Heranta Oy, business ID 3383757-9, Vespuolentie 913, 41800 Korpilahti, Finland. Contact: Heikki Rantalaiho, hei@inssi.app.
| Data | Source | Where | Purpose |
|---|---|---|---|
| Account data: the unique identifier of your Apple ID, email (may be Apple's relay address), name if you provide it | Sign in with Apple | Server | Creating and identifying the account, linking purchases |
| Position and speed during the drive (GPS, about 1–2 times per second) | Phone location | Phone and server | Assessing speed limits, route and traffic situations |
| Motion sensors (acceleration, rotation rate) | Phone sensors | Phone and server | Assessing acceleration, braking and turns |
| Head-pose angles (yaw, pitch) over time | Driver camera, computed on the phone | Phone and server | Assessing mirror and blind-spot checks |
| Turn-signal timestamps | Road camera audio track, computed on the phone right after the drive | Phone and server | Assessing indicator use |
| Road camera video | Rear camera | Phone only | The user's own viewing (observation clips in the report); not sent to the server |
| Audio | Microphone | Phone only, temporarily | Detecting the indicator relay sound; the audio track is removed from the recording right after detection. Speech is not analysed. |
| Driver camera image | Front camera | Not stored | Only head-pose angles are computed in real time; the image is neither stored nor sent |
| Reports, drive names, share links | Produced by the service | Phone and server | Showing and sharing results |
| Your real driving-test result, if you tell us | From you | Server | Measuring the accuracy of the assessment model |
| Purchase transactions (Apple receipt, no card details) | App Store | Server | Verifying purchased entitlements |
| Acceptance of the terms: age group (adult / 15–17), guardian's name if a minor, time, version of the terms | From you and your guardian | Server | Evidencing the contract and the guardian's acceptance |
Providing the service to you (reports, account, purchases) is based on performance of a contract. Use of the driver camera is based on your consent, which you give in the app and can withdraw by stopping use of the camera. For a minor, a guardian accepts the terms and this notice in the app.
Development of the assessment model is based on our legitimate interest (improving the product). Only the following data is used for it, in pseudonymised form: GPS speed and route with coarsened location (about 100 m accuracy, start and end of the route removed), motion-sensor data, head-pose angles, indicator timestamps, the instructor's marks, the report, and the real driving-test result you report. The account identifier, email and name are not included, and the material is not linked back to you. The material is kept for at most 24 months from its creation. You can object to the use of your data for model development at any time with the switch in the app's Account view or by email; the objection also covers drives recorded earlier, after which your data is used only to produce your own reports. Video or audio is never used for model development in any form.
Other people and vehicle number plates may be visible in the road camera video. The video stays on your phone and is not transferred to us. You are the controller for the video; do not publish it. The sensor data transferred to the server contains no images and no audio. The audio track, in which speech of people in the car may be heard, exists only for the duration of indicator detection and is then removed from the recording.
The server is located in Finland (Hetzner Online GmbH data centre, Helsinki) and the data stays within the EU. Map data is fetched from the Finnish Transport Infrastructure Agency's Digiroad interface without personal data. The map tiles of a share link are loaded from OpenStreetMap into the viewer's browser; the viewer's IP address is then passed to the OpenStreetMap Foundation.
Sensor data and reports: as long as your account exists, at most 24 months after the last drive. Video: only on your phone, you delete it yourself. Acceptance records: for as long as the account exists. Deleting the account (Account → Delete account and all data) removes all your data from the server immediately and from the phone at the same time. The pseudonymised model-development material (section 3) is kept for at most 24 months unless you have objected.
We do not sell or disclose data for marketing. Our processors are Apple (sign-in and purchases), Hetzner (server) and Forward Email (email forwarding). The content of a share link is visible to anyone who has the link – you decide who you give it to.
You have the right to access your data, rectify it, erase it, restrict processing, object to processing based on legitimate interest (model development – the switch in the Account view), and port your data (reports and sensor data in JSON format directly from the app). A minor's rights may also be exercised by the guardian. Requests: hei@inssi.app. You may also lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
The assessment is produced automatically by a rule-based model. It has no legal effects: it does not affect the driving test, the driving licence or any official decision.
We update this notice when needed. Material changes are announced in the app.
Inssi is an app developed by Heranta Oy (business ID 3383757-9, Vespuolentie 913, 41800 Korpilahti, Finland). Contact: hei@inssi.app.