Privacy Policy
Last updated: 11 September 2026
Who is responsible for your data
The data controller is Innomatrix Limited, a company registered in England and Wales.
- Company number: 16188012
- Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
- Contact: support@roommakeover.io
This policy explains what we do with personal data when you use RoomMakeover. It is written to meet UK GDPR requirements.
What we collect
Account data. Your email address, and your name and profile picture if you sign in with Google or GitHub. If you register with an email address and password, the password is stored as a cryptographic hash and is never readable by us or recoverable from our database.
Photos you upload. The images of your rooms. These are personal data when they show your home.
Renders we generate. The output images, stored so you can find them again on the Tasks page.
Usage and billing records. Credit balance, what each render cost, timestamps, and render settings such as style and mode.
Payment data. When card payments are enabled, they are processed by Stripe. We receive confirmation of a payment and the last four digits of the card. We never receive or store full card numbers.
Technical data. IP address, browser type and request logs, kept by our hosting provider for security and debugging.
We do not run advertising trackers, analytics scripts, or third-party cookies. The only cookies we set are the ones that keep you signed in.
Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Create and run your account | Performance of a contract |
| Process your photos into renders | Performance of a contract |
| Store renders so you can retrieve them | Performance of a contract |
| Track credits and process payments | Performance of a contract |
| Keep accounting records | Legal obligation (UK tax law) |
| Prevent fraud and abuse of free credits | Legitimate interests |
| Diagnose faults and keep the service secure | Legitimate interests |
| Send service emails about your account | Performance of a contract |
We do not sell personal data, and we do not use your photos or renders to train AI models.
Who we share it with
OpenAI processes the photos you upload in order to generate renders. This is the core of how the service works: your photo is sent to OpenAI's image editing model and the result comes back to us. OpenAI acts as our processor for this purpose.
Cloudflare hosts the application, stores your photos and renders, and runs our database.
Google and GitHub receive nothing from us, but if you choose to sign in with one of them, they confirm your identity to us and pass us your email address, name and profile picture.
Stripe processes payments when card payments are enabled.
We also disclose data where the law requires it, or to establish or defend legal claims.
Data leaving the UK
OpenAI and Stripe are based in the United States, and Cloudflare operates globally. Transferring your data outside the UK is necessary to provide the service.
These transfers rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or on UK adequacy regulations where they apply to the receiving country. You can ask us for details of the safeguards in place.
How long we keep it
Photos and renders stay until you delete them. Deleting a render on the Tasks page removes both the database record and the image file from storage; it is not hidden from a list while the file remains. If you close your account, we delete them within 30 days.
Account data is kept while the account is open and for 30 days after closure.
Transaction and accounting records are kept for 6 years after the end of the relevant financial year, because UK company and tax law requires it. This applies even after you close your account, and it is a legal obligation we cannot waive on request.
Technical logs are kept for up to 30 days.
Your rights
Under UK GDPR you can ask us to:
- give you a copy of the personal data we hold about you
- correct data that is wrong
- delete your data, subject to records we must keep by law
- restrict or object to how we use it
- provide your data in a portable format
- withdraw consent where we relied on consent
To exercise any of these, email support@roommakeover.io from your account address. We respond within one month.
You can delete most of your data yourself: renders on the Tasks page, and your whole account from account settings.
There is no automated decision-making that produces legal or similarly significant effects about you.
Complaints
If you think we have handled your data badly, tell us first and we will try to fix it. You also have the right to complain to the UK supervisory authority:
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline 0303 123 1113, ico.org.uk.
Children
The service is not for people under 16. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
Security
Data is transmitted over HTTPS and stored on Cloudflare infrastructure with access limited to those who need it. No system is perfectly secure, but we will tell you and the ICO about a breach affecting your data within the timeframes the law requires.
Changes
We may update this policy. Material changes will be notified to registered users by email before they take effect. The date at the top shows when it last changed.
Contact
Innomatrix Limited, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. support@roommakeover.io
iOS app
You can purchase, restore and use in-app purchases without creating or signing in to a RoomMakeover account. We create a random private guest identifier on the server to keep the purchase and credit balance working on the current device. It contains no name, email address or profile information. Apple processes in-app purchases; we store transaction identifiers, the guest or account identifier, subscription status and credit amounts, but never receive your payment card details.
Signing in is optional and is offered only to save purchases and credits across supported devices. If you later choose to sign in with Apple or email, the guest purchase history and unused credits are moved to your account. When you sign in with Apple, Apple provides an account identifier and may provide your name and email address (including a private relay address).
Before the first upload, the iOS app shows a short notice beside the generation button explaining that your selected room photo and design instructions are sent to OpenAI to create your design and stored with Cloudflare. Tapping Agree & redesign gives permission for this processing. Merely selecting a photo, browsing styles, or opening this policy does not give permission or upload your photo.
We remember your choice so you do not have to confirm it for every design. You can withdraw permission by turning off Allow AI photo processing in Settings; the app will ask again before a future upload. Withdrawal stops future processing but does not delete earlier uploads or results. The retention and account-deletion rules in this policy still apply. Avoid uploading photos that contain people, private documents, or other sensitive information.
The My rooms gallery is stored on the current device. Removing an item from that gallery removes the local entry; it does not delete the server copy. Deleting your account in Settings removes sign-in credentials and generated images, clears the local gallery and unused credits, and anonymizes the account record. Anonymous transaction references are retained to prevent duplicate redemptions. Other accounting records are retained as described above.
Android app
The Android app lets you sign in with Google or with your RoomMakeover email and password. Google provides your account identifier, email address and available profile information to create or access your RoomMakeover account. Your sign-in session is encrypted on your device using Android Keystore. Google Play processes Android subscriptions and credit-pack purchases. We store purchase tokens, order identifiers, subscription status and credit amounts to verify payment, deliver credits, restore purchases and prevent duplicate redemption. We send Google an obfuscated account identifier to associate the purchase with your RoomMakeover account; we do not receive your full payment card details.
The app asks you to choose a photo or open your camera only when you use that feature. Choosing a photo does not upload it. Before the first AI upload, the app asks you to agree to sending the selected photo and design instructions to our service using Cloudflare and OpenAI. You can withdraw this permission in Settings. My rooms history is stored on the current device and separated by account. Account deletion removes the account data and generated images under the retention rules above; transaction references needed to prevent duplicate redemption and meet accounting obligations are retained.
If you report an AI result, we store the result image link, your report text, account identifier and submission time so our team can investigate unsafe or inappropriate results. These reports are removed when you delete your account.
You can request account or associated-data deletion without reinstalling the app using our account deletion page.