Rinnovare Inspection has no accounts, no analytics and no advertising. Everything you record is stored on your device and, if you use iCloud, in your own iCloud account so your other devices have it too. When you send a report or a message to a teammate, it is sealed on your device so only their device can open it, and our relay passes it along without being able to read it.
Nobody at Rinnovare Realty can see your inspections, photos, reports or messages. They are stored on your device and in your own private iCloud storage, which only your Apple Account can open. If you use Team, the app sends sealed files through our relay, a mailbox that holds each file until your teammate's device collects it and then deletes it. To deliver them, the relay keeps a few technical details, listed below under “Team delivery”. We do not sell or share them. We use them only to deliver your files.
The rest of this page explains where your information lives and what each permission is used for.
Rinnovare Inspection produces a general property-condition record — a dated, photo-documented account of what the person using it observed. A licensed home inspection is a separate service.
The app does not evaluate building-code compliance, structural integrity, or the performance of electrical, plumbing, HVAC, or other building systems. It does not produce findings of cause, fault, or liability. Where a licensed home inspection or an engineering assessment is required — by law, by contract, or by a lender — this record is not a substitute for one.
A report records observations and photographs. It does not certify the condition of a property.
Inspection records and the photos you capture are stored inside the app's own storage area on your device. On iPhone and iPad this is within the app's sandbox and is not visible to other apps. On Mac it lives in the app's application support folder. This data is removed if you delete the app.
If your iPhone, iPad or Mac is signed in to iCloud, Rinnovare Inspection keeps your inspections, photos, work orders, messages and settings in step across the devices that use your Apple Account. They are stored in your own private iCloud database, which Apple keeps for you; Rinnovare cannot open it, and nothing from it comes to us. Your encryption keys are not synced: each of your devices keeps its own, and your teammates see it as one more device of yours, with its own safety number. Records you delete are deleted from your other devices too. To stop syncing on iPhone or iPad, open Settings › your name › iCloud › Saved to iCloud and turn off Rinnovare Inspection. On a Mac, go to System Settings, click your name at the top of the sidebar, then click iCloud, and turn off Rinnovare Inspection in the list of apps that use iCloud. Without iCloud, everything still works on the one device.
When you export a report, the PDF is written only to the location you select. The app remembers the folder you last chose so it can offer it again, but it does not save copies anywhere else and does not upload the file.
You control who receives an exported report, so it's worth knowing what's in one:
These are recorded so the report can stand up as evidence. Once you send a report to someone, that information goes with it.
When you send a report, a work order, a message or a read receipt to a teammate, the app seals it on your device so only your teammate's device can open it, and hands it to the Rinnovare relay, a small service we run on Google Cloud (Firebase) in the United States. The relay works like a post-office box: it holds the sealed file until your teammate's device collects it, then deletes it. A file nobody collects is deleted after 30 days. The relay cannot open the files and never sees report content, photos, messages, addresses or signatures.
To deliver sealed files, the relay keeps:
The notification Apple delivers says only “Something new from your team.” Your device then collects the sealed file and writes its own notice, such as who sent it. Our hosting provider also keeps standard request logs, which include the network (IP) address a request came from, and the relay's own log lines note the mailbox number of each request and delivery. Both are kept for up to 30 days, for security and troubleshooting, and used for nothing else.
The app contacts the relay only once you use Team. If you never invite or add a teammate, it does not connect to it.
Team delivery works over Wi-Fi or your cellular data. Sending and receiving team files uses your data plan: messages and read receipts are small, but a report with many photos can be several megabytes. To use Wi-Fi only, turn off cellular data for Rinnovare Inspection in Settings › Cellular. The app then shows “Waiting for Wi-Fi” and sends when you are back on Wi-Fi.
To send to someone who is not on your team, choose Someone else…. The app prepares a PDF, or a PDF and a Rinnovare file (.rinspect) marked not encrypted, and opens the share sheet. It travels only by the method you choose, such as Mail, Messages or AirDrop; Rinnovare never receives it. A Rinnovare file contains the same information as the PDF, so the person can open it in their own copy of the app.
Messages you write on an inspection or a work order are stored with that record on your device and are printed in the report's PDF unless you switch off “Include messages”. A message to a teammate is sealed and delivered through the relay, like a report. A read receipt is sent only if you tap Send receipt. Messages cannot be edited or deleted once written, because they are part of the record.
On first launch the app makes two pairs of keys for your device, one to encrypt and one to sign. The private keys stay in your device's Keychain; they are never exported, never included in a backup of the app's data, and never sent anywhere. When you send a Rinnovare file to a teammate whose Team card you have, the file is encrypted so only their device can open it, and signed so they can see it came from yours. A Team card holds your name, a device stamp and your public keys. It travels with the files you send, in the invite links you share (in the part of the link after “#”, which is not sent to our website), and can be shown as a QR code. There is no recovery service, so a lost key cannot be recovered: a new device makes new keys and your teammates see the change. A PDF is never encrypted and can be read by anyone who has it. On iPhone and iPad, the app's records are stored with complete file protection, unreadable while the device is locked.
Your team list is stored in the app on your device and is never uploaded; the relay has no teams, contact lists or accounts. On iPhone and iPad you can pick a recipient from your contacts; the app keeps only that person's name, as the recipient of that send. Nothing else is read from your contacts.
Purchases and subscriptions are handled by Apple, not by us. When you subscribe to Rinnovare Inspection Pro, Apple processes the payment and tells the app only whether your subscription is active. Apple keeps your payment details and your Apple Account; the app learns only whether your subscription is active. Apple provides us with aggregate sales figures that do not identify individual customers. You can manage or cancel a subscription at any time in your Apple Account settings.
Separately, Apple's operating systems include an optional crash and analytics reporting feature that you control in your device settings. That system belongs to Apple, is off unless you turn it on, and is not something the app requests, configures, or receives data from.
This is a professional tool for property inspections. It is not directed at children.
There is no account to close. Files waiting for you on the relay are deleted when your device collects them, or after 30 days. Your device's mailbox record holds no report content; to ask us to delete it, follow the steps under Delete your data. You can revoke any permission at any time in your device settings, delete individual inspections and photos inside the app, and remove all app data by deleting the app.
Rinnovare Inspection has no accounts. Almost everything lives only on your devices and in your own private iCloud storage, so most of it is yours to delete directly. The only things we hold are the relay's technical details for Team delivery.
To ask us to delete what the relay holds for you:
Deleted on request: your device's mailbox record on the relay (its public signing key, its push token, and whether it is an iPhone, iPad or Mac) and any sealed files still waiting for you, including the label on the outside of each one (the sender's name as set in their app, and their device type and system version).
Deleted automatically, without a request: each sealed file and its label as soon as the receiving device collects it; any file nobody collects, 30 days after it arrived.
Kept: nothing on the relay once your record is deleted. Our hosting provider (Google Cloud) keeps standard request logs, which include the network (IP) address of each request, for up to 30 days, for security and troubleshooting.
On your devices and in your iCloud: your reports, photos, messages, team list and team keys are stored only on your devices and in your own private iCloud storage. We cannot reach them. Delete individual items in the app, or remove everything by deleting the app and, if you use iCloud, its data in Settings › your name › iCloud › Manage Account Storage.
Subscriptions: Rinnovare Inspection Pro is billed by Apple. Deleting your data does not cancel a subscription; manage or cancel it in Settings › your name › Subscriptions.
If this policy changes, the updated version will be posted here with a new effective date. Material changes will also be noted in the app's release notes.