Privacy Policy

Last updated: 2026-09-25.

This Privacy Policy explains how Evolution Games GmbH ("we", "us", "our") collects, uses, shares and protects personal data when you use RoomGPT — our website (room-gpt.app) and our iOS and Android apps (together, the "Service"). We are the data controller. Our full company details are on our imprint; for any privacy question or request, contact support@room-gpt.app.

Definitions

• Personal Data — any information that identifies, or can be used to identify, a natural person.
• Service — the RoomGPT website (room-gpt.app) and our iOS and Android apps.
• Device — any internet-connected device, such as a phone or tablet, used to access the Service.
• IP address — a number assigned to your device on the internet that can be used to identify the general location from which it connects.
• Cookie / local storage — small amounts of data stored on your device to enable functionality, security and analytics.

Data we collect

• Photos & images you upload — the room photos and any prompts you submit to generate AI redesigns.
• Identifiers & email — the mobile apps use an app/device identifier to link subscriptions and usage. On the website, we collect the email you enter during the quiz or checkout to link your purchase, restore access and sign you into your web studio. We record your optional email preference and its confirmation separately.
• Purchase & subscription data — your subscription status, plan and renewal/expiry dates. We do not receive or store your full payment-card details.
• Usage & device data — app and website interactions (such as screens/pages viewed, time spent and clickstream), device type and operating system, browser characteristics, language, referring URLs, and crash diagnostics.
• IP address & approximate location — your device's IP address, which we use for security, fraud prevention, analytics and to derive your approximate (city/country-level) location. We do not collect precise GPS location.
• Device & advertising identifiers — identifiers such as your device identifier and, with your consent, an advertising identifier (for example, the IDFA on iOS) used for analytics and attribution.

How we use your data and our legal bases

• To provide the Service — generate your redesigns, operate the app, and manage your account and subscription. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Security, fraud prevention & service improvement — keeping the Service safe, reliable and working. Legal basis: our legitimate interests (Art. 6(1)(f) GDPR).
• Analytics, advertising & attribution — measuring performance and marketing, only where you have given consent. Legal basis: your consent (Art. 6(1)(a) GDPR and §25 TDDDG). You can withdraw consent at any time.
• Optional email updates — RoomGPT inspiration, offers and quiz reminders after you request these emails and confirm your email preference. You can unsubscribe using the link in each message. This preference is separate from essential purchase and sign-in messages.
• Legal compliance — meeting our legal obligations. Legal basis: Art. 6(1)(c) GDPR.

AI processing of your images

To create a redesign, the image and any prompt you submit are processed in real time by third-party AI infrastructure providers solely to generate the requested interior-design visuals. This processing is limited to what is necessary to provide the feature. Redesigns are AI-generated concepts for inspiration only and may not reflect real products or dimensions.

Who we share data with

We share personal data only with the providers needed to run the Service, each acting under an appropriate data-processing or controller agreement:

• Hosting, authentication, analytics & storage — Google / Firebase (Firebase Authentication, Firebase Analytics / Google Analytics, Cloud Storage and hosting).
• Subscription management — Qonversion, to activate and manage your subscription entitlements and link your web purchase to the email you supplied.
• AI image & text processing — Replicate and the AI models it hosts (including Google's "nano-banana" and Gemini models), to generate your redesigns.
• Advertising & attribution (consent-based) — Google Ads, Meta / Facebook and AppLovin, to measure and attribute our marketing. When advertising measurement is enabled, the AppLovin pixel on our F1 and 7A quizzes records page views, subscription offer views, plan selections, checkout starts, confirmed trial signups and paid purchases. It uses cookies, device/browser information, transaction details and your checkout email (hashed by the pixel) to match activity to ads. Room photos and design instructions are not included. Advertising providers may act as independent controllers for their advertising services.
• Payments — the Apple App Store and Google Play for store purchases; Stripe for website payments, billing records and the subscription management portal. Payment-card details are submitted to the payment provider.
• Optional email delivery — Resend receives the recipient email address and message content, including confirmation and unsubscribe links. Delivery, bounce and complaint events help us manage delivery and stop unwanted messages. Room photos, design prompts and sign-in tokens are not included in these marketing messages.
• Legal & safety — authorities or professional advisors where required by law or to protect rights, safety and the Service.

