Privacy Policy

1. The data we collect

• Account data: your email address, name and profile photo if your sign-in provider (Apple or Google) shares them, and an account identifier. The iOS app may start you in a guest session with an anonymous identifier.
• Your content: the photos you upload, the text you enter (such as custom styles, room types, colours and descriptions), your AI design chats, the images we generate for you, room scans, projects, 3D models and saved room-editor scenes.
• Usage data: a record of each generation (the tool used and when), the ratings you give results, your credit balance, and the status of your purchases and subscriptions.
• Device data: an identifier we use to grant free credits only once: a device identifier in the iOS app, and your account identifier on the web. In the iOS app, also app analytics, crash reports and performance data, and an Apple Search Ads attribution token, which is Apple's privacy-preserving way of telling us which ad campaign led to an install and doesn't use your advertising identifier.
• Payment data: our payment processor (for web purchases) and Apple (in the iOS app) process your payment details. We receive the purchase and subscription status, not your full card number.
• Support data: the messages and attachments you send us.
• Technical data: your IP address and request logs, which we use for security and to prevent abuse.
• Website measurement data, only if you allow it in the cookie banner: the pages you visit, the actions you take (such as starting a tool, creating an account or making a purchase), how you reached the site, and general information about your device, browser and approximate location. It is tied to a random identifier stored in your browser, not to your name or email address. When you buy a plan, we tell Google Analytics that a purchase happened, using that same random identifier.

2. How we use it, and why we're allowed to

• To provide the Service: creating your account, generating results, saving your work, syncing it between the web and iOS, and handling purchases and credits. Legal basis: performance of our contract with you.
• To keep the Service safe and fair: preventing fraud and abuse, including free-credit abuse, securing accounts, and enforcing our Terms. Legal basis: our legitimate interests.
• To improve quality: reviewing samples of recent results, the instructions sent to our AI providers and your ratings, to find and fix poor output. This review is carried out by our team and by service providers bound by confidentiality. Legal basis: our legitimate interests.
• To understand and fix the iOS app: analytics, crash reports and performance data. Legal basis: our legitimate interests, and your consent where the law requires it (for example, the tracking prompt on iOS).
• To understand how the website is used and how our advertising performs: counting visits and actions, and learning which of our ads led to a visit or a purchase. Legal basis: your consent, which you give or refuse in the cookie banner and can withdraw at any time.
• To support you: answering your requests. Legal basis: contract and legitimate interests.
• To comply with the law: for example, tax, accounting and lawful requests from authorities. Legal basis: legal obligation.

We do not sell your personal data, and we do not use your content for advertising.

3. How AI processing works

To generate a result, we send your photo and your instructions to AI models run by us and by the AI providers described in section 4. The results come back to us and are stored in your account. Chat messages, and any photos you add to a chat, are processed the same way.

4. Who we share data with

We share personal data only with the categories of service providers who help us run the Service, and only what each needs:

• AI providers, which process your photos and instructions to generate results, analyse images and floor plans, create 3D models and power the AI design chat.
• A visual search provider, for furniture search. It receives the image you search with and your country.
• Hosting, database and storage providers, which run the Service and store your account and content.
• Payment and subscription providers: our payment processor, for web purchases; Apple, for App Store purchases; and providers that manage subscriptions and in-app offers on our behalf, which receive your account identifier and email.
• Analytics, crash-reporting and error-monitoring providers. Crash reports are collected in the iOS app only. On the website, an analytics provider and an advertising measurement provider receive the website measurement data described in section 1, and only if you allowed it.
• Our customer support platform, which stores your support requests.

These providers may only use the data to provide their services to us, except where the law makes them responsible for it themselves, as it does for our payment processor's records of your payments. We may also disclose data if the law requires it, to protect rights and safety, or as part of a merger or sale of our business, in which case this policy continues to protect it.

