Inspect Canada and Johnni: Privacy Policy

Version: 1.3 First published: April 1, 2026

This version takes effect: September 30, 2026 Last Updated: September 30, 2026

In Spect Building Consultants Inc. (operating as Inspect Canada, “we,” “us,” “our”) respects your privacy. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, how long we keep it, and what rights you have.

This Policy applies to the Inspect Canada app for real estate agents, the separate Johnni app for homeowners (including the demonstration home an inspector can try), and our websites: inspect.ca, johnni.ca, strata.inspect.ca, app.inspect.ca, team.inspect.ca and inspectvault.com, and any other website, product, or service we operate that links to this Policy (collectively, the “Services”).

Johnni is offered in two ways. Some people receive Johnni after an inspection we performed: their inspection report becomes the starting point of their home profile. Others download Johnni on their own and build a home profile themselves, or upload a report from another inspector. Johnni may also be offered to homeowners by an independent home inspector who uses our platform; that inspector is not the operator of Johnni, and Section 7.2 explains exactly what such an inspector can see.

The two apps share our account and service infrastructure. Your account role and permissions determine which records you can access; installing both apps does not give another user access to your home or client records. Features and data collection differ by app and by the features you choose to use.

By using the Services you agree to this Policy. Where required by law, we will also ask for your express consent.

1. Who We Are and How to Reach Us

Data controller:

In Spect Building Consultants Inc. (dba Inspect Canada) 100 Park Royal S Unit 200, West Vancouver, BC V7T 1A2, Canada

Privacy contact: support@inspect.ca

We comply with the Personal Information Protection and Electronic Documents Act (Canada) (“PIPEDA”) and the Personal Information Protection Act (British Columbia) (“PIPA BC”). Where another provincial or territorial law (e.g., Quebec’s Law 25, Alberta’s PIPA) applies to a User in that jurisdiction, we comply with that law to the extent applicable.

2. Information We Collect

We collect only what we need to provide the Services. The categories below describe what we collect, by feature.

2.1 Account & Profile Information

When you create an account or update your profile we collect:

• First and last name

• Email address

• Password, if you choose to set one (stored in salted-hashed form by our authentication provider)

• Phone number (optional)

• City, province, postal code

• User role (homeowner, agent, inspector, helper, brokerage admin)

• Real-estate brokerage, licence/title, bio, website (for agents and inspectors)

• Profile photo or logo (optional)

• Referrer ID (the person or organization that invited you, if any)

You sign in with your email address and a code we send to it, or with a password if you set one. The App does not offer sign-in through Google, Apple, or another provider. An account created through one of those providers in an earlier version keeps the name, email, and identifier that provider gave us.

We keep a record of the date you gave or withdrew permission for AI processing, and the version of the notice you saw.

Filled in from your inspection. If we performed your inspection, your name, and where the inspection agreement records them, your phone number and the year and size of the home, are copied into your profile when your report is attached to your account. We fill only fields that are empty; you can change them.

2.2 Photo Analysis & Defect Detection Data

When you submit a photo for analysis (e.g., siding, electrical, plumbing, mechanical, appliance), we collect:

• The photo itself;

• Optional text caption or description you add;

• The category you choose, or the one our system infers, and the severity it infers;

• Your feedback on the analysis (thumbs up/down);

• Photo metadata, including time of capture.

Location data is optional. We do not access your device’s precise location unless you grant location permission for a feature that needs it (such as suggesting nearby trades or pre-filling a property address). We do not use location data stored inside a photo. A photo taken with the App’s camera is saved without it. A photo you choose from your library is uploaded as it is, and may contain location data your phone stored in it; remove it before uploading if you do not want it kept with the photo. You can revoke location permission at any time in your device’s system settings.

2.3 Repair Price Estimate Data

When you generate a repair price estimate, we collect:

• The defect description used as input

• The estimate range produced

• The property address (where available)

• The trade category

2.4 Trade Directory Interactions

When you search the directory or contact a trade, we collect:

• City or region searched

• Trade category and filters used

• Listings viewed

• If you contact a trade through the App: the contact details you provide (name, email, phone), your message, and the listing contacted

2.5 Strata Review Data

When you use Strata Review, we collect:

• Property address and strata plan number

• Unit number (if provided)

• The strata documents you upload, including bylaws, financial statements, Form B disclosure statements, minutes, engineering reports, depreciation reports, insurance certificates, and any other documents you choose to submit

• Building metadata (year built, number of units, etc.)

