SporePilot Privacy Policy
Effective date: October 1, 2026
About this policy
SporePilot does not sell your information, does not show ads, and does not use tracking or analytics tools. This policy explains what information SporePilot collects, why, who helps us process it, and the choices you have.
SporePilot is operated by Chris Adams, an individual based in California ("SporePilot," "we," "us"). This policy covers the SporePilot web app at app.sporepilot.com, the SporePilot iPhone app, and the website at sporepilot.com (together, the "Service").
SporePilot is software for mold and indoor air quality inspectors ("you"). Inspectors use it to record inspections and create reports for their own clients. Questions about this policy go to support@sporepilot.com.
Information we collect
We collect what you enter into SporePilot, a small amount of technical information needed to run and protect the Service, and limited billing details from our payment processor.
Information you provide
- Account details: your name, email address and password. Passwords are stored only in a scrambled (hashed) form; we never see or store them in readable form.
- Company details and branding: your business name, phone, address, website, logo, report header and footer artwork, report text defaults and your saved comment library.
- Inspection information: what you enter for each inspection, which can include your client's name, phone number, email address and property address, inspection dates and times, notes, findings, sample details, conclusions and moisture readings.
- Photos and markups: inspection photos and the marks you draw on them. Before a photo is uploaded, the app resizes it and removes its location (GPS) data.
- Lab reports: laboratory PDF files you attach.
- Messages to us: anything you send to support.
Information collected automatically
- Technical information: your IP address, device and browser type, and the date and time of requests. We use this for security, abuse prevention and troubleshooting.
- Notification token: if you allow notifications in the iPhone app, Apple gives the app a device token so we can send you notifications.
- Report link views: when someone opens a report link you shared, we record that it was opened and how many times, so we can show you and notify you.
Information from others
- Payments: Stripe processes subscription payments. We receive your subscription status, plan, renewal date and a Stripe customer reference. We do not receive or store your full card number.
- Address and weather lookups: when you use automatic weather, we receive the matched address, county and map coordinates from the US Census Bureau, and weather conditions from the National Weather Service.
How we use information
We use information only to provide, secure and improve the Service and to communicate with you. Specifically, we use it to:
- Store your inspections and build your reports.
- Write draft photo descriptions with AI. When you upload or re-analyze a photo, the photo is sent to an AI model hosted by Cloudflare, which suggests a description for you to review and edit. We do not use your photos or reports to train AI models.
- Fill in weather and county for an inspection, when you use that feature.
- Send account emails (sign-up confirmation, password resets, account deletion notices), and emails you choose to send, such as a report link to your client.
- Send notifications you have turned on, such as "Your client opened the report" and inspection reminders.
- Provide a private calendar link so your scheduled inspections appear in your calendar app.
- Manage your subscription, free trial and promo codes.
- Keep the Service secure: prevent abuse, limit repeated sign-in attempts and investigate problems.
- Answer your support requests and comply with the law.
We do not sell your information or your clients' information. We do not "share" it for cross-context behavioral advertising, show ads, or build advertising profiles.
Service providers and sharing
We share information only with the service providers below, and only what each needs to do its job for us.
| Provider | What it does for SporePilot | Information involved |
|---|---|---|
| Cloudflare | Hosts the Service, stores data and files, delivers the website and runs the AI that drafts photo descriptions | Everything stored in the Service, photos sent for analysis, technical information |
| Stripe | Processes subscription payments | Your name, email, payment card details (entered directly with Stripe), billing history |
| Resend | Sends emails | Recipient email addresses and email content |
| Apple | Delivers iPhone notifications | Notification token and notification text |
| US Census Bureau Geocoder | Matches an address to a county and map location | The property address |
| National Weather Service | Provides current weather | Approximate map coordinates of the property |
| Google Fonts and jsDelivr | Deliver the app's fonts and the PDF viewer | Your IP address and browser information, when these load |
We may also disclose information:
- When you share a report. Anyone who has a report link you create can view that report until the link expires or you turn it off.
