How we handle your data in Rondva

Rondva is built and operated by Vitvélar ehf. (company registration no. 591206-1090), Hjálmholt 2, 105 Reykjavík, Iceland.

• For your Rondva account, this website and the business contacts we write to, Vitvélar is the controller.
• For the inspections recorded in Rondva, the inspection company that uses Rondva is the controller, and Vitvélar processes that data on its behalf as a processor (see the data processing terms). If an inspector used Rondva to inspect your property, that inspector is the first place to ask about your data. We will help them answer.

Questions about privacy go to rondva@rondva.com.

You sign in to the app and to app.rondva.com with Apple or Google. The provider tells us your name, your email address, a stable account identifier and, with Google, a link to your profile picture. With Apple you can choose to share a private relay address instead of your real one. We never see your Apple or Google password. For security, our sign-in service records the time, IP address and browser or device of each sign-in.

We also keep your company's details: its name, country, approval status and who its members are, and the report settings you choose (logo, company name, terms, report language). Your name is used as the inspector name on reports unless you change it.

When you register a company in the dashboard, we ask for the company name, the country and, if you want to give it, a website. The name and country create the company and set its defaults, such as the report language and rating scheme. The website is optional; we save it with your account and may use it to check that the company is genuine when we review a new registration. It never changes what you can access.

We use this to let you in, connect you to your company and put your company's name on its reports. The legal basis is the agreement with you or your company (GDPR art. 6(1)(b)) and, for sign-in security records, our legitimate interest in keeping accounts safe (art. 6(1)(f)).

Free first month.A new company gets its free first month only once. So that the same person can't get it again by deleting the account and signing up again, when a company account is activated we store a fingerprint (a keyed, salted SHA-256 hash) of the stable account identifier from your Apple or Google sign-in and of your email address. It isn't stored in readable form; we can only use it to check whether a given sign-in has had a free month before. Because we hold the key, this is pseudonymised personal data, not anonymous data. It is kept for 24 months, also after the account is deleted. The legal basis is our legitimate interest in preventing abuse of the free month (GDPR art. 6(1)(f)).

An inspection in Rondva can contain:

• the property's address, postal code, municipality, property ID and details you enter;
• the client's name, the people present, the date and the weather;
• rooms, ratings, notes, observations and the severities you set;
• photos and thermal images, which can show people or their belongings;
• the report: AI-drafted text, your edits and the finished PDF.

Everything is saved on your phone first and synced to your account, so it appears on app.rondva.com and is not lost with the phone. Other Rondva users can't read your inspections; that is enforced on our servers, not only in the app. The demo in the app stays on the phone and is never synced.

The app asks for the camera to take inspection photos, and for your photo library only when you pick images to import. It does not use your device's location, contacts or microphone.

Nothing is sent to the AI service unless you confirm it. Each time you create a report with AI, the app shows what will be sent and asks you first. If you confirm, the inspection's address details, property details, client name, people present, date and weather, room ratings and notes, observation text and photos go to Anthropic (USA), which drafts the report text with its Claude models. Photos are shared as links that stop working after 10 minutes.

Anthropic processes the data for us under its commercial terms and keeps it for a limited time under its own retention policy. We don't use your content to train AI models. You can always create the report without AI instead, and then nothing is sent to Anthropic.

For each AI draft we keep a small record (time, which inspection, whether it used a report credit) so we can count free and paid reports and prevent abuse. It contains none of the inspection content.

In the Rondva app the weather field of an inspection can fill itself in. This happens when you create the inspection, or open its details, on the day of the inspection and the weather field is still empty, or when you tap the weather button. You can always change the text or type the weather yourself.

To work out the weather, the app asks our server, and our server then:

• looks up the place in our own database, in the European Union, using only the town or suburb, the postcode and your company's country. The database is built from the open data of GeoNames. The street address is not used for this and is not sent anywhere. The lookup gives the coordinates of the postcode area or suburb, not of the building;
• sends those coordinates, rounded to about 100 metres, to MET Norway (the Norwegian Meteorological Institute), which returns its forecast. We pick the hour that matches the inspection and turn it into a short text such as “Fair, 12 °C, light wind”.

