1. Who we are
The controller of your personal data is:
Dream Blastoff d.o.o.
VAT ID: HR75857547063
Privacy contact: privacy@roomdecor.app
We answer privacy requests within the time the law allows.
2. What we collect
Photos and design choices
When you ask RoomDecor to redesign a room, we receive:
- The room photo you take with the camera or pick from your photo library.
- Your design selections — the category and the preset you chose.
- Your optional notes — any free text you type to guide the edit.
- The generated image that comes back.
We store these so that your gallery works.
Please do not photograph people. RoomDecor is for rooms. We do not use your photos to identify anyone, and we do not perform facial recognition or any other biometric analysis.
Account data
RoomDecor has no username and no password.
The app creates an anonymous account tied to your installation. We store an identifier for that installation. It does not tell us who you are.
Subscription data
Purchases are made through Apple's App Store. We do not see your payment card, your Apple ID, or your billing address. We learn whether a subscription is active, and we keep a count of the redesigns you have used in the current billing period so we can apply your plan's limits.
Technical data
Our server keeps short-lived operational logs, which include your IP address, the time of each request, and whether it succeeded. Our network provider processes your IP address to route your requests and to block abuse.
What we do not collect
We do not use analytics, advertising, or tracking. We do not collect your location, your contacts, your device advertising identifier, or your activity in other apps or websites.
3. How we use your data, and our legal basis
Under the EU and UK GDPR we must tell you the legal basis for each use. This table covers everyone; if you are outside Europe, read it simply as a description of what we do.
| What we do | Why | Legal basis (EU/UK GDPR) |
|---|---|---|
| Send your photo and selections to our AI provider and return the result | It is the product you asked for | Performance of a contract — Art. 6(1)(b) |
| Store your photos, results and gallery | So you can see your rooms | Performance of a contract — Art. 6(1)(b) |
| Maintain your anonymous account | You cannot use the app without one | Performance of a contract — Art. 6(1)(b) |
| Check your subscription and count your remaining redesigns | To provide the service you bought | Performance of a contract — Art. 6(1)(b) |
| Prevent fraud and abuse | To keep the service secure and available | Legitimate interests — Art. 6(1)(f) |
| Respond to your privacy requests | To comply with data protection law | Legal obligation — Art. 6(1)(c) |
We do not use your data for marketing, and we do not make decisions about you by automated means that produce legal or similarly significant effects.
4. AI processing
To edit your photo, we send your room photo, your selections, and your notes to an AI image-processing provider, which returns the edited image.
Our provider acts as our processor under a written contract. That contract binds the provider not to use your data to train or improve its models, and not to keep your data beyond what is needed to complete the request and to detect abuse.
We do not train AI models on your photos.
We ask for your permission before the first photo is sent, and you can withdraw it by deleting your account.
5. Who else receives your data
These are the recipients of your data.
| Recipient | What they receive | Why | Where |
|---|---|---|---|
| Our AI image-processing provider | Your room photo, selections, notes; the generated image | To perform the AI edit | United States |
| Our hosting provider | Everything we store: photos, results, and account records | Hosts our server | European Economic Area |
| Our object storage provider | Everything we store: photos, results, and account records | Stores and backs up our data | European Economic Area |
| Our network security provider | Your IP address and request data in transit | Routes traffic and blocks attacks | Worldwide |
| Our subscription management provider | An anonymous subscriber identifier, your purchase history for this app, and the country of your App Store account | Verifies your subscription | United States |
| Apple Inc. | Device attestation and all payment data | Identity, anti-fraud, and payment | Worldwide |
Apple acts independently. The others act as our processors under written data processing agreements.
Beyond these, we disclose your data only where the law requires it — for example, a valid court order — or to establish or defend legal claims.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising or targeted advertising.
6. Where your data goes
Your photos and account records are stored inside the European Economic Area.
Some of what we do happens outside it: the AI edit and subscription verification are processed in the United States.
For those transfers we rely on the European Commission's Standard Contractual Clauses, on the UK International Data Transfer Addendum for users in the United Kingdom, and on the EU–US and UK–US Data Privacy Framework where the recipient is certified. You can ask us for a copy of these safeguards at privacy@roomdecor.app.
Wherever you live, your data may be handled in the European Economic Area, the United States, and the countries in which our network provider and Apple operate.
7. How long we keep it
| Data | Retention |
|---|---|
| Room photos, generated images, notes and selections | Until you delete them. When you delete a room or your account, we keep the photos and results for a limited period so that we can answer a payment dispute, and then erase them. |
| Account record | Until you delete your account, and then for the same limited period as your photos |
| Subscription records held by our subscription management provider | Until you delete your account. The provider may retain purchase records for its own legal and tax obligations. |
| Redesign counts for a billing period | For a limited time after that billing period ends, so that a late renewal, refund or reinstated subscription is counted correctly. They are then erased. |
| Operational logs | Overwritten automatically after a short period |
8. Your rights
Everyone, wherever they live, gets the same rights here. You can exercise most of them yourself, in the app, at any time:
- See everything we hold — your gallery is the complete set of photos we store.
- Delete any individual room, which removes it from your gallery. We keep the original and the result for a limited period so that we can answer a payment dispute, and then erase them.
- Delete your entire account, in Settings. This removes your access at once and irreversibly, and erases your record at our subscription management provider. We keep your photos, generated images and account record for a limited period so that we can answer a payment dispute, and then erase them. Deleting your account does not cancel your App Store subscription — cancel that in your Apple ID settings, or you will keep being charged.
By writing to privacy@roomdecor.app you can also ask us to correct your data, to send you a portable copy of it, to restrict how we use it, or to object to the uses we base on legitimate interests. Exercising any of these rights is free, and we do not treat you differently for using them.
If your law gives you a right that is not listed here, write to us and we will honour it.
A few things specific laws require us to add:
- EEA, UK and Switzerland: you have the right to lodge a complaint with a data protection supervisory authority, including the one where you live or work.
- Quebec: the privacy contact in section 1 is the person responsible for the protection of personal information. Section 6 is our notice about processing outside Quebec.
- Brazil: the privacy contact in section 1 is our encarregado for LGPD purposes.
9. Security
We protect your data with appropriate technical and organisational measures, including encryption in transit, and we keep as little about you as the product allows.
10. Children
RoomDecor is not directed to children and is not intended for anyone under 13, or under the higher age your country sets. We do not knowingly collect personal data from children. If you believe a child has used the app and given us data, email privacy@roomdecor.app and we will delete it.
11. Changes to this policy
When we change this policy we update the date at the top. Where the law requires it, we notify you or ask for your consent before a change takes effect.