and identifiers (such as inspection identifiers) are removed; no screenshots, screen recordings or console logs are attached. Sentry is set not to store IP addresses. Crash reporting has no setting to turn it off.

Ad measurement

iPhone. After you have used the app for a while (never on first launch), the app shows Apple’s App Tracking Transparency prompt once. If you allow tracking, the Tenjin SDK sends an install and app-open signal each time the app starts, with your device’s advertising identifier (IDFA) and app identifier (IDFV), Apple’s AdServices attribution token, device and app information (model, operating system, locale, time zone, country, app version) and your IP address; RevenueCat receives the IDFA, IDFV and the Tenjin installation ID and links them to your purchase record, so that purchase revenue can be reported to Tenjin, which reports installs and in-app purchases to the ad network that ran the campaign (for example AppLovin). If you do not allow tracking, or have not answered the prompt yet, the app does not start the Tenjin SDK at all, on any iOS version, so Tenjin receives nothing from your iPhone, and RevenueCat receives none of these identifiers; campaign measurement then uses only Apple’s privacy-preserving SKAdNetwork / AdAttributionKit, in which Apple, not the app, reports an anonymous, delayed signal to the ad network and to Tenjin. You can change the permission in iOS Settings (also linked from Settings → Privacy → Privacy preferences); withdrawing it stops the Tenjin SDK and removes the identifiers from RevenueCat.

Android. Unless you turn off “Ad measurement” (Settings → Privacy → Privacy preferences; on by default, including in the EU/EEA, the UK and Switzerland), the Tenjin SDK sends an install and app-open signal each time the app starts, with your Google advertising ID and its limit-ad-tracking setting, the Google Play install referrer, device and app information and your IP address; RevenueCat receives your advertising ID, IP address and the Tenjin installation ID and links them to your purchase record, for the same reporting as above.

On both platforms we tell Tenjin the data is for measurement only, not ad personalisation, and we withhold the Google Analytics app-instance identifier from Tenjin. Turning Ad measurement off (or withdrawing tracking permission on iPhone) stops Tenjin from sending further data and removes the Tenjin installation ID and the device identifiers from RevenueCat. Identifiers already sent are kept by those providers under their own retention.

App reviewer access

Settings includes an “App reviewer access” form for app store reviewers. If you submit it, our servers record the time, the outcome, and a one-way hash of your connection’s IP address in an access log, including for refused attempts. The email address is recorded only when it matches a reviewer account we created; any other address typed into the form is not stored. Reviewer passwords are stored only as one-way verifiers. Most people never need this form.

Connection data and support

When the app contacts our servers or you visit our website, Cloudflare processes connection information such as IP address, requested address, app or browser information, and timestamps to deliver and secure the service and to troubleshoot problems. The Inspectly web pages do not include advertising pixels or a marketing analytics script. If you contact support, we process your message and anything you attach.

What stays on your phone

Your onboarding answers and app preferences, Face ID or fingerprint lock (handled by your phone’s operating system; we receive only a success or failure result, never biometric data), read-aloud (text-to-speech on your phone), free Essential Checks, original photos, and the reports you generate stay on your phone unless you share them. If you use the app offline, any provisional unlock is recorded on your phone and confirmed with our servers when you reconnect; it creates no other data.

4. Photos, AI, and cloud features

Photos

Original photos are kept in the app’s private storage on your phone. They are not added to your photo library, and they are never uploaded.

For a paid inspection, the app prepares one copy of each photo version: a JPEG of at most 2000 pixels and at most 1 MB, with embedded metadata (including GPS location) removed. The copy is uploaded in the background to our server, which checks its format, size, and checksum before storing it in Cloudflare R2 under your account. Only your account can retrieve it. Uploading a copy does not start AI analysis and does not use a credit. Copies are uploaded for paid inspections whether or not cloud backup is on. When you delete the inspection on your phone, its photo copies are deleted from our servers the next time the app connects, whether or not it was backed up.

Cloud backup

Cloud backup is optional and off by default (Settings → Privacy → Cloud backup). When it is on, the record of each paid inspection is stored in our Cloudflare database so you can restore it on another phone. A backup contains the inspection record you entered, including the VIN, the precise coordinates and place name if you added your location, the delivery center and date, your checklist answers, findings and notes (including private notes), photo captions and markings, and references to the uploaded photo copies. When you sign in to your account on a new phone (or after reinstalling), the app restores these records and downloads the photo copies. Original photos are never backed up, and free Essential Checks are never backed up.