• AI-generated summary, classifications, and findings derived from the documents

• Recipient email addresses if you choose to share a report

• Aggregated usage information about the report (e.g., when it was viewed)

Strata documents often contain personal information of third parties (other unit owners, council members, contractors, lawyers, tradespeople, councillors). By uploading them, you confirm that you are authorized to do so and that your upload complies with PIPEDA, PIPA BC, and any other applicable privacy law.

We strongly recommend that you redact or remove sensitive personal information (names, phone numbers, email addresses, signatures, banking details) from documents before uploading, where practical. The Strata Review service does not require that information to produce a useful summary, and minimizing it reduces privacy risk to third parties and to you.

2.6 Home Inspection Booking Data

When you book or quote a home inspection, we collect:

• Client name, email, phone number

• Buyer’s agent and listing agent name, email, phone, brokerage (if applicable)

• Property address, postal code, latitude/longitude, city, province

• Property type, square footage, year built, second suite/coach home flags

• Selected services and add-ons (e.g., mold, radon, asbestos sample counts)

• Preferred inspection date and time, preferred inspector

• Access provider details and notes

• Booking source (App, website, partner referral)

• Payment information (handled by our payment processor; we receive only confirmation tokens, not full card numbers)

When a booking is made, the client’s name, email and phone number are also recorded as a lead in our customer-relationship system (Zoho CRM), which our office uses to manage bookings.

2.7 Virtual Consultation Data

When you book or take part in a Virtual Consultation, we collect:

• Session date, time, and duration

• Property address and the topic you describe

• The video session itself only if you and the consultant agree to record it (we default to not recording)

• Notes the consultant may add

2.8 Inspection Reports

When a home inspection report becomes available to you (because we performed the inspection, or you imported a report via a one-time access code), we store:

• Report content (sections, findings, severity, recommendations)

• Photos taken on-site

• Inspector identity and signature

• Property metadata (address, date, services performed)

You access reports through the App and the InspectVault platform. We are the operator of InspectVault and your reports are stored in our systems.

A report you upload yourself (for example, a report from another inspector) is stored with the findings and home details our system reads from it, and the page images used to show it in the App. It belongs to your account and is deleted with it (Section 9.2).

2.9 Device, Usage, and Diagnostic Data

When you use the Services we automatically collect:

• Device type, model, operating system, OS version

• App version, build number, language, time zone

• IP address. We do not store it in our own databases. The hosting providers that carry our traffic record it in their request logs for a limited time, for security and abuse prevention. It is not used for advertising.

• Crash logs, exception traces, performance metrics

• Feature usage: which screens you visit and which actions you take, with the time. While you are signed in, these events are linked to your account. We use them to see how the App is used and to help you when you contact support. We report on them in aggregate.

• Push notification token (if you allow notifications)

2.10 Johnni chat and voice

When you ask Johnni a question, we process your message, relevant Home Profile or inspection-report context, and the generated response to answer you. Messages and relevant context are sent to our backend and AI providers; they are not necessarily de-identified before processing.

Microphone access begins only after you start a voice feature and grant permission. Depending on the voice mode, a recorded clip is sent through our backend to OpenAI, or live audio is streamed from your device to OpenAI during an active voice session. While a live session is open, the microphone stays on and Johnni listens for your next question; other people’s speech in the room may be picked up and answered. We process the transcript, generated text and spoken response, session identifiers, and usage duration/counts to provide the conversation, enforce limits, and diagnose failures. Use Mute or End to stop the live microphone, or revoke microphone permission in your device settings. A live session ends on its own after 30 minutes. You can continue using typed chat.

We do not intentionally retain raw microphone recordings in the Johnni application database. This does not mean that audio never leaves your device or that providers have zero retention: their processing and limited operational or abuse-monitoring retention are described in Section 5.3.