5. International transfers

We are based in the United Arab Emirates, and our team and providers may store, process or access data in the United Arab Emirates, the United States and other countries, including outside the European Economic Area, the United Kingdom and Türkiye. Where we transfer personal data internationally, we rely on the safeguards the law provides, such as standard contractual clauses, and on the transfer mechanisms permitted under the UAE Personal Data Protection Law, the GDPR, the UK GDPR and KVKK.

6. How long we keep data

• Photos you upload for a generation: deleted from our storage automatically after 48 hours. Photos you add to an AI design chat are kept with the chat.
• Generated images, generation history, chats, scans, projects, 3D models and saved scenes: kept while your account exists. Deleting an item removes it from your account straight away; its image files are removed from our storage when your account is deleted.
• Your account: kept until you delete it. When you ask us to delete it, it is locked straight away and permanently deleted after 30 days (see section 8).
• Purchase and refund records: kept as long as tax and accounting law requires, with your identity removed where possible.
• The identifier used for free credits (a device identifier in the iOS app, your account identifier on the web): kept after your account is deleted, only to stop free credits being claimed again.
• Website measurement data: kept for up to 14 months.

7. Images and shared links

Your images are stored at long, hard-to-guess web addresses that we don't publish anywhere, but they are not password-protected: anyone who has such a link can open it. When you share a result or a room-editor scene, anyone with that link can view it. Only share links with people you trust.

8. Deleting your account

In the iOS app, go to Settings and choose to delete your account. On the web, email [email protected] from the address on your account and we will delete it for you.

• Your account is locked immediately, and deleted permanently 30 days later. Until then, you can cancel the deletion in the iOS app, or by emailing [email protected].
• Deletion removes your account, your designs, history, chats, scans, projects, 3D models, saved scenes, credits and stored images, and your customer records with our payment processor and our subscription-management provider. Our payment processor keeps its own records of your payments, as the law requires of it, and Apple keeps its own records of App Store purchases, each under its own privacy policy; and we keep the purchase records tax law requires, with your identity removed where possible.
• Cancel any active subscription first: an active web subscription must be cancelled before your account can be deleted, and deleting your account doesn't cancel an App Store subscription; cancel that in your Apple ID settings.

9. Your rights

Depending on where you live, you have the right to:

• know whether we process your data, and get a copy of it;
• have inaccurate data corrected, and have your data deleted;
• restrict or object to our use of your data, including use based on our legitimate interests;
• receive your data in a portable format;
• withdraw your consent at any time, where we rely on it;
• complain to a supervisory authority: the UAE Data Office, your local data protection authority in the EU or UK, or the Turkish Personal Data Protection Authority (KVKK).

To use these rights, email [email protected]. We will reply within 30 days, and may ask you to confirm your identity first.

10. Children

The Service is not directed at children, and you must be at least 16 to use it. If you believe a child has given us personal data, contact us and we will delete it.

11. Cookies and similar technologies

The website always uses what it needs to work: keeping you signed in and remembering preferences such as your language, your theme and your answer to the cookie banner. These are not optional.

With your permission, the website also uses cookies for two purposes. Analytics: counting visits and the features people use, so we can improve the site. Ad measurement: learning which of our ads led to a visit or a purchase. We do not use them to build advertising profiles of you. Nothing for these purposes is loaded or stored until you say yes in the cookie banner, and the website works the same if you say no.

You can change your answer at any time with the "Cookie settings" link at the bottom of the website's pages. If you take your permission back, we stop measuring and remove the analytics cookies from your browser. We ask again after 12 months, or sooner if the purposes change.

The iOS app uses the analytics, crash reporting and ad attribution described above. It asks for your permission before tracking you across other companies' apps and websites, and you can change that at any time in your iPhone's Settings.

12. Security

We use encryption in transit, access controls and other safeguards appropriate to the data we hold. No system is perfectly secure, so if you think your account has been compromised, contact us straight away.

13. Changes to this policy

We will update this policy when our practices change. We will tell you about material changes in advance, by email or in the app, and the date at the top shows the latest version.

14. Contact

iHux Solutions FZ-LLC, Ras Al Khaimah Economic Zone (RAKEZ), Ras Al Khaimah, United Arab Emirates. Email: [email protected].