When you delete a backed-up inspection on your phone, its backup content and photo copies are deleted from our servers the next time the app connects. We keep only a minimal deletion marker (the inspection’s identifier and the fact that it was deleted) so that your other phones do not restore it. Turning cloud backup off stops new backups; inspections already backed up stay on our servers until you delete them or delete your account.

AI analysis

AI analysis (the Virtual AI Inspector) runs only with your explicit permission. The first time you finalize a paid inspection with AI analysis, the app explains what is sent and who processes it and asks you to choose “Allow and analyze” or “Not now”. Your choice is recorded on your phone with the date and the version of the explanation. If you choose “Not now”, nothing is sent, the inspection stays editable and you can still create reports. You can withdraw permission at any time in Settings → Privacy → Privacy preferences → AI analysis; we will ask again before the next analysis. If we change what is sent or which providers receive it, we will ask again.

When you finalize a paid inspection with AI analysis, the app sends a single request through our analysis service on Cloudflare to our AI provider. The request contains the vehicle model and configuration, your checklist answers, issue descriptions and notes (including your private notes), the photos of the inspection’s checks and issues (re-encoded copies of at most 1024 pixels on the long edge, without embedded metadata such as GPS location) and one close-up crop around each area you marked. We do not include your VIN or location fields, and the provider does not receive your account identifier. Photos can still show what was in the frame, such as a license plate, the VIN plate, or people, so check your photos before you request an analysis. Our AI providers are OpenAI (primary) and Anthropic (alternate, for example when OpenAI is unavailable).

We send requests to AI providers under their API terms, without asking the provider to store them. Under those terms, data sent through their APIs is not used to train their models by default. Providers may keep requests for up to 30 days under those terms, only to monitor for abuse; we have no zero-data-retention agreement. We do not promise that providers retain nothing.

Photos sent for analysis are held by our analysis service only until the analysis is complete, or for at most 3 days if it cannot be completed, and are then deleted. We store the AI result and the text part of the request with your inspection on our servers and on your phone until you delete the inspection, your data or your account. We also keep operational usage records (such as the model used, token counts, timing, and cost) for 13 months; these use pseudonymised identifiers (keyed one-way hashes) instead of your account or inspection identifier. AI can make mistakes; check its output before relying on it or sharing it. AI is not a vehicle safety assessment or professional diagnosis.

We do not use your inspection photos or content to train AI models, and we do not run a training program.

5. Permissions and your choices

  • Camera and photos: used when you capture or import inspection evidence. Manage permissions in your device settings.
  • Location (optional): used, only while the app is open, to fill in the inspection location and weather. Your phone’s map service (Apple on iPhone, Google on Android) turns coordinates into a place name, and coordinates rounded to about 1 km are sent to the weather service Open-Meteo. A checklist inspection does not need location.
  • Microphone and speech recognition: used only while you dictate into a problem description, after you tap the microphone. Inspectly does not save, keep, or upload audio; only the resulting text is saved with your inspection. Separately, the speech recognition itself is provided by your phone. On iPhone, it runs on the phone when the phone supports on-device recognition for English; otherwise the audio is sent to Apple to be transcribed. On Android 13 and later, it runs on the phone when its on-device English speech model is installed; otherwise, and on older Android versions, your phone’s speech-recognition service processes the audio (usually Google’s, which may process it on Google’s servers). Apple and Google handle that audio under their own privacy terms; Inspectly cannot see, control, or delete it.
  • Face ID / Touch ID / fingerprint (optional app lock): handled by your phone’s operating system. Inspectly receives only a success or failure result.
  • AI analysis: asked once, before your first analysis; withdraw in Settings → Privacy → Privacy preferences.
  • Cloud backup: optional and off by default. It is separate from paid evidence processing: photo copies for a paid inspection are uploaded whether or not backup is on.
  • Share usage analytics: on by default everywhere, including the EU/EEA, the UK and Switzerland, where a short choice sheet also offers “Turn off”; Settings → Privacy or Privacy preferences; turn this off to stop product analytics (Google Analytics and PostHog). This does not affect records needed for purchases, security, or a feature you request.
  • Ad measurement: iPhone: Apple’s tracking permission (iOS Settings, also linked from Privacy preferences). Android: Settings → Privacy → Privacy preferences; on by default, including in the EU/EEA, the UK and Switzerland, where a short choice sheet also offers “Turn off”. See section 3.
  • Tracking (iPhone): declining has no effect on how the app works.
  • Sharing: you decide whether to export or send a report and which recipient or app receives it.