Where the chat displays our quality-review notice, a copy of your questions and Johnni’s replies, linked to your account and channel, is retained in a restricted quality-review archive for 90 days, with deletion performed by a daily scheduled process. Authorized staff may review it to investigate errors and prepare corrected general guidance. The archive does not include raw audio. Device-local conversation history, temporary live-session context, and older saved conversations have separate retention rules in Section 8.

2.11 Communications

If you contact us by email, in-App message, or through customer support, we collect the contents of those communications and any attachments.

2.12 Reports about AI answers

If you use “Report this answer”, we keep the answer you reported, the question that led to it, the reason you chose, the channel (chat or voice), and your account identifier. Authorized staff review reports to correct errors. Reports are kept while your account exists and are deleted with it.

2.13 What We Don’t Collect

• We do not track you across other apps or websites for advertising purposes.

• We do not access your device’s precise location unless you explicitly grant location permission and the feature requires it (e.g., address autocomplete, inspector distance). Separately, a photo you choose from your library may contain location data your phone stored in it (Section 2.2). We receive that data with the photo and do not use it.

• We do not collect biometric identifiers, your contacts, calendar entries, or HealthKit/Health Connect data. Johnni uses the microphone for the voice interaction you start, including streaming while a live session is active, as described in Section 2.10. It does not passively listen outside that interaction.

• We do not knowingly collect personal information from anyone under 19.

2.14 Home Profile and the home’s record

Johnni keeps two kinds of information about a home.

Your Home Profile is tied to your account. It holds:

• Details taken from your inspection report, such as the home’s systems, their makes and models, and their condition at the inspection;

• Details we infer from the home’s age and type and from similar homes, shown as estimates;

• Details you add or correct, including answers to questions and appliance plates you photograph;

• Your tasks, and your conversations with Johnni (Section 2.10).

The home’s record is tied to the property. It holds the property’s systems and components and their ages, your answers about the home, the service events you record, and photo-check results. A service event or photo check includes the note you wrote and the photos you attached. The home’s record does not hold your name, your contact details, your tasks, or your conversations.

Information about a property can relate to the people who live there even without a name attached, and a note or photo can show a person, a name, or an invoice. We protect the home’s record under this Policy.

How long the home’s record is kept. We keep it while someone holds it in their account. When you delete your account, the home’s record is deleted with it, including its notes and photos, unless you handed the home to a new owner, who then holds the record. A record that nobody holds is deleted 7 years after the last activity on it. “Activity” means something a person did: creating the record, recording a service event, running a photo check, or answering a question about the home. Routine system updates do not count.

When you transfer a home to a new owner, using the handoff code in the App, the new owner receives the whole home’s record: the property details, the systems and their ages, your answers about the home, and every service event and photo check, including the notes and photos attached to them. There is no way to choose parts of it. Your account name and contact fields are not transferred separately, and your tasks, conversations, and account are not transferred. Notes and photos you transfer may contain personal information, such as a name on an invoice or a person in a photo. If there is a note or photo you do not want passed on, ask us to remove it and wait until we confirm it has been removed before you create a handoff code. The code works once and expires after 30 days.

After a transfer, the record belongs to the new owner’s account. We keep a copy of your own tasks and answers, without the record, for your account. If you are the former owner and want personal information in a note or photo you added removed, write to support@inspect.ca. We confirm that the request comes from the account that added it, and we remove that note or photo. We do not delete the new owner’s record, or entries the new owner added, at a former owner’s request.

2.15 Where the information about your home comes from

Your home profile can hold four kinds of information, and it helps to know which is which:

• What you entered: answers to Johnni’s questions, notes, tasks you completed, corrections you made, and photos you chose to send.

• What was read from an inspection report: the findings, and the systems, makes, models, materials, ages and conditions the inspector recorded. This comes from a report we delivered, or from a report you uploaded. Our automated reading of a report can miss or misread details; the report itself is the record.

• What is inferred or estimated: typical ages and lifespans, repair-cost ranges, and suggestions based on the home’s age, type and region and on similar homes. These are estimates produced by our systems and AI providers, shown as such.

• What is shared with the person who invited you, if you chose to share it: see Section 7.2. Nothing in the three groups above is shared with an inviter.

3. How We Use Your Information

We use personal information to:

(a) Provide the Services: generate AI analysis, produce reports, complete bookings, send confirmations, deliver notifications, display inspection reports, run the trade directory, process payments.

