SayScope is used to record what is wrong with a property. That means it handles photographs of people’s homes, recordings of an inspector’s voice, and the address of the property being visited. This page says plainly what happens to all of it.
Who holds this data
SayScope is provided by PlanaJob Ltd, a company registered in England and Wales, number 16872267, at Office 1782, 60 Tottenham Court Road, Fitzrovia, London W1T 2EW. That company is the data controller. Write to privacy@sayscope.com.
What is collected
Photographs. Taken by the inspector during a walkthrough, along with anything they draw on them to point out a defect.
Voice recordings. The camera screen holds the microphone open for the length of the walkthrough, and listens for a few seconds before the record button is pressed so the first word of a voice note is never clipped. What is kept is that short run-up plus what the inspector says while holding the button, or the sound on a clip they film. Everything else the microphone hears is dropped on the device every few seconds and never leaves the phone. Leave the camera screen and the microphone is released.
Property address. Typed by the inspector at the start of the walkthrough, plus a ZIP code and client name if they add them.
Inspector name. Entered by the inspector, or pre-filled from their sign-in account when the field is empty, so the report can say who signed it off.
Sign-in account. If you sign in with Apple or Google, we receive the provider’s account identifier and, when supplied, your email address and display name. Apple may supply a private relay email address. We also keep your SayScope account identifier, which provider you used, account creation and last sign-in dates, and the link between your account and your devices. We do not receive your Apple or Google password.
A device identifier. A random value generated on the device. It links a walkthrough to the phone that captured it. It is not an advertising identifier and it is not shared with anyone.
Location, on a stamped walkthrough only. A walkthrough started as Stamped pictures asks the phone where it is and burns the time and the coordinates onto every photograph, because that is what makes the picture evidence. No other kind of walkthrough asks for location, and the address on every report is the one the inspector typed.
Diagnostics. The app reports what happened to it, such as a camera that would not start or a clip that failed to upload, against the device identifier above, so faults on real phones can be found and fixed. No page views, no behaviour, no profile.
There is no tracking, no advertising and no profiling of anyone.
Why we are allowed to hold it
Your account, captures, reports and the files behind them. To provide the sign-in, capture and reporting services you choose to use. That is the contract between us. Account details let us identify you when you sign in, connect your devices and saved walkthroughs, and apply your report allowance across those devices. A supplied display name can pre-fill the name used to sign a report.
Diagnostics. Because we have a legitimate interest in finding faults on real phones, and they carry no behaviour and build no profile.
Location, on a stamped walkthrough. Because you were asked and you said yes. Turn that walkthrough type off and we stop asking.
Where it goes
Captures are held on the device first, so a walkthrough works with no signal. When there is a connection they are sent to our servers, and these companies process parts of it on our behalf:
Supabase. Stores the photographs, recordings, reports and sign-in account details, including the links to your devices. Currently hosted in the United States.
AssemblyAI. Receives a voice recording or a clip in order to transcribe it into text.
OpenAI. Receives the same recording only when AssemblyAI cannot transcribe it, as a fallback.
Anthropic. Receives a photograph and the transcript in order to draft the line items a human then checks.
Each of these receives only what it needs to do that one job. None of them are permitted to use it to train their own models under the terms we hold with them.
Supabase stores photographs, recordings, reports and account details on servers in the United States, and the transcription and drafting providers named above receive what they need where they operate. Those transfers are made under the European Commission’s standard contractual clauses, together with the UK International Data Transfer Addendum where the data started in the United Kingdom.
If you choose to sign in, Apple or Google handles that sign-in and supplies proof of your identity to SayScope. The app keeps a session credential in the phone’s secure storage so you can stay signed in. Signing out removes that credential from this phone; it does not delete your account or your walkthroughs.
Who can see a report
A report is private to the organization that captured it, except for one case: the inspector can generate a share link to send to a landlord or property manager. Anyone holding that link can read that one report without signing in, because that is what makes it useful to send.
The link is a long random value that cannot be guessed, it gives access to nothing else, and photographs on it are served through addresses that expire after an hour. Those pages are kept out of search engines. Treat the link the way you would treat the report itself.
It can be taken back. On the report screen the inspector can switch a link off, which stops every copy of it including the ones already sent, or issue a new one, which does the same and hands back a working link for the people who should still have it.
Guides and templates
Some guides on this site offer a printable template in exchange for an email address. If you use one of those forms we keep the address, which template you asked for, which page you were on, the date, a hashed form of your network address, and the exact sentence you were shown when you gave it.
The address is used to send you the file and, if you open it, up to three short emails about SayScope over the following nine days. Every one carries a one-click unsubscribe, and after that nothing more is sent. The basis for this is your consent, given by entering the address under that sentence, and the unsubscribe link withdraws it. The emails are sent through Resend, on servers in the European Union. The address is kept until you unsubscribe or ask us to delete it; an unsubscribed address is remembered as unsubscribed so it is never emailed again by mistake.
How long it is kept
Your account details are kept while your SayScope account remains open. Uploaded walkthroughs and their files are kept until you delete them, delete the account they belong to, or ask us to remove them. Removing the app or leaving a phone offline does not send a deletion request to our servers.
Delete a capture and it is removed from the device and the server, along with its photographs and recording. Delete a walkthrough, from the walkthrough details panel, and everything on it goes the same way: every capture, every line, every stored photograph, clip and recording, and the share link stops working.
A capture or walkthrough deletion made with no signal is held on the phone and carried up on the next connection. The device copy is removed straight away and the server copy when the deletion reaches it. Account deletion needs a connection, as explained below.
After account deletion, we keep limited technical deletion records, including account, walkthrough and retired-device identifiers, report types, dates and status, to finish interrupted deletion and prevent erased work from being uploaded again. We also keep purchase identifiers and transaction metadata, with the device link removed, to prevent the same purchase being credited twice. These records do not include your account email, display name, walkthrough addresses, notes or media. These technical records do not currently have an automatic expiry date.
Deleting your account
In the iPhone app, open settings and choose Delete my account, then confirm Delete account. You may need to update the app before you can confirm deletion of the account and its saved work. This requires a connection. You may need to confirm your identity again. For an Apple sign-in, confirm with the same Apple account so SayScope can revoke its sign-in access. Your Apple or Google account itself is not deleted.
On completion, deletion removes your SayScope account details and the reports, photographs, videos, recordings and notes uploaded to that account from any device. It also clears all work stored by SayScope on the phone used to request deletion, including work not yet uploaded. Shared report links stop working. Copies already exported or sent outside SayScope are not recalled.
If deletion is interrupted, use Continue deletion in the app. Uploads on that phone stay paused until cleanup completes. Other phones may still hold local copies, especially while offline; remove those copies in the app or contact us for help. Retired device identifiers are blocked from uploading deleted work again.
Deleting your SayScope account does not cancel an Apple subscription. Manage or cancel it in your Apple subscription settings.
If you cannot access the app, or need help removing records from other devices, write to privacy@sayscope.com.
Your rights
If you are in the UK or the EU you can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted. Write to the address below and we will answer within one month. Wherever you live, you can ask us the same things and we will answer the same way.
If a property you live in has been surveyed and you want to know what was recorded, contact your landlord first, as the report belongs to them. We will help them answer you.
If you are not happy with the answer you can complain to a supervisory authority. In the United Kingdom that is the Information Commissioner’s Office at ico.org.uk. In France it is the CNIL at cnil.fr. If you live elsewhere in the European Union it is the authority for your country.