Nothing else is sent: not the street address, not your name, email address or account details, not the client's name, and no notes or photos. The request comes from our server, so MET Norway sees our server's IP address and not your phone's. The app does not use your phone's location for this, only the town or suburb and postcode you entered.

The only thing saved is the short weather text, in the inspection's weather field. The coordinates are not saved with the inspection, and the address and the place looked up are not written to our logs. The place table holds only public geographic data and no personal data.

Weather data from MET Norway, licensed under CC BY 4.0. Location data: GeoNames (geonames.org). This work includes data from GeoNames, licensed under Creative Commons Attribution 4.0. The data is provided as is, without a guarantee of accuracy.

In the Rondva app the address field of an inspection can suggest addresses as you type. This only happens when you use that search: after you have typed a few characters of the address. You can ignore the suggestions and type the whole address yourself, and if the search isn't available the field simply works as a plain text field.

The app asks our server, and our server then asks Google (Google Maps Platform, Places API), which:

• receives the text you typed in the address field, while you type, and returns up to five matching addresses. Along with the text go your company's country (so the suggestions are from the right country), the language of the app and a random code that ties the suggestions of one search together. The code is not linked to you;
• receives the place you picked from the suggestions (Google's identifier for that place) and returns its address parts (street, town, state or region, postcode) which the app puts into the inspection's address fields.

Nothing else is sent: not your name, email address or account details, not the client's name, and no notes or photos. The request comes from our server, so Google sees our server's IP address and not your phone's. The address you type is not written to our logs, and the app does not use your phone's location for this. What Google does with the search text is described in the Google Privacy Policy. Suggestions are shown with Google's attribution, as its terms require.

app.rondva.com shows the inspections synced from your app and lets you edit reports. Staying signed in uses a session cookie that is strictly necessary for the dashboard to work. Report PDFs are rendered on our servers from the report and its photos and stored in your account.

Rondva does not send your reports to Google Drive or any other storage service. When you export or share a report, it goes where you send it, and what happens to it after that is up to you and your company.

When paid plans are offered in the app, you buy them through the App Store. Apple processes the payment under its own terms; we never see your card details or Apple ID.

For each purchase Apple gives us a digitally signed record, through the app and as notices from Apple's servers about renewals and refunds, and our server checks Apple's signature before using it. The record contains the product, the purchase and expiry dates, transaction identifiers, the store country and price, and whether the purchase renewed, expired or was refunded. The app gives Apple a random purchase identifier, not your account ID, so the record can be matched to your account.

We link the record to the account that made the purchase and to its company, and use it to give the company its report credits, and to take back unused credits if Apple refunds the purchase. We keep these records as accounting records for as long as accounting law requires (seven years in Iceland), even if the account is later deleted. If the account is deleted, these records stay but are no longer linked to your account or company. The legal basis is the agreement with your company (GDPR art. 6(1)(b)) and our legal duty to keep accounting records (art. 6(1)(c)).

When you tap Restore purchases, the app asks Apple for your current subscription and sends the signed record to us in the same way. Deleting your account does not cancel an App Store subscription: cancel it first in your Apple account settings, or Apple keeps charging you.

The app downloads updates from Expo. Each update check sends a random installation identifier that the app stores on your phone, your platform and app version and, if the app crashed the last time it ran, the error message. Our hosting providers process IP addresses and request logs to run and protect the service.

The app contains no analytics, advertising or tracking tools, and we don't track you across other companies' apps or websites.

Before launch, rondva.com had a waitlist. It closed when Rondva launched in the App Store on 19 October 2026. Nobody had joined it, so we hold no waitlist data.

Who we are. Vitvélar ehf. (company registration no. 591206-1090), Hjálmholt 2, 105 Reykjavík, Iceland, makes Rondva and is the controller for this section. Contact: rondva@rondva.com.

Who we write to.Building inspectors who publish a work email address in a public register or on their company's own website, for example the New Zealand Institute of Building Inspectors directory (nzibi.co.nz). We find these addresses by hand from public registers and company websites. We write to them about Rondva, because it is a tool for exactly their job. This is a short series of up to three emails, not a newsletter. The emails carry no tracking pixels and no tracked links.