(b) Improve and develop the Platform and Services: diagnose bugs, measure performance, design new features, and improve and refine system performance using de-identified and aggregated information (with personal identifiers removed and addresses generalized to neighbourhood or municipal level). We do not use your raw inspection reports, raw strata documents, or raw home photos to train any AI model unless you give us specific written consent.

(c) Send you service messages. We send messages that are needed to provide the Services: booking confirmations, inspection reports, sign-in codes, account and security notices, a request for a review after an inspection we performed, and notices of changes to the Services or to this Policy. You cannot opt out of these while you have an account, because the Services cannot be provided without them.

(c.1) Send you promotional messages, where permitted. We send promotional messages, such as news about features, offers from partners, and content for homeowners, agents, or inspectors, only where Canada’s Anti-Spam Legislation (CASL) allows it: where you have given express consent, or where consent is implied by an existing business relationship with us, such as an inspection you purchased, and only for the period the law allows. Creating an account, accepting our Terms, accepting this Policy, or receiving an inspection report is not, by itself, consent to promotional messages. Every promotional message identifies us and includes a working unsubscribe. See Section 9.3.

(d) Protect the Services and our Users: detect fraud, prevent abuse, enforce our Terms, respond to security incidents, defend legal claims.

(e) Comply with law: respond to legal requests, court orders, regulatory inquiries, tax obligations, and audit requirements.

We will not use personal information for materially different purposes than those disclosed here without obtaining further consent or providing notice as required by law.

4. Consent and Our Authority to Handle Your Information (PIPEDA / BC PIPA)

We collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances, and that we identify at or before the time of collection. We rely on:

• Your express consent, where the information is sensitive or the use is not one you would expect. Examples: the AI permission in the App, uploading strata documents, granting camera, microphone, or location access, sharing your details with the person who invited you, and sending a request to a trade.

• Your implied consent, where the purpose is obvious from what you asked us to do. Example: using your address and email to deliver the inspection report you ordered.

• The inspection you ordered. When you book an inspection, we prepare, store, and deliver your report. Preparing it includes using automated tools, including AI providers, to sort its findings, for example by trade, to estimate repair costs, and to record details of the home’s systems (such as type, make, age, material, and condition). This begins when the report is delivered, before you open the App.

• Circumstances in which the law permits or requires collection, use, or disclosure without consent, such as complying with a court order, investigating a breach of an agreement or of the law, or collecting a debt owed to us.

We do not treat a contract or our business interests as permission to use your information for purposes you were not told about. If we want to use your information for a materially new purpose, we will tell you and, where the law requires it, ask for your consent first.

You may withdraw consent at any time as described in Section 9, subject to legal and contractual restrictions and reasonable notice. We will tell you what withdrawing means for the Services you use.

5. AI Processing, Automated Decisions, and Training Data

Several Services use AI to analyze your inputs:

• Photo analysis runs your photos through image-similarity and large-language-model systems hosted in Google Cloud and through OpenAI APIs. To describe a photo, the system first finds similar photos in a reference set of inspection photos (Section 5.2) and shows a few of them to the AI model as examples alongside yours.

• Appliance Age Finder reads the data plate you photograph with OpenAI, and looks up the make, model and serial number with Homespy, a third-party appliance-age service, to estimate the appliance’s age.

• Strata Review runs your documents through OCR, parsing, and large-language-model systems hosted in Google Cloud Run and through Anthropic and OpenAI APIs.

• Report reading runs an inspection report, whether delivered by us or uploaded by you, through Anthropic to extract its findings and the home’s systems.

• Trade recommendations are produced by matching a finding to a trade category, using keyword rules and AI analysis of the finding.

• Johnni chat and voice use relevant home/report context and messages to provide answers. Voice can use recorded clips or live audio streaming to OpenAI for transcription and spoken responses.

5.1 What we do with your content

We use your photos and documents to provide the Service you asked for, for example, producing your photo-analysis result or your Strata Review report. We retain them for the periods set out in Section 8 so that you can re-access your reports.

5.2 System improvement, reference examples, and training

We do not train or fine-tune an AI model on your content. No model of ours is trained on inspection reports, strata documents, photos or conversations today.

