Applies to the RCam Inspect app (com.RuRuApp.RCAM).
Last updated: 22 October 2026
This Privacy Policy describes how RCam Inspect (the "App", "we", "us") collects, uses, stores and shares information about its users ("you") when you use the App and its companion website.
The App is a tool for taking photos and preparing inspection reports. Photos and reports are stored on your device and are transmitted off the device only when you enable or use one of the online features described in Section 4. We do not sell personal data, do not display advertisements, do not collect contacts and do not use advertising identifiers.
This Policy applies to the RCam Inspect application (package com.RuRuApp.RCAM) and its
companion website, rcaminspect.com.
The App is developed and operated by Tinh Nguyen, an independent developer based in Vietnam. The
developer is the controller of the personal data described in this Policy and the point of contact
for all requests concerning personal data.
Contact: rutyphon@gmail.com
You sign in with an email address and password, or with a Google account (Google Sign-In). Authentication is performed by Google Firebase Authentication; we do not have access to your Google account password. Your email address is stored with your account profile. Your sign-in session is kept on the device in Android's encrypted storage; your password is not written to device storage.
Each account may be used on one device at a time. To enforce this, the App generates a random session identifier for each installation and stores it with your account profile. The session identifier is a random string generated by the App and is not a hardware identifier of your device.
We store a record linked to your account on Google Cloud Firestore, consisting of: your user ID; your email address; your plan (Free, Pro or company account) and its expiry; how the plan was granted (Google Play purchase or activation code); your online storage quota and usage; the device session identifier; your company group, if any; and whether network-based artificial intelligence features are enabled for your account.
Photos, videos, item codes, descriptions, checklists, measurements, forms, handwritten signatures and Word/Excel reports are stored in the App's private storage on your device. This data is transmitted off the device only in the following cases:
If you do not use the features above, your photos and reports remain on your device. When we add a new feature that transmits data off the device, we will update this Policy.
You may send a connection request to a colleague who already has an account, using that person's email address. We do not create profiles for persons without an account and do not send invitation emails on your behalf. Once a request is sent, both parties can see each other's email address and display name; the invited person may decline, and either party may end the connection at any time. Only colleagues whose connection has been accepted can send content to your inbox, and you may delete any item in your inbox.
Location. The App accesses location only if you enable GPS stamping. When the feature is enabled, location is read only while the camera screen or the export screen is open, and never while the App runs in the background. The coordinates, and the address determined from them, are printed on the report photo.
We do not store location data as a separate record on our servers. Coordinates are transmitted off the device in two cases only: (a) the Android operating system sends the coordinates to a Google service to convert them into an address; this is a function of the operating system and does not pass through our servers; and (b) coordinates printed on a photo are transmitted with that photo when you share or back it up. If the feature is not enabled, the App does not access location. Under Vietnamese law, location data is sensitive personal data; this feature therefore operates only when you enable it and may be disabled at any time.
Microphone. The App requests microphone permission solely to record video with sound on site. Audio is stored within the video file on your device. The App does not make separate audio recordings, does not record audio in the background and does not transmit audio. Audio is transmitted off the device only when you back up or share a video that contains it. If you do not record video, the microphone is not used.
These features are divided into three levels according to whether data is transmitted off the device:
| Feature | Data transmitted | Conditions |
|---|---|---|
| Text recognition (OCR) and photo-name suggestions by artificial intelligence running on the device | No data is transmitted off the device | Default for all accounts |
| Content summary by artificial intelligence | The recognised text and the item code | Optional; available only where your account or group has been granted access |
| Photo naming by network-based artificial intelligence | The photos you select for processing, together with the item code, the list of checklist labels in use and the labels of the preceding photos (to determine the correct order) | Optional; displayed only where your account or group has been granted access, and you must select this mode yourself |
Data for the latter two levels passes through our server (Google Cloud Functions) to the artificial intelligence provider Anthropic, solely for the purpose of returning a result to you. Under Anthropic's current terms of service, data sent through the Anthropic API is not used to train models; this is determined by Anthropic and set out in Anthropic's policies. Where your account has not been granted access, the network-based mode is not displayed and no photos are transmitted.
