Privacy Policy

Effective date: September 13, 2026

This Privacy Policy applies to the "Roomy - Interior Designer" mobile application, together with any related services operated by Eilon Udi (collectively, the "Application" or the "Service"). It describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• Account: A unique account created for You to access the Service or parts of the Service.
• Application: Refers to "Roomy - Interior Designer", the software program provided by the Company.
• Company: (referred to as either "the Company", "the Service Provider", "We", "Us" or "Our" in this Agreement) refers to Eilon Udi, an individual developer based in Israel, who is the data controller for the Personal Data processed through the Application.
• Country: Refers to Israel.
• Device: Any device that can access the Service such as a computer, a cellphone, or a digital tablet.
• Personal Data: Any information that relates to an identified or identifiable individual.
• Service: Refers to the Application.
• Third-Party Service Provider: Any natural or legal person who processes data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service, or to assist the Company in analyzing how the Service is used.
• User Provided Data: Data You actively provide to the Application, such as photos of Your rooms, text descriptions or prompts, and design preferences.
• Usage Data: Data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (e.g., the duration of a screen visit).
• You: The individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

User Provided Data

To deliver its features, the Application may ask You to provide:

• Account data: When You create an Account, We collect Your email address, Your name (if provided), and a unique user identifier. If You sign in with a third-party identity provider such as Apple or Google, We receive the identifier and email address that provider shares with Us. We never receive or store Your password for such providers.
• Photos and images: Pictures of Your rooms or spaces that You capture with Your Device's camera or select from Your photo library, used to generate interior design suggestions.
• Design inputs: Text descriptions, prompts, style choices, room types, and other preferences You enter to guide the design generation.
• Generated designs: The AI-generated images and recommendations produced from Your inputs, which are stored in Your Account so You can access them across Your Devices.
• Support communications: Your email address and the contents of Your message when You contact Us.

Camera and photo library access is only requested when You choose to use a feature that needs it, and You can revoke this permission at any time in Your Device settings.

Usage Data

Usage Data is collected automatically when using the Service. It may include:

• Your Device's Internet Protocol (IP) address
• The screens of the Application that You visit, the time and date of Your visit, and the time spent on those screens
• The total time spent in the Application
• The type of mobile Device You use, Your mobile operating system and version, and unique Device or installation identifiers
• Crash reports and other diagnostic data

Purchase Data

If You purchase a subscription or other in-app product, the purchase is processed by Apple through the App Store. We do not receive Your payment card details. We receive a transaction identifier, the product purchased, the purchase date, and subscription status, which We process through RevenueCat and link to Your Account to manage Your entitlements.

Cookies and Tracking Technologies

The Application or its third-party SDKs may use cookies, SDKs, pixels, and similar technologies to support functionality, analytics, or service delivery. Where required by applicable law, We will obtain Your consent before using non-essential tracking technologies. The Application does not track You across other companies' apps or websites for advertising purposes.

Artificial Intelligence

The Application uses Artificial Intelligence (AI) technologies to generate interior design suggestions and images based on the photos and inputs You provide. To deliver these features, Your photos and design inputs may be transmitted to and processed by Our servers and by third-party AI service providers acting on Our behalf. These providers are contractually restricted to using Your data only to generate the requested output, and We do not permit them to use Your photos or inputs to train their models.

AI-generated designs are automated output and may be inaccurate, incomplete, or unsuitable for Your space. They are provided for inspiration only and do not constitute professional architectural, structural, or safety advice. All AI processing is performed in accordance with this Privacy Policy and applicable laws. If You have questions about the AI features or related data processing, please contact Us.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

• To provide and maintain our Service, including to generate designs from Your photos and inputs, and to monitor the usage of our Service.
• To manage Your Account: To register You as a user of the Service, authenticate You, and store Your photos and generated designs in Your Account.
• To manage Your purchases: To validate and manage subscriptions and in-app purchases and to restore them across Your Devices.
• To contact You: To send important information, required notices, and responses to Your support requests.
• To send marketing communications: Where permitted by law and, where required, with Your consent, to inform You about features, offers, and updates. You may opt out at any time.
• To improve the Service: For data analysis, identifying usage trends, diagnosing crashes, and evaluating and improving Our Service, products, and Your experience.
• For business transfers: To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, in which Personal Data held by Us about our Service users is among the assets transferred.
• For legal compliance: To comply with legal obligations, resolve disputes, and enforce Our agreements.

Legal Basis for Processing (EEA and UK)

If You reside in the European Economic Area (EEA) or the United Kingdom, We process Your information under the following legal bases:

• Performance of a contract: To provide the Service You requested, including creating and maintaining Your Account, processing Your photos to generate designs, and managing Your purchases.
• Your consent: For camera and photo library access, non-essential analytics and tracking technologies, and marketing communications, where consent is required.
• Legitimate interests: To secure, maintain, and improve the Service, and to diagnose crashes, where these interests are not overridden by Your rights.
• Compliance with legal obligations.

Your Consent

Where processing is based on consent, You provide that consent by affirmatively opting in to the relevant feature or action, such as granting camera or photo library permission. You may withdraw consent at any time without affecting processing carried out before withdrawal, by changing Your Device settings or by contacting Us. Processing based on other lawful bases is carried out as described above.

Sharing Your Personal Data

We may share Your Personal Data in the following situations:

• With Third-Party Service Providers: With trusted service providers who process data on Our behalf, do not have an independent use of the information We disclose to them, and have agreed to adhere to the rules set forth in this Privacy Policy. These include authentication, analytics, crash reporting, subscription management, cloud hosting and storage, and AI processing providers.
• For business transfers: In connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company. We will provide notice before Your Personal Data becomes subject to a different Privacy Policy.
• For legal reasons: As required by law, such as to comply with a subpoena or similar legal process, or when We believe in good faith that disclosure is necessary to protect Our rights, protect Your safety or the safety of others, investigate fraud, or respond to a government request.
• With Your consent: For any other purpose with Your consent.

