# Privacy Policy for HomeAI

**Last Updated:** January 20, 2025

## Introduction

Welcome to HomeAI ("we," "our," or "us"). We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our mobile application.

## Information We Collect

### 1. Device Information
- **Device ID**: We generate and store a unique identifier for your device to provide anonymous authentication and maintain your account across app sessions.
- **Device Model and OS Version**: We collect basic device information (brand, model, operating system version) for compatibility and troubleshooting purposes.

### 2. Account Information
- **Email Address (Optional)**: If you choose to link your account with an email address for recovery purposes, we collect and store your email.
- **User ID**: A unique identifier assigned to your account.

### 3. Content You Create
- **Photos and Images**: Original room photos you upload for AI design generation.
- **Generated Designs**: AI-generated interior design images based on your photos.
- **Design Preferences**: Your selected room types, design styles, and color palettes.
- **Project Metadata**: Information about your saved designs including creation dates and visibility settings.

### 4. Usage Information
- **App Analytics**: We collect anonymous usage data including app launches, feature usage, and navigation patterns through Firebase Analytics.
- **Crash Reports**: Automated crash reports through Firebase Crashlytics to help us identify and fix technical issues.
- **Subscription Status**: Information about your premium subscription status and purchase history through RevenueCat.

### 5. Social Interactions
- **Likes and Views**: Records of designs you've liked and designs you've viewed.
- **Public Designs**: If you choose to make your designs public, they will be visible to other users.

## How We Use Your Information

We use the collected information for the following purposes:

### Service Delivery
- Create and maintain your account
- Generate AI-powered interior designs using your photos
- Store and display your design projects
- Sync your data across devices (when email is linked)

### Premium Features
- Process and manage your subscription purchases
- Provide access to premium features
- Handle subscription renewals and cancellations

### App Improvement
- Analyze app usage to improve features and user experience
- Identify and fix technical issues and bugs
- Develop new features based on usage patterns

### Communication
- Send important updates about the service
- Respond to your support requests
- Notify you about subscription status changes

## Third-Party Services

We use the following third-party services to provide and improve our app:

### Supabase (Data Storage)
- **Purpose**: Backend database and file storage
- **Data Shared**: User accounts, projects, images, likes
- **Privacy Policy**: [<https://supabase.com/privacy>](<https://supabase.com/privacy>)

### Google Gemini AI
- **Purpose**: AI-powered interior design generation
- **Data Shared**: Room photos you upload for processing
- **Privacy Policy**: [<https://policies.google.com/privacy>](<https://policies.google.com/privacy>)
- **Note**: Images are processed temporarily and not stored by Google Gemini

### RevenueCat (Subscription Management)
- **Purpose**: Handle in-app purchases and subscriptions
- **Data Shared**: Purchase history, subscription status
- **Privacy Policy**: [<https://www.revenuecat.com/privacy>](<https://www.revenuecat.com/privacy>)

### Firebase (Analytics & Crashlytics)
- **Purpose**: App analytics and crash reporting
- **Data Shared**: Anonymous usage data, crash logs, device information
- **Privacy Policy**: [<https://firebase.google.com/support/privacy>](<https://firebase.google.com/support/privacy>)

## Data Storage and Security

### Storage Location
Your data is securely stored on Supabase servers, which use industry-standard security measures including:
- Encrypted data transmission (TLS/SSL)
- Secure database access controls
- Regular security audits and updates

### Image Storage
- Original and generated images are stored in secure cloud storage buckets
- Images can be set as private (visible only to you) or public (visible to other users)
- You can delete your images at any time

### Data Retention
- Account data is retained for as long as your account is active
- Deleted projects and images are permanently removed from our servers
- Anonymous analytics data may be retained for up to 26 months

## Your Rights and Choices

### Account Control
- **View Your Data**: Access all your saved designs and account information through the app
- **Delete Projects**: Remove individual designs from your account
- **Privacy Settings**: Control whether your designs are public or private
- **Delete Account**: Permanently delete your account and all associated data

### Email Linking (Optional)
- You can optionally link an email address to your account for recovery purposes
- Email linking is entirely optional and not required to use the app

### Marketing Communications
- We do not send marketing emails unless you explicitly opt-in
- You can unsubscribe from any communications at any time

## Children's Privacy

HomeAI is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have inadvertently collected information from a child under 13, we will delete that information immediately.

## Data Sharing and Disclosure

We do NOT sell your personal information to third parties.

We may share your information only in the following circumstances:

### With Your Consent
- When you choose to make your designs public, they become visible to other users

### Service Providers
- With third-party services listed above to provide app functionality
- These providers are contractually obligated to protect your data

### Legal Requirements
- To comply with legal obligations, court orders, or government requests
- To protect our rights, property, or safety, or that of others
- To detect, prevent, or address fraud or security issues

## International Data Transfers

Your data may be transferred to and stored on servers located outside your country of residence. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

## Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:
- Updating the "Last Updated" date at the top of this policy
- Displaying a notice in the app
- Sending an email notification (if you've provided an email address)

Your continued use of HomeAI after changes are posted constitutes your acceptance of the updated Privacy Policy.

## California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

- **Right to Know**: Request information about the personal data we collect
- **Right to Delete**: Request deletion of your personal information
- **Right to Opt-Out**: Opt-out of the sale of personal information (Note: We do not sell personal information)
- **Right to Non-Discrimination**: We will not discriminate against you for exercising your privacy rights

To exercise these rights, please contact us at the email address below.

## European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

- **Right of Access**: Obtain confirmation of data processing and access your data
- **Right to Rectification**: Correct inaccurate personal data
- **Right to Erasure**: Request deletion of your data ("right to be forgotten")
- **Right to Restriction**: Restrict processing under certain circumstances
- **Right to Data Portability**: Receive your data in a portable format
- **Right to Object**: Object to processing of your personal data
- **Right to Withdraw Consent**: Withdraw consent at any time

To exercise these rights, please contact us at the email address below.

## Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

**Email**: [email protected]

**Response Time**: We aim to respond to all inquiries within 48 hours.

## Data Protection Officer

For users in the European Economic Area, you can contact our Data Protection Officer at: [email protected]

## Dispute Resolution

If you have a concern about our privacy practices that we cannot resolve, you have the right to lodge a complaint with your local data protection authority.

---

**By using HomeAI, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.**