- To follow the law, for example to respond to a valid court order, or to protect the rights, safety or property of our users or others.
- In a business transfer, if SporePilot is sold or merged. The new owner would have to protect your information as this policy describes.
- With your permission.
Your clients' information
Inspectors decide what client information goes into SporePilot and are responsible for it; SporePilot stores and processes it only to provide the Service to that inspector.
If you are an inspector's client and want to see, correct or delete your information, please contact the inspector who performed your inspection. You may also email support@sporepilot.com, and we will forward your request to that inspector and help them respond.
Inspectors are responsible for having their clients' permission to record their information and photos, and for following the privacy laws that apply to their business.
Cookies and storage on your device
SporePilot uses one essential cookie to keep you signed in on the website, and no advertising or analytics cookies.
- Sign-in: the website uses a sign-in cookie. The iPhone app keeps a sign-in token in the app's private storage instead.
- Offline use: so you can work without a signal, the app stores copies of recent inspections, photos, your comment library and any changes waiting to upload on your device.
- Preferences: small settings, such as dismissed tips, are saved on your device.
Signing out removes the inspection data, photos and sign-in information stored on that device.
How long we keep information
We keep your information while your account is open, and permanently erase deleted inspections and accounts after 30 days.
- Deleted inspections move to "Recently deleted" for 30 days, where you can restore them. After 30 days they are permanently erased, with their photos and lab reports. You can also erase one immediately with "Delete forever."
- Deleted accounts are kept for 30 days so you can restore them by signing in. After 30 days, the account and all of its inspections, photos, reports, branding and settings are permanently erased. You can delete your account in the app under Account.
- Report links stop working when they expire, when you turn them off, or when the inspection or account is deleted.
- Backups of our database may keep copies of erased information for up to 30 more days before they are overwritten.
- Security records, such as sign-in attempt counts, are kept only briefly.
- Payment records are kept by Stripe as its own policies and the law require, for example for tax purposes.
Security
We protect your information with encryption in transit, scrambled password storage and strict access controls, though no online service can guarantee perfect security.
- All connections to SporePilot use encryption (HTTPS).
- Passwords are stored only in scrambled (hashed) form.
- Each account can see only its own inspections, photos and files. Photo and file links inside the app expire after a short time.
- Repeated sign-in attempts are limited to protect against password guessing.
- Uploaded files are checked to confirm they are real photos or PDFs.
If we learn of a security incident that affects your personal information, we will notify you as the law requires. Please use a strong password and tell us right away at support@sporepilot.com if you think your account has been misused.
Your rights and choices
You can see, change and delete your information in the app at any time, and you can email us for anything you can't do there.
In the app
- Edit your account, company details and inspections.
- Delete individual inspections or your whole account (Account page).
- Turn notifications on or off (Settings), or in your iPhone's Settings.
- Turn off a report link or reset your calendar link at any time.
California residents
If you live in California, the California Consumer Privacy Act, as amended, gives you the right to:
- Know what personal information we collect, use and disclose, and get a copy of it.
- Delete personal information we hold about you.
- Correct inaccurate personal information.
- Opt out of the sale or sharing of personal information. We do not sell or share personal information, as those terms are defined in that law.
- Limit the use of sensitive personal information. We use sensitive information, such as your account password, only to provide the Service.
- Not be discriminated against for using these rights.
California's "Shine the Light" law lets California residents ask about disclosures to third parties for their direct marketing. We make no such disclosures.
How to make a request
Email support@sporepilot.com from the email address on your account, or tell us how to reach you. We will confirm your identity before acting and respond within 45 days, as the law allows. You may use an authorized agent; we may ask for proof of their authority.
Children, location, changes and contact
- Children: SporePilot is a business tool for adults and is not meant for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
- Location: SporePilot is offered in the United States, and your information is stored and processed in the United States and other countries where our providers operate.
- Changes: if we change this policy, we will post the new version with a new effective date. For significant changes, we will also notify you by email or in the app before they take effect.
- Contact: Chris Adams, SporePilot, California, support@sporepilot.com.