Review a report before sharing: it may include a VIN, inspection location, notes, photos, or other identifying information. Once you send a report, the recipient’s handling of it is outside our control.

6. Why we process information

We use information to provide inspections and reports, authenticate access, keep purchase balances accurate, provide cloud and AI features you choose, understand how the app is used (unless you turn off usage analytics), measure our own advertising (only with Ad measurement on; on iPhone, only with your tracking permission), resolve support requests, improve reliability, prevent abuse, and meet legal obligations.

Where a law requires a legal basis, we rely on providing the service you request, consent for features that require it, legitimate interests in operating and protecting the service where permitted, and compliance with legal obligations. You may withdraw consent for future optional processing; doing so does not affect the lawfulness of earlier processing.

7. Service providers and disclosures

We use providers to run features. We do not sell your inspection content. Our providers are:

  • Cloudflare: website hosting and security, and our backend: Workers (servers), D1 (database), Durable Objects (AI analysis jobs and credit wallets), and R2 (storage for verified photo copies).
  • Apple and Google: app distribution, Sign in with Apple and Sign in with Google, purchases and refunds, the place names for locations you choose, and speech recognition when it does not run on your phone.
  • RevenueCat: purchase validation and purchase status; and, with Ad measurement on (iPhone: with your tracking permission), the identifiers described in section 3 and forwarding of purchase revenue to Tenjin.
  • Tenjin: install attribution and ad measurement, while Ad measurement is on (iPhone: with your tracking permission); Tenjin reports installs and in-app purchases to the ad network that ran the campaign.
  • Google (Google Analytics for Firebase): product analytics and our own sales reporting, unless you turn off usage analytics. Not used for advertising.
  • OpenAI (primary) and Anthropic (alternate): AI analysis when you consent to it.
  • PostHog: product analytics, unless you turn off usage analytics.
  • Sentry: crash and error diagnostics.
  • Open-Meteo: weather, using rounded coordinates, when you use location.
  • Our email provider: delivery and handling of support correspondence.

We may also disclose information if reasonably required to comply with law, protect rights or security, investigate fraud, or complete a business transfer with appropriate protections. We do not sell personal information. While Ad measurement is on (iPhone: with your tracking permission), device identifiers and purchase activity are disclosed to Tenjin and RevenueCat to measure our own advertising, and Tenjin reports installs and purchases to the ad network that ran the campaign; you can turn this off at any time (section 5).

8. Retention and deletion

On your phone: inspections and photos stay until you delete them in the app, clear the app’s storage, or uninstall the app. Exports you save elsewhere are separate copies and must be deleted separately.

On our servers we keep data only as long as it serves its purpose, and delete it automatically after that:

  • Inspection backups and photo copies: until you delete the inspection, your data or your account. When you replace or edit a photo, the copy of the earlier version is deleted 30 days later. Deleting an inspection on your phone deletes its backup content and photo copies from our servers the next time the app connects.
  • Photos prepared for AI analysis: deleted when the analysis is complete, or after at most 3 days if it cannot be completed.
  • AI results and the text part of the request: until you delete the inspection, your data or your account. AI usage records (pseudonymised): 13 months.
  • Your credit balance and its history: until you delete your data or your account.
  • Guest accounts (if you do not sign in): if your phone’s guest account never made a purchase and our servers have not heard from that phone for 24 months, we delete its server data as if you had chosen Delete my data. When you sign in to another account on a phone, the guest account it used before is deleted 30 days later, unless it holds a purchase; your backups that belong to the account are moved to it first.
  • Purchase and refund records: kept for accounting, tax, refunds and fraud prevention for up to 7 years, then deleted. After 90 days we remove from them everything those purposes do not need (for example device or advertising identifiers that RevenueCat included in the purchase notification).
  • Deletion records: 7 years. App reviewer access log: 24 months. Security records such as sign-in nonces and rate-limit counters: until they expire, at most a day.

