Privacy Policy

• Your room photos and product photos are kept on your iPhone. They are uploaded only while a try-on is being rendered.
• Uploaded files sit in a private folder tied to your account. No other user can read them.
• To render a try-on we send the relevant photos, your floor plan and your instruction to an AI provider (Google or OpenAI). They return an image; they do not use it to train their models.
• We never sell your data, never share it with advertisers, and never use your photos to train anything of our own.
• We count how the App is used — screens opened, buttons tapped, steps of the first-run questionnaire. Those events carry no photos and no text you typed, and you can switch them off in Settings.
• You can delete a room, or your whole account, from inside the app. Deletion is real and permanent.

The RoomPlanner app and the site at ai-roomplanner.app are run by RoomPlanner (“we”, “us”), which is the controller of the data described here. For anything in this policy, including requests about your data, write to support@ai-roomplanner.app. We answer data requests within 30 days.

We collect only what the App needs in order to work, plus the usage statistics described below. There is no advertising SDK in the App, and nothing here is used to profile you or to target ads.

• Account data. When you sign in with Apple or with Google we receive a user identifier and, depending on what you allow, your name and email address. Sign in with Apple can hide your real address behind a private relay, and that works fine here. We never see your Apple or Google password.
• Room data. Room names, floor plans (walls, windows, doors, openings and their dimensions), scan versions, and the photos you take of your room.
• Product data. Photos you take of furniture, flooring, curtains or paint, together with the labels you give them.
• Try-on data. The instruction you write, which frames you picked, and the rendered images that come back.
• Subscription data. Your subscription status, plan and renewal date, received from Apple through RevenueCat, plus a counter of how many try-ons you have run. Payment card details never reach us — Apple handles payment.
• Device data. A push notification token if you allow notifications, plus app version, operating system version and crash diagnostics.
• Onboarding answers. The short questionnaire at first launch, used to understand what people want from the App.
• Usage events. Which screen was opened, which button was tapped, which step of the first launch you reached, whether a try-on was started, finished, kept or discarded, and counters such as how many rooms or frames you have. Sent to Amplitude, our analytics provider, together with your account identifier, app and iOS version, device model and the country your connection resolves to.

This is the part most people care about, so here it is step by step.

• Photos you take in the App are written to the App’s own storage on your iPhone. Nothing is uploaded just because you took a picture.
• When you start a try-on, the frames you selected, the photo of the product and your floor plan are uploaded to Google Firebase Storage, into a folder keyed to your account. Security rules make that folder readable and writable by you alone.
• Our server builds a request from your floor plan, your instruction and the images, and sends it to the AI provider currently in use — Google (Gemini) or OpenAI. Under their API terms, content submitted this way is not used to train their models.
• The rendered images come back, are stored in the same private folder and downloaded to your phone.
• Deleting a room deletes its plans, frames, try-ons and the files behind them. Deleting your account deletes all of it, plus the account itself.

• Camera. To scan the room and to photograph rooms and products. Required for the core feature; nothing is recorded or streamed anywhere while you scan.
• Photo library. Only when you choose to pick an existing picture. We read the images you select and nothing else.
• Notifications. Optional. Used for two things only: telling you a try-on is ready, and reminding you about an unfinished one.

To see where the App confuses people we record what happens in it: a screen was opened, a button was tapped, the questionnaire reached step four, a try-on was started and then kept. Those events are processed by Amplitude on our behalf, in their European data centres.

• What an event carries: the name of the screen or button, the step you reached, plain counters (rooms, frames, try-ons), your account identifier, app version, iOS version, device model and the country your IP resolves to.
• What an event never carries: your photos, the instruction you wrote for a try-on, the names you gave rooms or products, your email, your precise location or your advertising identifier.
• We do not use these events for advertising, we do not sell them, and we do not combine them with data bought from anyone else.
• You can turn analytics off in the App: Settings → Anonymous analytics. With the switch off the App stops sending events; the ones already sent can be deleted on request.

The App itself uses no cookies. This website does: besides what is needed to serve the pages, Google Analytics and Amplitude tell us which pages people read before they download, and the Pinterest tag tells us which of our pins and ads led to a download. They only ever see your visit to this site — never anything from inside the App.

• In the EU, the EEA and the UK nothing is loaded until you say so: we ask on your first visit, and “Customise” lets you take analytics or advertising separately. Whatever you leave off is never loaded — Google Analytics only stays on in its cookieless mode, which sets no cookies at all.
• Elsewhere they run from the first page, and you can stop them with your browser’s cookie settings, a tracker blocker, or the Google Analytics opt-out add-on.
• To change your choice, clear this site’s data in your browser and answer again.

If you are in the EU, the EEA or the UK, the legal bases under the GDPR are these: performing our contract with you (running the App, rendering try-ons, managing your subscription); our legitimate interests (keeping the service secure, preventing abuse, fixing crashes, and understanding how the App is used so we can improve it); and your consent, where you gave it (notifications, camera and photo access). You can withdraw consent at any time in iOS Settings, and you can object to the analytics described above by switching it off in the App.

We use a small number of processors, each for one job. They act on our instructions and may not use your data for their own purposes.

• Google Firebase — authentication, database, file storage, server functions and push delivery.
• Google (Gemini API) and OpenAI — image generation for try-ons. Only one of them handles any given try-on.
• RevenueCat — subscription status and receipt validation.
• Amplitude — product analytics: the usage events described above and the pages you open on this website, stored in the EU.
• Apple — sign-in, payment, subscription management and push delivery.
• Cloudflare — hosting for this website only.
• Google Analytics and Pinterest — website statistics and ad measurement, on this site only and never inside the App. See “Cookies on this website” above.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

Our providers operate globally, so your data may be processed outside your country, including in the United States. Transfers out of the EEA and the UK rely on the European Commission’s Standard Contractual Clauses and the equivalent UK addendum, which our providers have in place.

Rooms, plans, photos and try-ons are kept until you delete them or delete your account. Subscription records are kept for as long as tax and accounting law requires. Usage events are kept for two years, after which Amplitude deletes them. When you delete your account we remove your data from live systems immediately; encrypted backups held by our providers roll over within 30 days.

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or hand it over in a portable format. The fastest route for deletion is in the App itself: Settings → Delete account. If you no longer have the App or cannot sign in, write to support@ai-roomplanner.app from the address on your account, and we will delete the account and everything in it. For anything else, email us at the same address.

If you are in the EU, the EEA or the UK you may also complain to your national data protection authority. If you are a California resident, you have the rights to know, delete, correct and opt out under the CCPA — and since we neither sell nor share your personal information, there is nothing to opt out of.

Deleting your account does not cancel your subscription. Subscriptions are managed by Apple: cancel in Settings → your name → Subscriptions.

Traffic between the App and our servers is encrypted in transit. Files and database documents are stored encrypted at rest by our providers, behind access rules that scope every read and write to your own account. Server-side fields such as your subscription status and usage counters cannot be written from a device at all. No system is perfect, but we keep the number of places your photos can go as small as we can.

RoomPlanner is not directed at children and is not intended for anyone under 13. We do not knowingly collect data from children. If you believe a child has given us data, write to us and we will delete it.

If we change how we handle your data we will update this page and move the date at the top. Material changes will also be announced in the App before they take effect.

Questions, requests or complaints: support@ai-roomplanner.app.