Reference examples. The photo-analysis system compares your photo with a reference set of photos from home inspections and shows the closest matches, with their findings, to the AI model as examples. The reference set is built from photos and findings in inspection reports we prepared. It does not include the photos you upload for analysis, and your uploads are not added to it.

Aggregate improvement. For improving our classifiers and estimates we use de-identified and aggregated information, with personal identifiers removed and addresses generalized to neighbourhood or municipal level. Separately, authorized staff may review identifiable submissions and disclosed conversation-review copies for operational quality assurance, debugging, and support as described in Sections 2.10 and 5.4. That review is not model training. Corrected general guidance prepared from it must omit personal details. We do not use raw inspection reports, raw strata documents, raw home photos, or identifiable conversations to train an AI model without your specific written consent.

We do not sell any of your User Content, identifiable or otherwise, to any third party.

5.3 Third-party AI and cloud providers

When you use AI analysis, document review, chat, or voice, your submitted content and relevant context is transmitted to and processed by third-party cloud and AI providers acting on our behalf. The providers we use are listed in Section 6 and currently include Google Cloud, Firebase, OpenAI, Anthropic and Homespy. We may add or change providers from time to time; the table in Section 6 is kept current.

We use these providers under their commercial API terms, under which content sent through the API is not used to train their general-purpose models. We rely on those terms; we do not control the providers’ systems. Providers may retain content or technical logs for limited service, security, abuse-prevention, or legal purposes under those terms. For example, OpenAI API abuse-monitoring logs may be retained for up to 30 days by default; endpoint-specific rules and legal exceptions can differ. We do not promise zero provider retention. Processing may occur outside Canada (see Section 11).

Your permission in the App. The first time you sign in, the App shows you what is shared with our AI providers and asks you to agree. Until you agree, the App does not offer the features that send what you type, say, photograph or upload to an AI provider.

Our servers also check. For Johnni’s answers, voice, trade-request wording, home profile set-up and photo checks, the servers refuse a request unless the account has a recorded agreement, for every version of our apps that has the permission screen; older versions of the Inspect Canada app, which have no permission screen, are refused only after a withdrawal is recorded. The Age Finder, the older chat in the Inspect Canada app, and Strata Review are refused once a withdrawal is recorded. Reading a report you upload is offered only after you agree; the report-reading service does not check again on its own.

If you choose “Not now”, or later withdraw your permission in Menu, Profile, Privacy choices, the parts of the App that need AI (answers, tasks, tools, report upload and photo checks) are not available. You can still open your inspection report, manage your profile and privacy choices, and delete your account.

A withdrawal is recorded on your account and applies on every device. Your other phones apply it when you next open the App on them; a voice conversation already running on another phone continues until you end it there or it ends on its own after 30 minutes, though it no longer receives answers from your home profile. If your phone is offline when you withdraw, the withdrawal takes effect on that phone at once and reaches your account when the phone is next online; the App tells you when it has not yet reached your account. Work already started when you withdraw, such as a strata review being prepared or a report being read, finishes.

Withdrawing does not delete content already processed. To delete it, use account deletion (Section 9.2) or write to support@inspect.ca.

Processing that happens before you use the App. When we deliver an inspection report, or when you upload one, we use automated tools, including AI providers, to sort the report’s findings, estimate repair costs, and record details of the home’s systems, as described in Section 4. For a report we deliver, this happens when the report is delivered. Later, when you sign in and agree, Johnni uses those recorded details to set up the Home Profile in your account.

5.4 Human review

Submissions and the conversation-review archive described in Section 2.10 may be reviewed by a human Inspect Canada team member for quality assurance, abuse detection, customer-support requests, or to investigate a reported issue. Where a human reviews your submission, the reviewer is bound by confidentiality obligations and accesses only what is necessary for the stated purpose.

5.5 Automated decisions

No Service produces a fully automated decision with legal or similarly significant effect on you. AI output is informational. You decide whether and how to use it.

6. Third-Party Processors

We use the following processors to operate the Services. Each is bound by a contract or terms requiring confidentiality and limited-purpose processing:

InspectVault is our own platform for inspection booking, agreements, and report storage. We operate it; it is not a third party.

