Privacy Policy
Last updated: 7 July 2025
YourSurveyReport ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights in relation to it.
1. Data Controller
YourSurveyReport is the data controller for personal data processed through this Service. Contact: apps@purplespiral.net.
2. Information We Collect
Surveyor accounts:
- Email address and password (used for authentication via Supabase Auth).
- Company name, logo, brand colours, professional role, address, phone number, and NIE/registration number — provided voluntarily for inclusion in reports.
- Subscription status and purchase history, managed by RevenueCat and the relevant app store.
Survey data:
- Property addresses and client details entered by the surveyor.
- Photos, voice recordings, and typed notes captured during a survey session.
- Transcribed observation text generated via on-device or cloud speech-to-text.
Report viewers (clients):
- IP address and user-agent string, recorded when a report link is accessed, for audit and security purposes.
- We do not require clients to create an account or provide personal details to view a report.
3. How We Use Your Information
- To provide, operate, and maintain the Service.
- To generate and deliver property survey reports to the intended client.
- To process subscription billing via RevenueCat and the app stores.
- To detect and prevent fraud or abuse.
- To communicate service updates or respond to support requests.
4. Legal Basis for Processing (GDPR)
Where the General Data Protection Regulation (EU) 2016/679 applies, we process personal data under the following legal bases:
- Contract performance — to provide the subscription service you have purchased.
- Legitimate interests — for security logging (report access records) and service improvement.
- Consent — for optional data such as profile photos or voice recordings, which you provide voluntarily.
5. Data Storage and Security
All data is stored on Supabase infrastructure hosted in the EU (eu-west-1). Data is encrypted in transit (TLS) and at rest. Access to survey data is controlled by Row-Level Security policies that restrict each surveyor to their own records only.
Report access requires both a report ID and a unique access code. These are generated at share time and cannot be guessed.
6. Data Sharing
We do not sell your personal data. We share data only with the following third-party processors, under appropriate data processing agreements:
- Supabase — database and file storage (EU-hosted).
- RevenueCat — subscription and entitlement management.
- Apple / Google — in-app purchase processing.
7. Data Retention
Survey data and associated media are retained for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us. Report access logs are retained for up to 12 months for security purposes.
8. Your Rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your data ("right to be forgotten").
- Object to or restrict processing of your data.
- Data portability — receive your data in a machine-readable format.
- Lodge a complaint with a supervisory authority (e.g. the Spanish AEPD).
To exercise any of these rights, contact us at apps@purplespiral.net.
9. Cookies
The client portal does not use tracking cookies. The surveyor mobile application uses secure local storage (not browser cookies) to persist your authentication session.
10. Children's Privacy
The Service is not directed at children under 16. We do not knowingly collect personal data from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of the Service after changes constitutes acceptance.
12. Contact
For privacy-related questions or to exercise your rights, contact us at apps@purplespiral.net.