We do not sell Your Personal Data, and We do not share it with third parties for their own marketing purposes.

Third-Party Services

The Application uses the following third-party services, each of which has its own privacy policy governing how it handles data:

• Google Analytics for Firebase : Collects anonymized usage data such as screen views, session duration, and Device type to help Us understand how the Application is used.
• Firebase Crashlytics : Collects crash reports and diagnostic data to help Us identify and fix stability issues.
• RevenueCat : Manages subscriptions and in-app purchases and receives an anonymous app user identifier together with transaction data from Apple.
• Apple App Store : Processes all payments for subscriptions and in-app purchases.
• AI processing providers: Third-party AI services that process Your photos and design inputs on Our behalf to generate designs, as described in the Artificial Intelligence section above.

Only the data necessary for each service is transmitted to it. Firebase does not receive the photos or design inputs You provide to the Application.

Retention of Your Personal Data

We retain Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy:

• Account data, photos, and generated designs: Stored in Your Account and retained for as long as Your Account exists. Photos You upload and designs You generate are not automatically deleted. You can delete individual photos and designs from within the Application at any time, and all of them are deleted when You delete Your Account.
• Data held by AI processing providers: Retained by those providers only as long as needed to generate the requested output, subject to their own retention practices.
• Other User Provided Data: Retained for the duration of Your use of the Application plus 12 months thereafter, unless longer retention is required by law.
• Usage Data and diagnostic data: Retained for up to 24 months from collection, unless longer retention is required for legal compliance.
• Purchase records: Retained for as long as required to manage Your subscription and to comply with tax and accounting laws.
• Aggregated and anonymized data: Retained indefinitely as it no longer identifies You.

Copies of designs and photos stored locally on Your Device remain there until You delete them or uninstall the Application.

International Data Transfers

We and Our Third-Party Service Providers may transfer Personal Data to countries outside Your country of residence, including outside the European Economic Area (EEA), where data protection laws may differ from those in Your jurisdiction. Where applicable law requires safeguards for international transfers, We rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions or other legally recognized transfer mechanisms
• Your consent, where required and legally permitted

Security of Your Personal Data

We provide physical, electronic, and procedural safeguards to protect the information We process and maintain, including encryption of data in transit. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

Data Breach Notification

If a data breach occurs that affects Your Personal Data, We will notify You in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.

Your Rights

Subject to applicable law, You have the following rights regarding Your Personal Data:

• Access: To request a copy of the Personal Data We hold about You.
• Rectification: To request correction of inaccurate or incomplete Personal Data.
• Erasure: To request deletion of Your Personal Data.
• Restriction and objection: To request that We restrict processing, or to object to processing based on legitimate interests or for direct marketing.
• Portability: To receive Your Personal Data in a structured, commonly used, machine-readable format.
• Withdraw consent: To withdraw consent at any time where processing is based on consent.
• Complaint: If You are in the EEA or UK, to lodge a complaint with Your local data protection supervisory authority.

To exercise any of these rights, contact Us at fairyteller.help@gmail.com. We will respond within the time required by applicable law and may need to verify Your identity before acting on Your request.

Deleting Your Data and Your Account

You can delete individual photos and designs from within the Application at any time. You can also delete Your Account entirely from the Application's settings screen. Deleting Your Account permanently removes Your account data, uploaded photos, and generated designs from Our servers, and We will instruct Our Third-Party Service Providers to delete the corresponding data. You may also request Account deletion by contacting Us at the email above.

We may need to retain certain information where We have a legal obligation or lawful basis to do so, such as purchase records required for tax and accounting purposes. Deleting Your Account does not cancel an active subscription; You must cancel it through Your Apple ID settings.

Opt-Out Rights

You can stop further collection of information from Your Device by revoking camera and photo library permissions in Your Device settings or by uninstalling the Application. Uninstalling will stop the Application from collecting data from Your Device, but it does not automatically delete information that has already been transmitted to Us or to Third-Party Service Providers. To have that data deleted, delete Your Account from within the Application or contact Us as described above.

Your California Privacy Rights (CCPA/CPRA)

If You are a California resident, You have the right to know what personal information We collect and how it is used and shared, the right to delete personal information, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights.

In the preceding 12 months We have collected the following categories of personal information: identifiers (name, email address, user ID, Device and installation identifiers, IP address), internet or network activity (Usage Data), commercial information (purchase records), and audiovisual information (photos You choose to upload). We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and We do not knowingly sell or share the personal information of consumers under 16 years of age. To exercise Your CCPA/CPRA rights, contact Us at fairyteller.help@gmail.com.

Children's Privacy

The Application is not intended for children under 16 years of age, or such higher age as required by applicable law. We do not knowingly solicit data from children or market the Application to them, and We do not knowingly collect personally identifiable information from children under 16 years of age in violation of applicable law.

Where parental or guardian consent is required under applicable law, the Application is not intended for use without that consent. If We discover that a child has provided Us with Personal Data, We will promptly delete it from Our servers. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us at fairyteller.help@gmail.com so that We can take the necessary actions.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third-party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify You of material changes by posting the updated Privacy Policy on this page with a new effective date and, where appropriate, by a prominent notice within the Application. Where required by law, We will seek Your consent to material changes before they take effect.

You are advised to review this Privacy Policy periodically for any changes. Previous versions of this Privacy Policy are available upon request by contacting Us.

Contact Us

If You have any questions about this Privacy Policy or Our privacy practices, You can contact the data controller, Eilon Udi, by email:

• fairyteller.help@gmail.com