Privacy policy

Updated 20 October 2026. ProofSpin is made by ODVI Pty Ltd (odvi).

On your iPhone

The ProofSpin app keeps your inspections on your phone. You don't sign in, and ProofSpin never asks for your name, email or phone number. ProofSpin doesn't add your location to its photos.

Device backup of inspections is turned off, so evidence isn't copied outside the app without you knowing. An inspection you haven't exported or put in the cloud is lost if you delete the app or lose the phone.

Sealing and times

When a walk ends, the app signs a list of every photo's fingerprint with a key held in your iPhone's hardware. It sends only that list's SHA-256 fingerprint, a short code that can't be turned back into your photos or details:

• to the public OpenTimestamps servers, for an independent timestamp
• to ProofSpin's server, which signs the time it received it. While the camera is open the app also asks the server for the current time. This needs no account, and it's how a record shows when a walk happened even if the phone's clock was wrong.

Purchases and the free trial

Purchases and subscriptions are handled by Apple through the App Store; we never see your payment details. When you use the cloud, the app sends Apple's signed record of your purchase to ProofSpin's server so it can check it, and Apple tells the server when a subscription renews or is refunded. A single flag in your iPhone's Keychain remembers that the free rental has been used.

The cloud

Nothing goes to the cloud unless you put an inspection there. The first time you do, the app creates an anonymous account: a random ID, with a secret kept in your iCloud Keychain so the account follows you to a new iPhone. The server stores only a scrambled form of that secret.

When the app first uses the cloud, it proves to ProofSpin's server that it's the genuine app on a real iPhone, using Apple's App Attest. The server keeps a public key for that install; it can't identify you or your phone.

For each inspection in the cloud, ProofSpin stores, on Cloudflare in a location Cloudflare chooses:

• the original photos, their signed list and timestamp proofs, and ProofSpin's signed receipt
• smaller copies for viewing in a browser, and the spin previews used to restore it on a new iPhone

An inspection stays in the cloud for 12 months after you upload it. With Cloud unlimited it stays while you're subscribed (your 1,000 newest) and for 30 days after the subscription ends, or 12 months after upload if that's later. The app reminds you 30, 7 and 1 days before an inspection leaves the cloud; the reminders are made on your phone. On the day, everything for that inspection is deleted.

Share links

A share link shows an inspection to anyone who has the link, without an account, so only send it to people you want to see it. Links expire after 30 days unless you change that, and you can turn a link off at any time. Shared pages aren't listed or indexed by search engines.

Your rental agreement or other contract photo is never on the share page or in the package a link downloads, because it shows your name, address and licence. VIN and odometer photos are shared. Your own copy keeps the contract.

Deleting

• Delete any inspection on your phone.
• Remove an inspection from the cloud: its photos, copies and share links are deleted, and your phone keeps it.
• Delete all your cloud data from the Storage screen. The app first offers to download anything kept only in the cloud. ProofSpin then keeps only your purchase records and a marker for the closed account, so purchases you've used stay used and a subscription can carry on.

Deleted photos are gone. The server keeps only a note that something was deleted, and when.

This website

This site doesn't collect personal information and doesn't use advertising or analytics trackers. It and the share pages are hosted by Cloudflare, which processes requests to deliver them.

Questions

Email privacy@proofspin.app.