What we hold.Your name, your work email address, your company's name and website as published, the web address and date where we found them, and a note of when we wrote and whether you replied or asked us to stop. Nothing else. We use it only to write to you about Rondva, we don't sell or share it, and we don't build a profile of you. We send and store the emails with Google Workspace (see Who processes the data).

Why we may do this. Our legitimate interest in telling professionals about a product made for their work (GDPR art. 6(1)(f)). For recipients in New Zealand we rely on the deemed consent that the Unsolicited Electronic Messages Act 2007 allows for a work address published in a business capacity. We weighed it against your interests: we write to a work address that is published for business contact, the intrusion is small, you can stop it with one reply, and an inspector can reasonably expect an email about tools for inspections. You can object at any time (GDPR art. 21, see below), and we tell you about this section in our first email to you (art. 14).

How long we keep it. For 12 months after our last email to you, unless we start talking, and then we handle it as described under When you write to us. If you ask us to stop, we keep your email address and nothing else on a do-not-contact list so that we never write to you again. That is the one thing we keep beyond 12 months, and only to respect your request.

Stop, object or ask what we hold.Reply “unsubscribe” to any of our emails, or write to rondva@rondva.com, and we remove you the same day, and always within 5 working days, and don't write again. You can also ask us what we hold about you, have it corrected or deleted, or object to our using it. Objecting to direct marketing always succeeds. We reply within one month.

Complaints. You can complain to the Icelandic Data Protection Authority (Persónuvernd, personuvernd.is), which supervises us, or to the supervisory authority in your own country. If you are in New Zealand, you can also contact the Office of the Privacy Commissioner.

If you email rondva@rondva.comwe keep your message, your email address and our replies so we can help you and follow up. We keep them for as long as we need to resolve the matter and handle any follow-up. Please don't send inspection photos or client details unless we ask for them. The legal basis is our legitimate interest in answering you (GDPR art. 6(1)(f)), or the agreement with you or your company when your message is about your account.

One essential cookie remembers your cookie choice. Analytics (Google Analytics 4) and marketing cookies (Meta and Google ad measurement) are set only if you accept them in the banner, and you can withdraw that at any time. We also use Vercel Web Analytics, which sets no cookies and stores no identifier about you. Details, names and lifetimes are on the cookie page.

Under the GDPR we need a legal basis for each purpose. In plain terms:

• Your account, your company's details and signing in: the agreement with you or your company (art. 6(1)(b)). Sign-in security records: our legitimate interest in keeping accounts safe (art. 6(1)(f)).
• Inspections, photos, reports, AI drafting, the weather auto-fill and the address search: for these we act for your inspection company as its processor. The company decides why it records the data and on what basis, usually its agreement with its own client. Sending anything to the AI service also needs your explicit confirmation in the app each time.
• Purchases: the agreement with your company (art. 6(1)(b)) and our legal duty to keep accounting records (art. 6(1)(c)).
• Your emails to us: our legitimate interest in answering you (art. 6(1)(f)), as described in that section.
• Business contacts we write to: our legitimate interest in telling inspectors about a tool for their work (art. 6(1)(f)), as described in that section. You can object at any time.
• Hosting logs and abuse prevention (including the free-month fingerprints): our legitimate interest in running and protecting the service (art. 6(1)(f)).
• Analytics and marketing cookies on rondva.com: your consent (art. 6(1)(a)), which you can withdraw at any time.

We keep the list of providers short:

Each of these acts as a processor under a data-processing agreement, except Apple and Google for sign-in and payment, MET Norway for the weather auto-fill, which is a public service that acts under its own terms of use, and Google Maps Platform for the address search, which acts as an independent controller under Google's controller-controller data protection terms. We don't sell personal data and don't share it with anyone else, unless the law requires us to.

Our database and file storage are in the European Union (Ireland). Some providers process data elsewhere, mainly in the United States (see the table). Where personal data goes to a country outside the EEA that the European Commission has not found to offer adequate protection, the transfer rests on the EU Standard Contractual Clauses. Norway is in the EEA, and the European Commission has found the United Kingdom adequate.

The weather service is the exception: MET Norway is a public service we have no contract with. It receives only coordinates rounded to about 100 metres, never an address, a name or account details, and it is bound only by its own terms of use.

The address search sends the text you type in the address field to Google in the United States (see Address search). Where that text contains personal data, the transfer rests on the provider's standard contractual clauses.