Turning off cloud backup does not delete what is already backed up. If a deletion on our servers cannot finish at once, we complete it automatically. If we change these periods, we will update this page first. To ask about deleting specific data without deleting your account, contact us.

Logs and diagnostics: server request logs are kept only briefly by Cloudflare, under its retention settings, for security and troubleshooting. Crash reports (Sentry) and usage analytics (Google Analytics and PostHog) are kept by those services under their retention settings for troubleshooting and product improvement. We have not yet set our own periods for these services, and will publish them on this page once they are set.

Delete my data (if you do not sign in; Profile → Settings & privacy → Your data) deletes everything listed below for your phone’s guest account. The app first shows what is deleted and what is kept and asks you to confirm that unused inspection credits will be lost. Your phone is cleared at once, even offline; the server part is completed automatically the next time the app is online.

Account deletion (in the app: Profile → Settings & privacy → Delete my account; or by email) first deletes your customer record at RevenueCat, then deletes your account, your linked Apple or Google sign-in identifiers (for Sign in with Apple, we also revoke the app’s Apple sign-in token), device credentials, inspection backups, verified photo copies, AI analyses and their usage records, and your credit wallet and balance, including unused credits. The app then deletes the inspections and photos on that phone and resets your onboarding answers and your AI analysis and cloud backup choices, turns Ad measurement off, and clears the analytics identifiers on that phone (Google Analytics user ID and app-instance identifier, PostHog identifier, and their link in RevenueCat). If deletion on our servers cannot finish, the app tells you and you can try again; we also complete it automatically.

For accounting, tax, refunds and fraud prevention we keep purchase and transaction records (for up to 7 years, reduced after 90 days to what those purposes need), and records of support actions taken on your account, with your account identifier replaced by a one-way hash. These records are pseudonymised, not anonymised: they can be linked again by someone who holds the original identifier. We also keep a deletion record (a one-way hash of your account identifier and the outcome of each deletion step) for 7 years, credit ledger totals that contain no account identifier, and any entries in the app reviewer access log for 24 months. Our database provider’s point-in-time recovery may hold deleted data for a limited period until it rolls over; we do not use it to restore deleted accounts.

Account deletion does not delete data held by Google Analytics, Tenjin, PostHog, Sentry, or the AI providers under their own retention, Cloudflare’s request logs, copies held by report recipients, or Apple’s or Google’s own purchase records, and it does not request a store refund. See Delete your account and data for instructions, including how to request deletion without the app.

9. Security and international processing

We use encrypted connections, short-lived access tokens, per-account access checks, and restricted storage to protect information. No system can guarantee absolute security. Protect your device and account, and do not email passwords, private keys, or payment-card details.

Our backend runs on Cloudflare’s global network. Usage analytics (Google Analytics and PostHog) are processed in the United States. The AI providers, RevenueCat, Tenjin, and Sentry may process data in the United States. Cloudflare and our other providers may process information in countries other than yours. Where required, we use appropriate contractual or other lawful safeguards for international processing. Contact us for information about safeguards relevant to your request.

10. Your privacy rights

Depending on where you live, you may have rights to access, correct, export, or delete personal information, restrict or object to processing, withdraw consent, or appeal a decision about a privacy request. You may also complain to your local privacy regulator. We will not discriminate against you for exercising an applicable privacy right.

Send requests to support@smartharmonyai.com. We may ask for proportionate information to verify that you control the account, and we respond within applicable legal time limits. An authorized representative may contact us on your behalf where allowed by law. We do not require you to send a government ID or full payment details in an initial request.

11. Children, updates, and contact

Inspectly is intended for adults (18 and over) arranging or carrying out vehicle inspections, not for children. We do not knowingly collect personal information from anyone under 18. Contact us if you believe a child has provided information so we can investigate and take appropriate action.

We may update this policy when the app or our practices change. We will update the date on this page and provide additional notice or request consent where required.

SmartHarmony AI LLC
Inspectly privacy contact: support@smartharmonyai.com