Privacy Policy

1. Who We Are

Roomframe AI (“we”, “our”, “the app”) is an AI interior redesign service operated by Burhan Boz (individual developer), reachable at support@roomframeai.com.

This policy explains what personal data we collect, why, and how we protect it.

2. What We Collect

2.1 You give us directly

2.2 Automatically

2.3 We do not collect

• Your Apple / Google password
• Payment card numbers (Apple handles all billing)
• Biometric data
• Health or precise geolocation data
• Contact list or calendar
• Microphone or audio

3. How We Use Your Data

1. Provide the service — uploading your room photo, routing to AI models, returning the redesigned output.
2. Manage your subscription — validating Apple receipts, crediting your wallet, processing plan changes.
3. Improve model quality — aggregated, anonymised rating and duration data helps us decide which AI models stay active.
4. Security & abuse prevention — rate limiting by user/IP, detecting brute-force login attempts.
5. Communicate with you — password resets, important service notices, optional product emails (you can opt out).

4. Third-Party Services We Use

We share the minimum necessary data with these providers so the app works. Each has its own privacy policy.

fal.ai processes your photo to run the generation (typically under a minute; a room video takes a few minutes). We instruct fal.ai not to store the request itself (the photo links and the prompt), and the images and videos it generates are deleted from fal.ai's servers within 24 hours — we copy each result to our own storage as soon as it is ready. For Redesign, Empty Room, Style Transfer, Outdoor designs and Magic Edit, fal.ai runs Nano Banana 2 through Google, which receives your photo, any style-reference image and the design prompt to generate the image; Google's handling of this data is governed by its own API terms and privacy policy. Replicate, used for designs made with “Preserve Layout”, background removal and 4K upscaling, deletes the inputs and outputs of each prediction one hour after it finishes. Anthropic (Claude) analyses your photo and writes the design plan (usually under a minute); under Anthropic's commercial terms it does not use this data to train its models, and it deletes API inputs and outputs within 30 days. Our presigned links expire after 1 hour.

Analytics: the app sends usage events and screen recordings to PostHog's EU cloud (Frankfurt). Recordings are masked on your device — photos become placeholders, text fields are hidden and the system photo picker is never recorded — so no photo, name or email reaches PostHog. On roomframeai.com, PostHog stores a random identifier in a first-party cookie and in local storage to count visits; you can delete or block it in your browser settings.

Ad measurement (Meta): from app version 2.4.1, the app includes Meta's app events SDK so we can tell whether our Facebook and Instagram ads bring people to the app. It reports installs and app opens, one event when your first design finishes, and — through RevenueCat — when a subscription starts, linked to a random identifier the SDK creates. The app does not ask for, read or send your device's advertising identifier (IDFA) and does not track you across other companies' apps or websites; Meta measures campaigns in aggregate through Apple's SKAdNetwork. Your photos, designs, name and email never reach Meta.

In-app consent: before your first photo upload, the app shows a consent screen that discloses exactly what is sent (your room photo, any mask or reference image, and your design choices) and to whom (fal.ai, Google, Replicate and Anthropic, as above). Nothing is transmitted to these AI providers until you explicitly agree there. You can withdraw consent at any time by deleting your account or contacting support@roomframeai.com.

5. Where Your Data Lives

• Primary storage and servers: AWS eu-central-1 (Frankfurt, EU).
• Apple In-App Purchase receipts are validated against Apple's servers.
• AI generation runs on fal.ai's GPU infrastructure (United States) for the duration of each job — on Google's (United States) for the Nano Banana 2 designs fal.ai routes there, and on Replicate's (United States) for “Preserve Layout”, background removal and 4K upscaling.
• AI photo analysis and design planning run on Anthropic's infrastructure (United States) for the duration of the analysis.

Where data leaves the EU/EEA/UK (e.g. during AI generation), it happens under appropriate safeguards such as Standard Contractual Clauses with our providers.

6. How Long We Keep It

Deleting your account starts a 14-day grace window during which you can restore it by logging back in. After 14 days your data is permanently purged from our primary stores; backups rotate out shortly after.

7. Your Rights

Depending on where you live, you have the right to:

• Access — request a copy of your data (in-app data export is available)
• Correct — update inaccurate info
• Delete — via the in-app button, or on request by email
• Port — receive your data in machine-readable format
• Object / Restrict — ask us to stop certain processing
• Withdraw consent — for any opt-in you gave

To exercise any of these, email support@roomframeai.com. We respond within 30 days. EU/UK residents can also complain to their data protection authority.

8. Children

The app is not intended for users under 16. We do not knowingly collect data from children. If we learn a child created an account, we delete it.

9. Security

• HTTPS everywhere (TLS 1.2+)
• Server-side encryption (AES-256) for all uploaded and generated images
• Token-based authentication with short expiry and rotation
• Rate limiting on every endpoint class
• Least-privilege access to storage
• No personal data in error logs

No system is perfect. If a breach occurs that affects you, we will notify you within 72 hours of discovery.

10. Changes

We post updates here and change the “Last updated” date above. Material changes trigger an in-app notification.

11. Contact

• Privacy and data questions: support@roomframeai.com
• General support: support@roomframeai.com