Suggestion improvement log. When you review photo-name suggestions, the App records the review in a log file on your device, consisting of: the item code; the photo's identifier in the device database; the proposed labels and their confidence scores; the photo name before and after your correction; the source of the suggestion (on-device or network); and the customer code recognised from the photo, if any. The log file does not contain photos and, by default, is not transmitted off the device.
The log file is uploaded to your account only if you enable the "Contribute data" option in Settings; this option is disabled by default. The file is deleted when you uninstall the App. Accounts belonging to a company group do not upload the log, even if the option is enabled. When the log is uploaded, item codes and customer codes are hashed, so that we do not receive their original values; proposed labels and photo names entered by you are transmitted as entered. You should enable this option only if you are permitted to share that content.
The features described in this Section are in a trial (beta) stage. Results are suggestions only, may be inaccurate, and the features may be changed or withdrawn at any time in accordance with Section 9 of the Terms of Use. You should verify the results before including them in a formal report.
The App uses Google Firebase Crashlytics to collect crash reports and diagnostic information (error type, device model, Android version and App version).
In addition, when an error occurs, the App sends a technical error record (error type, error message, shortened stack trace, device model, Android and App version, language) together with your sign-in email address, in order to identify the affected account and resolve the error. The record is linked to your account and does not contain photos; the error message may include the file name or path involved in the failed operation. This data is not used for advertising, is accessible only to the developer, and is deleted together with your account. You may also submit an error log yourself using the Send error report function in Settings.
The two forms of collection described in this Section cannot be disabled in the App, as they are necessary to detect and resolve faults, and are carried out on the basis of legitimate interests. You have the right to object to, or request deletion of, diagnostic data linked to your account by email; such requests are handled in accordance with Section 15.
When you open the App, we record the time of your most recent use (at most approximately once a day), linked to your account, in order to identify active accounts. This data consists only of a date and time; the App does not record which screens you view or which actions you take. The data is used for operations and support and is currently not visible to company group administrators.
Feedback. When you submit feedback from Settings or from the website, we store the name and contact email address you enter, the content of your feedback, attached photos (up to 6, reduced in size), and the App version, device model and language, in order to address the issue correctly. Feedback is linked to your account so that we can reply within the App; it is accessible only to you and to us and is not shown to other users. Feedback and attached photos are deleted when you delete your account or when we close and archive the conversation.
The following applies to accounts belonging to a company group:
For data within the scope of the group, the company determines the purposes of processing, and we process such data on the company's instructions. Please contact your company for its internal policy concerning this data.
These providers process data on our behalf under their respective terms. Google's policy: policies.google.com/privacy.
Google's and Anthropic's servers are located outside Vietnam; your data is therefore stored and processed abroad. These providers undertake to protect data under their data processing terms, including the European Union Standard Contractual Clauses where applicable.
Transfers of data abroad are carried out in accordance with Vietnamese personal data protection law. We prepare and retain a cross-border personal data transfer impact assessment dossier where required by law, and provide it to the competent state authority upon request. You have the right to know where your data is transferred and to object to the transfer; if you object, we will cease using, for your account, the features that require data to be stored abroad, to the extent that the service can still be provided.
We do not sell personal data and do not share personal data with third parties for advertising purposes. Data is shared only: (a) with the service providers listed in Section 11 in order to operate the App; (b) with persons you actively choose to share with (colleagues, group members, persons assisting you with photography); and (c) where required by law.
| Data | Retention period |
|---|---|
| Account profile, photos and content stored online | Until you delete the content or your account |
| Online photo backups after the Pro plan expires | Retained for a further 30 days and then deleted automatically, with notice 7 days in advance; photos on your device are not affected |
| Content shared by 4-digit code | Expires after 30 minutes; the record is deleted when the code is reissued to another user or when you delete your account |
| Capture session codes | Up to 7 days, or until you close the session |
| Photos transferred through assisted capture and group capture sessions | Deleted automatically from the server after no more than 3 days; may be deleted earlier once the receiving device has downloaded them or the session is closed |
| Group capture session data (member list, photo change records) | Deleted when the leader ends the session |
| Share manifests | Until you delete them |
| Technical error logs | No longer than necessary to diagnose and resolve errors; deleted with your account when you delete it |
| Photo-name review logs (only if you enable the Contribute data option) | Until you delete your account |
| Records of activation code use | Retained to prevent reuse of codes, including after account deletion |
| Reports and photos submitted to a company group | Belong to the group and are retained with the group |
| Content sent to a colleague's inbox | Deletion is at the recipient's discretion |
Account deletion. In the App: Settings > Account > Delete account (you will be asked to re-enter your password). On the website: sign in and open the Account section. This deletes your account profile, all photos and files stored online, capture sessions, report templates, error logs, colleague connections on both sides, group membership and the sign-in account, except for the data listed in the table above. Detailed instructions: rcaminspect.com/delete-account.html. You may also submit a request by email to rutyphon@gmail.com.
