Privacy policy

Creating an account or signing in stores:

• Your email address.
• A password, if you use email sign-in. The password is stored as a hash on DigsTour’s server. DigsTour cannot read the password back.
• If you use Google sign-in, Google sends DigsTour the email on that Google account and a sign-in token. DigsTour does not receive your Google password.
• The name and measurement units you save in Account settings, if you set them.

A session cookie keeps you signed in on the website. It is used for sign-in, not for advertising.

While you scan a space, the app uses:

• The camera and ARCore depth, to measure the floor and build the scan.
• Precise location, only when you tap “Use my location” to fill in an address. On Android 12 and older, Android also requires that location permission before the app can join the Insta360 camera’s Wi-Fi. DigsTour does not keep a trail of where you go. The address you save on a space is what is kept.
• Activity recognition, to track the walk during a scan.

360° photos from an Insta360 camera, the point cloud, and the floor plan are uploaded to your account. Room names can be dictated with the phone’s speech-to-text. That uses the system recognizer. The app does not record the audio and does not upload it. Only the text of the room name is saved.

A space can hold its name, address, 360° photos, point cloud, floor plan, tags, and notes. Opening a shared tour records that the tour was viewed and when. It does not record who the viewer is.

On the website, the address field can suggest addresses as you type, and the “Here” button fills the address from your current location. That is the same address fill as “Use my location” in the app. The location is used for that fill and is not saved as a location history.

If you save an API key for an optional feature (OpenAI, Google Maps, or Matterport), that key is stored on the server for your account so the feature can run. It is not sent back to the browser or the phone.

Account data, photos, scans, and floor plans are stored on DigsTour’s own server. That server runs Supabase — the database, file storage, and sign-in — on a computer operated by Ben Spader. It is self-hosted. It is not a Supabase cloud project.

DigsTour does not sell your data. The app and the site have no ads.

These run only when you use them. DigsTour does not send your scans or photos to these companies otherwise.

• AI staging sends a photo from your space, and a short instruction, to OpenAI, which returns a staged image. Optional AI room naming sends a photo of the room to OpenAI and saves the text name.
• Address autocomplete sends the address text you type to Google Maps. “Use my location” and the website’s “Here” button send that one location to Google Maps so it can be turned into an address.

OpenAI and Google keep what those requests contain under their own policies.

The server writes technical logs of requests and errors so the service can be operated and fixed. The logs are not sold and are not used for ads. Deleting your account does not go back and erase old log lines.

DigsTour keeps your account, and the spaces, photos, scans, and floor plans in it, until you delete them or delete the account. You can delete the account at digstour.com/delete-account. That removes the spaces, photos, scans, floor plans, saved API keys, and the login from the live server.

A nightly backup copies the whole database and the uploaded files, and the newest 14 copies are kept. The backup runs every night at 2:00 AM, on a drive on the local network, or on the same computer if that drive can’t be reached. A deleted account can remain in those copies until the copy is no longer one of the newest 14. When the backup runs every night, that is 14 days. If a night is missed, the older copy stays until 14 newer backups exist.

DigsTour is not for children under 13. The audience is 18 and older. DigsTour does not knowingly collect personal information from children under 13. If you believe a child has an account, email ben@spader.us and the account will be deleted.

Ben Spader
ben@spader.us