We may add or change processors. We will update this list when we do.

7. Sharing Your Information

We do not sell your personal information.

We share information only in the following circumstances:

7.1 With Service Providers

Our processors (Section 6) access information solely to provide services on our behalf.

7.2 With People You Choose

• The inspector or agent who invited you to the App. This is optional. If you were invited, the first screen after you sign in asks whether to share, and nothing is shared with them before you answer. If you choose to share, the person who invited you can see: your name, email address and phone number, your role (homeowner or agent), when you joined, when you last used the App, and which tools you used and when (for example, that you checked a photo or an appliance’s age, and for the Age Finder the make, model and serial number you scanned). They cannot see your inspection report, your home profile, your conversations with Johnni, your photos, or the results of any analysis. You can change your answer at any time in Menu, Profile, Privacy choices; when you turn sharing off, we remove your details from their view. Your choice does not change the branding you see or your access to the App. Separately, our office is told when someone joins through an invitation, so that we can support the inspector or agent.

• An inspector you book: your contact and property details necessary to perform the inspection.

• A trade you ask us to contact: when you send a request for a quote, the trade receives what the request screen shows you: the request text (which you can edit), the finding it concerns, up to four photos you attach, your email address, and, if you add them, your phone number and a time to call. The trade also receives your city and, where your home profile has them, the home’s type, year built and the make and model of the system concerned. Your street address is not sent. When you tap a phone number or a website, your device places the call or opens the site; we do not send your profile to the trade. Trades listed in the directory are independent third parties, not employees or agents of Inspect Canada (see Section 6.3 of our Terms). What a trade does with your information is governed by its own privacy practices, not by this Policy.

• A partner offer (Savings): opening an offer takes you to the partner’s website. We send the partner nothing about you.

• Recipients of a shared report (Strata Review, inspection report, repair estimate): the report or estimate contents, to the address you enter. A repair estimate you email is also copied to our support mailbox.

7.3 With Strata-Related Parties

If your Strata Review report is generated for a transaction (e.g., your buyer’s agent ordered it), we may share the report with that agent and their client. We share strata documents only with parties you authorize.

7.4 For Business Transitions

If we are acquired, merged, or reorganized, your information may be transferred to the other party as part of that transaction, as the law permits. Before any information is disclosed for a proposed transaction, the other party must agree to use it only for the transaction and to protect it. After a transaction, your information may be used only for the purposes for which it was collected, under this Policy or one that protects you at least as well. A new owner would need your consent for new purposes, including new marketing.

7.5 For Legal Reasons

We may disclose personal information when we reasonably believe disclosure is required to comply with a law, court order, subpoena, or regulatory request; to protect the safety of any person; to investigate fraud or security incidents; or to enforce our Terms.

7.6 De-Identified and Aggregate Data

We may share de-identified or aggregated information (which cannot reasonably be used to identify any individual) for research, analytics, marketing, and industry reporting. For example, we may publish statistics about common defect types or strata risk patterns by region. We will not attempt to re-identify de-identified data and we will require any recipient to commit not to re-identify it.

8. How Long We Keep Information

We retain personal information only as long as needed for the purposes for which it was collected, plus any period required by law. The following table summarizes our default retention periods. We may retain longer if needed to comply with law, defend legal claims, or detect and prevent fraud.

When data falls out of retention, we delete it from production systems. A copy in a backup is erased when that backup reaches the end of its retention period. We keep a record of each account deletion (the account identifier and date, no personal details) so that if we ever restore from a backup, accounts deleted since that backup are deleted again before the restored data is used.

9. Your Rights

Under PIPEDA, PIPA BC, and other applicable privacy laws you have the right to:

• Access: request a copy of the personal information we hold about you;

• Correct: ask us to correct inaccurate or incomplete information;

• Delete: request deletion of your account and information, subject to the retention exceptions in Section 8 and Section 10;

• Withdraw consent: opt out of marketing, push notifications, or specific processing activities, subject to legal and contractual restrictions;

• Port: request your information in a structured, commonly used format where technically feasible;

• Complain: escalate to a privacy regulator if you believe we have not complied with our obligations.