All connections are encrypted using HTTPS/TLS. Sign-in information on the device is stored using Android's encrypted storage. Online data is protected by authentication and server-side access rules: your photo store, reports, forms and account profile are accessible only to your account (and to your company group, for content you have submitted to it).
The sharing features are an exception: content shared by QR code or numeric code, assisted capture sessions, group capture sessions and the photos of those sessions are accessed by means of hard-to-guess links or codes, as required for the sharing function. Any person holding a valid code or link can access the corresponding content; you should therefore keep codes and links secure, send them only to the intended recipients and close sessions when the work is complete. Announcements we send to users may be read by any signed-in account and do not contain any individual's private data.
No method of transmission or storage is completely secure. We apply reasonable safeguards and, in the event of a personal data breach, notify the competent authority and affected users within the time limits required by law.
Potential risks. As required by Vietnamese law, we set out the harm that may arise from data processing: disclosure of report content or site photos if a sharing code or link is passed to an unauthorised person, or if your device or password is used by another person without authorisation; and disclosure of your work location if you enable GPS stamping and share photos externally. We mitigate these risks through short-lived codes, limits on code-entry attempts, per-account access control and encrypted transmission. You are responsible for keeping your codes, links and passwords secure.
You have the right to: be informed about data processing; access your data and obtain a copy; rectify inaccurate data; erase data; withdraw consent; restrict or object to processing; protect yourself as provided by law; lodge complaints, denunciations or legal actions; and claim compensation for damage caused by unlawful processing. For users in Vietnam, these rights are exercised in accordance with Vietnamese personal data protection law; for users elsewhere, in accordance with the law applicable where they reside (for example, the GDPR in the European Union).
Certain rights may be exercised directly in the App (editing data, disabling online features, deleting photos stored online, deleting your account). Other requests should be sent to rutyphon@gmail.com.
If you disagree with the outcome of a request, you may lodge a complaint with the competent state authority for personal data protection (in Vietnam, the Ministry of Public Security) or bring legal action in accordance with the law. Users in jurisdictions where the GDPR applies may lodge a complaint with the supervisory authority in their place of residence.
Response times. We acknowledge receipt of a request within 2 working days and process it within the time limits set by Vietnamese personal data protection law. Under the current regulations, these are 10 days for requests to access, rectify or obtain data; 15 days for requests to withdraw consent, restrict or object to processing; and 20 days for requests to erase data. Where a request must be forwarded to a third party processing the data, the 15-day and 20-day periods are extended to 20 days and 30 days respectively. Time limits run from the completion of identity verification of the requester and may be extended once by up to 20 days, with notice to you. Where the law permits a request to be deferred or refused, we will state the reasons. Users in jurisdictions where the GDPR applies receive a response within the time limits set by that regulation.
Legal bases for processing (stated where required by the law applicable to you): performance of our contract with you (account, licence, online features you use); your consent (GPS stamping, network-based artificial intelligence, colleague connections); legitimate interests (prevention of licence fraud, system security, error resolution); and legal obligations (payment records).
RCam Inspect is a professional tool intended for persons aged 18 and over and is not directed at children. We do not knowingly collect children's data; any such data discovered will be deleted.
We may update this Policy. The "Last updated" date at the top of the page indicates the current version; for material changes, we will provide notice in the App or on the website. Your continued use of the App after a change takes effect constitutes acceptance of the updated Policy.
Questions concerning this Policy or personal data should be sent to rutyphon@gmail.com.