If you are in New Zealand:your information is held by Vitvélar in Iceland and in our providers' systems in Ireland and the United States. We send it abroad to providers that are bound by a contract with us to protect it, and to Apple and Google for the sign-in and payments you choose to use with them. The exception is the weather auto-fill above: the public weather service (MET Norway) may not be required to protect location data in a way that is comparable to the New Zealand Privacy Act 2020. It receives only coordinates rounded to about 100 metres, not the property's address, and only on the day of the inspection while the weather field is empty or when you tap the weather button.

You can delete your account in the app: Settings → Delete account (or, if your company has not been approved yet, Delete accountat the bottom of the screen you see after signing in). The app asks you to confirm twice. It can't be undone, so save or share any reports you want to keep first.

What is deletedfrom our servers: your sign-in account and its link to your Apple or Google sign-in; your inspections with their rooms, observations, photos and reports; the report PDFs and your company logo in our storage; and, if you are the only member of your company, the company profile and its report credits. On the phone you delete from, the app also removes its local copy. If you signed in with Apple, we also ask Apple to revoke Rondva's access to your Apple ID.

What stays:

• Apple purchase records, as accounting records, no longer linked to your account or company (see Purchases).
• A usage record for each AI draft (date, AI model, cost). It contains no inspection content and, after deletion, no longer points to your account or company.
• The fingerprints used for the free first month (see Your account), so that deleting the account and signing up again doesn't give a new free month. They no longer point to your account or company and are deleted 24 months after the free month was given.
• If your company has other members, the company and its data stay; only your own membership is removed.
• Encrypted backups, until they expire on the normal backup cycle.
• Copies on other devices where you were signed in, until you remove the app from them, and reports you already exported or sent to clients.
• Text and photos already sent to Anthropic for a draft, which follow Anthropic's own retention policy.

Accounts that are managed by a partner company, and accounts with purchase records made outside the App Store, can't be closed in the app; write to rondva@rondva.com and we will close them. Deleting your account does not cancel an App Store subscription. More on the support page.

• Account, company and inspections: while the account is active. When you delete your account in the app, or ask us to close it, we delete it along with the inspections, photos and reports stored with it (see Deleting your account for what stays). Copies can remain in our encrypted backups until those expire on the normal backup cycle.
• Purchase records: as long as accounting law requires (seven years in Iceland), even if the account is deleted. They are then no longer linked to it.
• AI usage records (date, model, cost, whether a credit was used): kept as a usage history without inspection content.
• Free-month fingerprints (pseudonymised hashes of your sign-in identifier and email address): 24 months from when the free month was given, also after the account is deleted, then deleted automatically.
• Weather lookups: the address and the coordinates are not stored. Only the short weather text stays in the inspection.
• Emails to us: as long as needed to resolve the matter and follow up.
• Business contacts we write to: 12 months after our last email, unless we start talking. If you ask us to stop, only your email address is kept, on a do-not-contact list, so we never write to you again.
• On your phone: until you delete the inspection or remove the app.

How to close your account is on the support page.

You can ask to see what we hold about you, have it corrected or deleted, restrict or object to its use, or receive a copy in a portable format. Write to rondva@rondva.com. To stop our emails, you can also reply to any email from us. We reply within one month, as the law requires.

If your data is in an inspection someone else recorded, we pass your request to the inspection company that controls it and help it answer.

If you are in New Zealand,you can ask us for the personal information we hold about you and ask us to correct it, as the Privacy Act 2020 allows (information privacy principles 6 and 7). Write to the same address. If we can't resolve a concern, you can complain to the Office of the Privacy Commissioner.

If you think we have handled your data incorrectly you can complain to the Icelandic Data Protection Authority (Persónuvernd, personuvernd.is) or to the supervisory authority in your own country.

Rondva is a tool for professionals and their companies. It is not intended for anyone under 18, and we don't knowingly collect personal data from children. An inspection can still include photos or details of people who happen to be at a property, children among them; the inspection company is responsible for having the right to record that. If you think a child has given us personal data, or you want such data removed from an inspection, write to rondva@rondva.com and we will help delete it.

We update this page when Rondva or our providers change. For changes that matter, we also tell account holders by email or in the app. The date below is the last revision.