Privacy notice

1. Who this notice covers

TENJIN FACTORY PTE. LTD. is responsible for the personal data used to provide Inspector Kim unless a separate written agreement says otherwise. If you use the app for an employer, client or another organization, that organization may also be responsible for the inspection content it asks you to collect.

You are responsible for having permission to enter, photograph, record or document people, places, conversations and property. Collect only what the inspection needs.

2. Data we handle

Account and sign-in

We receive the account identifier created through Firebase Authentication and, where the sign-in provider supplies them, your email address, name, profile image and sign-in provider. We store workspace membership and account timestamps.

Inspection records and evidence

We store project titles and purposes, guide choices, sessions, timestamps, typed or dictated notes, corrections, questions, Kim answers and the record structure created from them. Evidence can include photos, audio, capture times, a point you selected in an image, media type and storage metadata.

Inspection content may incidentally contain faces, voices, addresses, registration numbers, documents, access details, health information or confidential business facts. Avoid content the job does not need.

Speech

Dictation uses Apple’s Speech framework. Recognition may happen on the iPhone or through Apple’s service depending on the submitted app, device, language and Apple settings. Inspector Kim receives the finalized text. Audio is stored when you deliberately save it as inspection evidence.

Purchases and usage

Apple handles payment details. We receive signed subscription and entitlement facts such as product, status, expiry, revocation and an account-binding token. We keep the current plan, the number of successfully committed Kim assists and bounded cost and reliability metadata. We do not receive your full payment-card number.

First-party product analytics

We use first-party product analytics to understand whether people can create, review and export useful records, and whether the optional Kim and subscription journeys work. These events use fixed, content-free categories such as guide choice, export format, purchase step and bounded success, failure or count ranges. They do not contain inspection notes, project titles or purposes, photos, audio, model prompts or answers, or App Store transaction IDs.

For correlation between events, our server converts internal account and workspace identifiers into keyed HMAC pseudonymous values: one-way codes created with a secret held outside the analytics records. The iPhone does not send these codes. They still count as personal data and are used only to aggregate product performance, reliability and the subscription journey.

Network, security and support

Cloudflare and Google Cloud may process request details such as IP address, time, route and technical diagnostics to deliver and protect the service. If you email us, we receive your address, message and any diagnostic details you choose to include. Do not send passwords, raw receipts, access tokens or inspection media by ordinary email.

3. Free work and Ask Kim

Free makes no LLM-provider request

Creating a project, filing direct notes, adding evidence, editing or deleting observations, reviewing a record and generating the standard PDF, spreadsheet, JSON or evidence-package exports do not call an LLM provider. Apple Speech may still use Apple’s network service as described above when you dictate.

Ask Kim is deliberate and separately consented

Kim Pro adds an Ask action. Before a first Ask, the app names OpenAI, explains the content categories and asks for separate permission. Buying Pro is not permission. Declining or withdrawing permission leaves Free work available.

For an Ask, Inspector Kim may send the question, relevant project purpose and prior conversation, relevant saved observations, and the selected image or bounded recent visual context. It does not send a continuous camera or microphone stream. Ask audio is not sent to OpenAI; it is retained by Inspector Kim only when the resulting observation attaches it as evidence.

OpenAI retention

Inspector Kim uses the OpenAI Responses API and sets store=false on every request, so the response is not retained as OpenAI application state. OpenAI’s published API policy says API content is not used to train its models unless the API customer opts in. It also says default abuse-monitoring logs may contain prompts and responses and may be kept for up to 30 days, unless longer retention is required by law.

We do not claim that this service has OpenAI Zero Data Retention. See OpenAI’s API data-controls notice. If the AI provider or this retention position changes, we will update this notice and require new in-app consent before later Ask requests.

4. Service providers

Each provider also handles data under its own terms and privacy notice. We may disclose information when law requires it, to protect users or the service, or as part of a corporate transaction subject to applicable notice and safeguards.

5. Why we use data

• To authenticate you and keep workspaces separate.
• To save, synchronize, display, edit, export and delete inspection records.
• To measure content-free product use and service reliability with first-party analytics.
• To verify subscriptions and apply the Kim-assist allowance.
• To carry out an Ask you deliberately request after consent.
• To operate, secure and troubleshoot the service and preserve accurate custody.
• To answer support and privacy requests and meet legal obligations.

Depending on where you live, these purposes may rely on performing our contract with you, your consent for optional AI disclosure, our legitimate interests in securing and operating the service, or a legal obligation. You can withdraw AI consent for future requests at any time.

6. Retention, export and deletion

Inspection records and evidence remain in your account until you delete an observation or request account deletion. Inspector Kim does not currently apply a fixed expiry to active records.

Deleting an observation removes the record and queues any external evidence object for bounded, retried cleanup. Account deletion removes your internal account, solely owned workspaces, inspection records, private evidence and Firebase identity. If you belong to another organization’s workspace, its record may remain under that organization’s control and your contribution is anonymized. Deletion is blocked if you own a shared workspace with another member so their record is not silently destroyed.

A one-way hash of the deleted Firebase identifier and deletion timestamps remains without inspection content so an old token cannot recreate the account. Provider backups and operational logs can retain limited copies until their normal rotation or when law requires longer retention; they are not used to reopen a deleted account.

You can export an individual inspection as PDF, XLSX, JSON or a ZIP evidence package before deletion. For an account-level access request, email us. Deleting Inspector Kim does not cancel an App Store subscription; manage billing separately through Apple.

7. Your choices and rights

You can type instead of dictate; control camera, microphone, speech, photo and notification permissions in iOS; decline or withdraw AI consent; edit or delete observations; export an inspection; manage the Apple subscription; and request account deletion in the app.

Depending on the law that applies to you, you may also ask to access, correct, delete or receive a copy of personal data, object to or restrict some processing, withdraw consent, or complain to a regulator. These are statutory rights where the law grants them, not extra guarantees created by this notice. We may need to verify your identity and may retain or refuse a request where law requires or permits.

Send a request to contact@tenjinfactory.com. We will respond within the period required by applicable law.

8. International processing

Tenjin Factory is in Singapore and the first public release is intended for the United States App Store. Google Cloud hosts the application database and API in Singapore. Cloudflare, Apple, Google and OpenAI may process data in other countries under their own services and terms. Privacy protections and government-access rules can differ from those in your country.

9. Custody and security

Inspector Kim uses authenticated workspace boundaries, private object storage, scoped media routes, idempotent request identifiers and protected on-device retry storage. A selected camera view is labelled as not saved until the server confirms the resulting record. No online service can promise absolute security.

Report a suspected security or privacy incident to contact@tenjinfactory.com. Describe the type and time of the issue first; do not attach exposed inspection content.

10. Children

Inspector Kim is for adults doing inspection work. You must be at least 18 and old enough to enter a binding contract where you live. The service is not directed to children, and we do not knowingly collect a child’s personal data.

11. Changes to this notice

We will update the effective date and give notice appropriate to a material change. A different AI processor, a material change to content sent for an Ask, or a different purpose requires an updated notice and new in-app consent before later AI disclosure.

12. Contact

Email: contact@tenjinfactory.com