We do not sell your personal data.

Subscriptions & payments

RoomGPT offers optional auto-renewable subscriptions. Mobile store purchases are handled by Apple or Google; website purchases are processed by Stripe. The price, billing period, design allowance and any trial are shown before purchase. Website subscribers can open their studio account and choose Manage billing to manage or cancel their Stripe subscription. Unsubscribing from optional emails does not cancel a paid subscription. Full subscription details are in our Terms of Use.

International data transfers

Some of these providers are located outside the EEA, including in the United States. Where personal data is transferred internationally, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Data retention

We keep personal data as needed to provide the Service and meet legal obligations. Temporary processing files may be removed automatically. Web studio photos, generated designs and conversations are retained to provide your saved projects and history. We retain email preference and suppression records so that we can respect unsubscribes and delivery failures. You can request deletion using the contact details below; billing records may need to be retained where required by law.

How we protect your data

We use appropriate technical and organizational measures to protect personal data, including encryption of data in transit (HTTPS), access controls that limit access to authorized personnel on a need-to-know basis, and data minimization. No method of transmission or storage is completely secure; in the event of a personal data breach likely to result in a risk to your rights, we will act in accordance with applicable law, including notifying the competent supervisory authority and affected users where required.

Your rights

Subject to applicable law (including the GDPR), you have the right to: access your data; rectify inaccurate data; erase your data; restrict or object to processing; data portability; and withdraw consent at any time (without affecting prior lawful processing). You also have the right to lodge a complaint with a data protection supervisory authority — in Germany, the authority of your federal state. To exercise any right, contact support@room-gpt.app.

Deleting your data

You can remove projects from your web studio and unsubscribe from optional emails. To request deletion of stored photos, conversations, quiz contact information, or data associated with your account, device or subscription, email support@room-gpt.app. We may need to verify your request and retain certain records to comply with legal obligations. A deletion request does not by itself cancel a paid subscription; cancel through the provider that billed you.

Device permissions

With your permission, the app uses your camera to take room photos and your photo library to select and save images. On iOS, if you consent through the App Tracking Transparency prompt, an advertising identifier may be used for attribution; you can change this at any time in your device settings.

Push notifications

If you opt in, we may send push notifications about features and updates. You can disable them at any time in your device settings.

Cookies & similar technologies

On our website we use strictly necessary cookies to operate the site and, only with your consent, analytics and advertising cookies to understand usage and measure marketing. In our apps we use similar technologies such as local storage and SDK identifiers. You can control non-essential cookies through your browser settings or our consent controls; blocking strictly necessary cookies may affect how the Service works.

When advertising measurement is enabled, we can connect a Google ad click identifier with your first paid Stripe subscription invoice and send Google the transaction reference, payment time, amount and currency. This can happen after a free trial ends, even if you have closed the website. This purchase measurement does not include your email, room photos or design instructions. You can change your advertising preference using Privacy choices on the quiz or, after signing in, in your web studio. Email marketing preferences are separate.

Children

The Service is not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

Third-party links

The Service may contain links to third-party websites or services we do not control. We are not responsible for their content or privacy practices; we encourage you to review their policies before interacting with them.

Business transfers

If we are involved in a merger, acquisition, financing, reorganization or sale of assets, your personal data may be transferred as part of that transaction, subject to the same protections described in this Privacy Policy.

Changes

We may update this Privacy Policy from time to time; the "last updated" date above shows the current version. Material changes will be made available in the app or on this page.

Governing law

This Privacy Policy is governed by the laws of Germany, without prejudice to the mandatory data-protection rights you have under the GDPR or under the law of your country of residence.

Contact

Privacy questions or requests: support@room-gpt.app. Company details are on our imprint.