9.1 How to Exercise Your Rights

In-App: Open the App and go to Menu → Profile to update your profile, manage privacy choices, and delete your account. Notifications are managed in your phone’s settings.

By email: Send a written request to support@inspect.ca with the subject “Privacy Request” and include enough information for us to verify your identity (name, email associated with the account, and the nature of your request).

Response timing: We acknowledge requests within 10 business days and provide a substantive response within 30 calendar days, except where the law permits an extension.

9.2 Account Deletion Specifically

You can delete your account in two ways:

• In-App: open the App and go to Menu → Profile → Delete My Account. We will ask you to confirm.

• By email: write to support@inspect.ca with the subject “Delete My Account” from the email address associated with your account.

What deletion removes. When you confirm in the App, the following is deleted at once from our production systems, before your sign-in is removed; a step that cannot complete is recorded and sent to our support team, who finish it by hand within 30 days:

• Your profile (name, email, phone, brokerage, role, avatar) and your sign-in;

• Photos you sent for analysis and the results, including the copies kept by the photo-analysis service, and any copy of an appliance plate you scanned that was kept as a reference example;

• Inspection reports you uploaded yourself, with the findings read from them and their page images, unless you shared one with someone who still holds it;

• Your Home Profile and the home’s record, with its notes and photos, unless you handed the home to a new owner (Section 2.14);

• Your conversations with Johnni, the quality-review copies, records of voice sessions, and reports you made about AI answers;

• Strata documents you uploaded, and the resulting Strata Review reports: they are marked deleted at once, so they can no longer be opened or shared, and a review still being prepared is cancelled; they are erased in our periodic clean-up (Section 8);

• Your details from the view of the person who invited you, and the invitation records that link you to them;

• Notification registrations and in-App messages.

What we cannot delete this way: records held by the trades, partners or people you chose to share with (Section 7.2), and the items below.

What may be retained, and why:

• Home inspection reports we delivered, the signed inspection agreement, and booking records: for 7 years. We keep these to meet licensing and tax record-keeping requirements, to honour the Inspection Agreement, and to respond to a question or claim about an inspection. You can ask for a copy at any time by writing to support@inspect.ca, including after your account is deleted;

• Payment and invoice records: for 7 years, for tax record-keeping;

• Booking leads in our customer-relationship system, for the same period as the booking;

• A home’s record you handed to a new owner (Section 2.14), which that owner now holds;

• Records of the analyses the photo service ran (times, categories, which reference examples were shown), kept for reliability review;

• De-identified and aggregated analytical data: indefinitely, with personal identifiers removed;

• System backups: until each backup reaches the end of its retention period (Section 8).

Paid plans. Deleting your account cancels a paid plan so that it does not renew. Before you confirm the deletion, the App tells you this. Time already paid for is not refunded unless the policy for that plan says so.

Inactive accounts. If you do not sign in for 24 months, we may treat your account as inactive and, on notice to your last-known email, delete the account in accordance with this Section.

9.3 Promotional Messages

You can stop promotional messages at any time. Every promotional email has an unsubscribe link, and most mail apps show their own unsubscribe button. For messages from the App and our website, either one takes effect at once and stops all of our promotional email to that address. Messages about your inspection from InspectVault, such as the offer to download Johnni after an inspection, have their own unsubscribe link, which takes effect at once for those messages. You can also write to support@inspect.ca; we act on a written request as soon as we can and within 10 business days, across all of our systems. We will continue to send the service messages described in Section 3(c).

10. Children

The Services are not intended for, and we do not knowingly collect personal information from, anyone under 19 years of age (the age of majority in British Columbia). If you believe a person under 19 has provided us with personal information, please contact support@inspect.ca and we will delete the account.

11. International Transfers

Several of our processors (Section 6) operate outside Canada, including in the United States. When your personal information is processed outside Canada, it is subject to the laws of the country where it is processed, including legal requirements to disclose information to that country’s government, courts, or law-enforcement authorities. We use contractual and technical safeguards to protect information during international transfer.

By using the Services, you consent to this cross-border transfer.

12. Security

We implement administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, alteration, and destruction, including:

• TLS encryption in transit;

• At-rest encryption for files in Google Cloud Storage and Firebase;

• Bearer-token and HMAC-signed access for sensitive APIs;

• Role-based access controls and the principle of least privilege for staff;

• Logging and monitoring of access to our systems.

