ScaffInspect Privacy Policy

Updated 10 October 2026

ScaffInspect is provided by Yolleg Ltd. This notice covers the iPhone and iPad app and the company records it uses on ScaffInspect. Contact [email protected] about privacy.

Information we use

• Your name, email, role, position, company details and account identifiers; your password is stored as a hash.
• Site and client names and addresses, scaffold references, locations, design information, inspection dates, checklist answers, findings, actions and outcomes.
• Inspector names, positions, signatures and photos you select. Existing company handover records can include other signatories and their signatures. Photos and notes may contain information about other people.
• Subscription product and transaction identifiers, purchase status and a company purchase identifier. Apple processes App Store payments; we do not receive your card details from Apple. Existing website billing records are separate.
• Sign-in sessions, Terms acceptance, and security information used to prevent misuse. Service providers may also maintain connection and security logs. If you contact support, we receive what you send us.

Why we use it

We use this information to provide company accounts, synchronize records, prepare reports, verify subscription access and respond to support requests. Yolleg Ltd is the controller for account and service administration. Account and service administration supports our contract with you; security and service support serve our legitimate interests. Your company decides why the inspection information it supplies is recorded and shared; we process those records to provide its service. Your company should explain its own lawful basis and notices to people named in reports.

On your device

The app keeps company registers, drafts, saved inspections, reports and downloaded photos on the device so you can use saved information without a connection. Unsynced work stays on that device until you sync. Session credentials use the device Keychain. Selected photos are resized and re-encoded for inspection attachments. QR scanning uses the camera to read a tag; camera images are not uploaded by the scanner. NFC reading, where supported, reads a tag link. The app does not request GPS location.

Optional inspection notifications are scheduled locally. PDF and saved-work exports are prepared on your device. When you share an export, your chosen recipient or destination receives its contents, including any included signatures and photos. Copies you share are outside our control. Protect exported files and share only with appropriate recipients.

Company access and public links

Your company's authorized users can access its records. A scaffold QR tag opens a public status page: anyone with the tag link can see the site and scaffold reference, location and description, load or limitation information, latest inspection status, inspector name and position, relevant action notes, and company name and phone number.

A company-enabled site share link gives anyone who has the link read-only access to that site's register, inspection reports and photos, and handover certificates, including names and signatures. Recipients can copy or forward a link. These pages ask search engines not to index them, which does not make them private. Company administrators should control sharing and replace or disable an unwanted site link through the website.

Service providers and hosting

The service is hosted in the EEA by hosting.com, formerly A2 Hosting. Cloudflare provides DNS, traffic proxying and network security. Stripe handles existing website payments. Apple handles App Store payments and purchase verification under its own privacy policy; we do not receive your card details from Apple. SendGrid receives recipient addresses and message contents where service email or reminders are configured. Support emails pass through email providers. Information may also be disclosed where required by law.

Our EEA hosting location does not mean every payment, email or network provider processes information only in the EEA. Contact us for information about provider processing and safeguards relevant to your request.

The iPhone and iPad app has no advertising or third-party analytics SDK and does not track you across other apps. The separate website uses browser sign-in sessions and its own visitor statistics.

Keeping and deleting information

Company records remain available while the company account is kept, including read-only access after a trial or subscription expires. Closing one user's login preserves company inspection records and their original inspector details. Your company decides which records it needs to keep for its own duties.

Account closure and server-side deletion are currently handled on request. Email [email protected]. We verify your identity and company authority, confirm whether the request concerns one login or the entire company, and explain any records that need to be retained for legal obligations, a billing query, a dispute or a security incident. Export records your business must retain before requesting company deletion. In-app account deletion is being put in place; until it is available, contact us to arrange deletion. Deletion requests are reviewed and processed manually.

Access logs are used for security and troubleshooting. They currently have no configured automatic rotation or deletion schedule. We have not configured application or cPanel backups for this service; the hosting provider's backup arrangements have not been confirmed. Possible provider backup copies, independent payment-provider records and information needed for legal obligations have separate lifecycles. We explain the scope and any necessary retention exceptions when handling a verified deletion request, rather than promising immediate removal from every system.

Signing out preserves saved work on the device. Previously exported PDFs and copies shared elsewhere may remain. Removing the app clears its app data; Keychain credentials and server records have separate lifecycles. Copies held by export recipients are outside our control. Deleting an account or the app does not cancel a subscription.

Your choices and rights

You can request access, correction, export or deletion, and ask about objection or restriction rights, by emailing us. We may need to verify your identity and refer company inspection-record requests to your company administrator. Rights depend on the circumstances and legal retention duties. You can complain to the Information Commissioner's Office. We update this notice when practices change.

Yolleg Ltd 2026