Privacy Policy

Last updated: 2026-07-10.

This Privacy Policy explains how Evolution Games GmbH ("we", "us", "our") collects, uses, shares and protects personal data when you use RoomGPT — our website (room-gpt.app) and our iOS and Android apps (together, the "Service"). We are the data controller. Our full company details are on our imprint; for any privacy question or request, contact support@room-gpt.app.

Definitions

• Personal Data — any information that identifies, or can be used to identify, a natural person.
• Service — the RoomGPT website (room-gpt.app) and our iOS and Android apps.
• Device — any internet-connected device, such as a phone or tablet, used to access the Service.
• IP address — a number assigned to your device on the internet that can be used to identify the general location from which it connects.
• Cookie / local storage — small amounts of data stored on your device to enable functionality, security and analytics.

Data we collect

• Photos & images you upload — the room photos and any prompts you submit to generate AI redesigns.
• Anonymous identifier — we do not require you to register or to provide your name or email to use the app; we assign an anonymous app/device identifier used to link your subscription and usage. We only receive contact details if you email us directly.
• Purchase & subscription data — your subscription status, plan and renewal/expiry dates. We do not receive or store your full payment-card details.
• Usage & device data — app and website interactions (such as screens/pages viewed, time spent and clickstream), device type and operating system, browser characteristics, language, referring URLs, and crash diagnostics.
• IP address & approximate location — your device's IP address, which we use for security, fraud prevention, analytics and to derive your approximate (city/country-level) location. We do not collect precise GPS location.
• Device & advertising identifiers — identifiers such as your device identifier and, with your consent, an advertising identifier (for example, the IDFA on iOS) used for analytics and attribution.

How we use your data and our legal bases

• To provide the Service — generate your redesigns, operate the app, and manage your account and subscription. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Security, fraud prevention & service improvement — keeping the Service safe, reliable and working. Legal basis: our legitimate interests (Art. 6(1)(f) GDPR).
• Analytics, advertising & attribution — measuring performance and marketing, only where you have given consent. Legal basis: your consent (Art. 6(1)(a) GDPR and §25 TDDDG). You can withdraw consent at any time.
• Legal compliance — meeting our legal obligations. Legal basis: Art. 6(1)(c) GDPR.

AI processing of your images

To create a redesign, the image and any prompt you submit are processed in real time by third-party AI infrastructure providers solely to generate the requested interior-design visuals. This processing is limited to what is necessary to provide the feature. Redesigns are AI-generated concepts for inspiration only and may not reflect real products or dimensions.

Who we share data with

We share personal data only with the providers needed to run the Service, each acting under an appropriate data-processing or controller agreement:

• Hosting, authentication, analytics & storage — Google / Firebase (Firebase Authentication, Firebase Analytics / Google Analytics, Cloud Storage and hosting).
• Subscription management — Qonversion, to activate and manage your subscription entitlements.
• AI image & text processing — Replicate and the AI models it hosts (including Google's "nano-banana" and Gemini models), to generate your redesigns.
• Advertising & attribution (consent-based) — Meta / Facebook (Facebook SDK), to measure and attribute our marketing. Meta acts as an independent controller for its advertising services.
• Payments — the Apple App Store and Google Play, which process purchases and renewals as sellers of record.
• Legal & safety — authorities or professional advisors where required by law or to protect rights, safety and the Service.

We do not sell your personal data.

Subscriptions & payments

RoomGPT offers optional auto-renewable subscriptions (Pro, Plus, Max and Ultra tiers) with weekly, 6-month and yearly billing periods. Purchases and renewals are handled by the Apple App Store or Google Play; the exact price and terms are shown in the app before you purchase. Full subscription details are in our Terms of Use.

International data transfers

Some of these providers are located outside the EEA, including in the United States. Where personal data is transferred internationally, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Data retention

We keep personal data only as long as needed for the purposes above or as required by law, then delete or anonymize it. Uploaded images and associated processing data are retained only as long as needed to provide the redesign feature and are automatically deleted on a regular scheduled basis.

How we protect your data

We use appropriate technical and organizational measures to protect personal data, including encryption of data in transit (HTTPS), access controls that limit access to authorized personnel on a need-to-know basis, and data minimization. No method of transmission or storage is completely secure; in the event of a personal data breach likely to result in a risk to your rights, we will act in accordance with applicable law, including notifying the competent supervisory authority and affected users where required.

Your rights

Subject to applicable law (including the GDPR), you have the right to: access your data; rectify inaccurate data; erase your data; restrict or object to processing; data portability; and withdraw consent at any time (without affecting prior lawful processing). You also have the right to lodge a complaint with a data protection supervisory authority — in Germany, the authority of your federal state. To exercise any right, contact support@room-gpt.app.

Deleting your data

Because the app does not require you to create an account with personal details, there is no personal profile to delete. Uploaded images and associated data are automatically deleted on a regular scheduled basis. You may also request deletion of any data associated with your device or subscription at any time by emailing support@room-gpt.app; we will delete it except where we must retain certain records to comply with legal obligations.

Device permissions

With your permission, the app uses your camera to take room photos and your photo library to select and save images. On iOS, if you consent through the App Tracking Transparency prompt, an advertising identifier may be used for attribution; you can change this at any time in your device settings.

Push notifications

If you opt in, we may send push notifications about features and updates. You can disable them at any time in your device settings.

Cookies & similar technologies

On our website we use strictly necessary cookies to operate the site and, only with your consent, analytics and advertising cookies to understand usage and measure marketing. In our apps we use similar technologies such as local storage and SDK identifiers. You can control non-essential cookies through your browser settings or our consent controls; blocking strictly necessary cookies may affect how the Service works.

Children

The Service is not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

Third-party links

The Service may contain links to third-party websites or services we do not control. We are not responsible for their content or privacy practices; we encourage you to review their policies before interacting with them.

Business transfers

If we are involved in a merger, acquisition, financing, reorganization or sale of assets, your personal data may be transferred as part of that transaction, subject to the same protections described in this Privacy Policy.

Changes

We may update this Privacy Policy from time to time; the "last updated" date above shows the current version. Material changes will be made available in the app or on this page.

Governing law

This Privacy Policy is governed by the laws of Germany, without prejudice to the mandatory data-protection rights you have under the GDPR or under the law of your country of residence.

Contact

Privacy questions or requests: support@room-gpt.app. Company details are on our imprint.