No system is completely secure. We cannot guarantee that information will never be accessed or disclosed in violation of this Policy. Your home profile is available only through your signed-in account and is never published, but it is not kept only on your device: it is stored in our systems and, when you use AI features, sent to the providers in Section 6.

13. Data Breach Notification

If a breach of security safeguards creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada (and, where applicable, the Office of the Information and Privacy Commissioner for BC) as required by PIPEDA and PIPA BC. We will also keep records of all breaches as required by law.

14. Cookies, Analytics, and Tracking Technologies

14.1 Web cookies

On our websites we use first-party cookies and similar technologies for authentication, security, and fraud prevention.

Our public website, inspect.ca, also loads tools from other companies through Google Tag Manager:

• Google Analytics, to understand which pages are visited;

• Google Ads, including DoubleClick, to measure our advertising and to show our ads to people who have visited the site;

• Meta (Facebook) Pixel, for the same purposes on Meta’s services.

These tools set cookies and receive information about your visit, such as the pages you view, your browser and device, and your IP address. Google and Meta may combine it with other information they hold about you. They load when the page loads. You can block them with your browser’s settings or a content blocker, and you can opt out of personalized ads in your Google and Meta account settings. inspect.ca also loads Google Maps for address lookup, and embeds videos from YouTube in privacy-enhanced mode, which sets no cookies until you play a video.

johnni.ca sets no cookies and loads no analytics, advertising or tracking tools. Its only form, for inspectors who want to offer Johnni, opens your own email program with the details you typed; nothing is sent to us until you send that email.

The websites you sign in to, including inspectvault.com, app.inspect.ca, strata.inspect.ca and team.inspect.ca, do not load advertising or tracking tools.

Forms on inspect.ca (contact, property insights, booking and the booking help chat) send what you type to our office mailbox or to InspectVault, where bookings are handled. The property-insights form asks separately whether we may follow up; ticking that box is the only consent to promotional contact it collects.

14.2 In-App storage

In the App, equivalent functionality is provided by device-local storage (MMKV, the iOS Keychain, and Android SharedPreferences) rather than cookies. This storage holds your session token, your role, your cached profile, your AI permission answer, and your preferences. It does not transmit anything to third parties.

14.3 Analytics, crash reporting, and SDKs

Both mobile apps use Firebase Crashlytics to diagnose crashes and application errors. Reports can include stack traces, device/OS/app information, installation identifiers, diagnostic logs, and the signed-in account’s user ID, so diagnostics may be linked to your account. Firebase normally retains Crashlytics crash information and associated identifiers for 90 days before starting removal from live and backup systems. Our backend services may use Sentry for server error monitoring. These tools are used for reliability and support, not cross-company advertising tracking.

Firebase Cloud Messaging also processes installation/push identifiers and delivery diagnostics to provide notifications. We do not use these disclosures to imply that every SDK is anonymous or that no data leaves the device. Material changes to collection or purpose will be reflected in this Policy and, where required, a consent notice.

14.4 Cross-app tracking

The mobile apps do not track you across other apps or websites for advertising, and do not contain advertising tools. On iOS, we do not request App Tracking Transparency permission. Our public website uses the advertising tools described in Section 14.1.

15. Changes to This Policy

We may update this Policy from time to time. We will tell you about material changes through the App, by email, or by notice on our websites at least 14 days before they take effect. Where a change introduces a new purpose for which the law requires consent, we will ask for your consent; continuing to use the Services is not consent to a new purpose.

16. Contact and Complaints

Privacy questions, requests, or complaints:

In Spect Building Consultants Inc. (dba Inspect Canada) Attn: Privacy Officer 100 Park Royal S Unit 200 West Vancouver, BC V7T 1A2 Canada

Email: support@inspect.ca

If you are not satisfied with our response, you may contact a privacy regulator:

• Office of the Privacy Commissioner of Canada: priv.gc.ca, 1-800-282-1376

• Office of the Information and Privacy Commissioner for British Columbia: oipc.bc.ca, 1-800-663-7867

• For Users elsewhere in Canada, the privacy regulator of your province or territory.