Privacy Policy

Instaroom AI (the "Service") is operated by Xuan Anh Nguyen, acting as a sole trader (OSVČ), with a business address at Stará Stodůlecká 2, 158 00 Prague, Czech Republic.

If you have questions about this Privacy Policy or want to exercise your privacy rights, you can contact:

• Email: instaroom.team@gmail.com
• Address: Stará Stodůlecká 2, 158 00 Prague, Czech Republic

For the purposes of applicable data protection law, the data controller is Xuan Anh Nguyen.

Instaroom AI is a digital service that uses artificial intelligence to process user-submitted images and generate visual concepts related to renovation, interior design, exterior design, architecture, and similar design use cases.

This Privacy Policy applies to users of the Service, including users of our website and mobile application.

The Service is not intended for children. Do not use the Service if you are not legally permitted to do so under applicable law.

We collect the following categories of personal data:

Depending on your device and how you use the Service, we may request access to:

• Camera to allow you to capture photos for processing
• Photos / Media Library to allow you to upload and save images

You can control many device permissions in your phone settings, but restricting permissions may limit Service functionality.

We use personal data for the following purposes:

• To create and manage user accounts
• To provide, operate, and maintain the Service
• To process uploaded images and generate AI-based outputs
• To save, display, and organize your uploaded and generated content for your use inside the Service
• To monitor performance, diagnose crashes, and improve reliability
• To understand product usage through analytics
• To communicate with you about support requests or important service matters
• To enforce our Terms of Service and protect the Service from misuse
• To comply with legal obligations

We use third-party AI models, including Google Gemini, to process user-submitted requests and generate outputs.

Based on the information currently provided by us, uploaded content and prompts are used to fulfill your request and provide the Service. We do not state in this Policy that your content is used by us to train our own AI models.

Where the GDPR or similar laws apply, we generally rely on one or more of the following legal bases:

• Performance of a contract where processing is necessary to provide the Service you request
• Legitimate interests for example, to secure, maintain, and improve the Service, prevent abuse, and analyze usage
• Consent where consent is required, such as for certain cookies or similar technologies
• Legal obligation where we need to comply with applicable law

Our website may use cookies or similar technologies for basic functionality and analytics.

We use PostHog for analytics. Analytics tools may collect information about how users interact with the website or app, such as pages viewed, events triggered, device/browser details, and approximate technical usage information.

Where required by law, non-essential cookies or similar tracking technologies will only be used with appropriate consent.

We may share personal data with service providers and processors that help us operate the Service, including:

• PostHog analytics and product usage monitoring
• Google Gemini AI processing of user requests
• Convex Inc. backend infrastructure, storage, and related service functionality
• Better Auth authentication and account-related functionality
• RevenueCat subscription and purchase infrastructure
• Apple App Store / Google Play or other platform operators, where relevant for billing, app distribution, or subscription management

We may also disclose data:

• If required by law, court order, or legal process
• To protect our rights, users, or the security of the Service
• In connection with a business transfer, restructuring, or asset sale, if applicable

Some of our service providers may process personal data outside the Czech Republic or outside the European Economic Area.

Where required by applicable law, we take steps intended to ensure that such transfers are protected by appropriate safeguards, such as contractual protections or other lawful transfer mechanisms.

We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy.

Because Instaroom AI stores uploaded and generated content so that users can access and use the Service, uploaded images and generated images may be retained while your account is active, unless you delete them or request deletion, subject to technical, legal, or security needs.

We currently expect to retain certain analytics and crash-log data for approximately 30 days, unless a longer period is needed for security, fraud prevention, troubleshooting, or legal compliance.

We may also retain limited information for a reasonable period after account deletion where necessary to comply with legal obligations, resolve disputes, enforce our agreements, or maintain security and backup integrity.

Depending on your location and applicable law, you may have the right to:

• Access your personal data
• Correct inaccurate or incomplete personal data
• Request deletion of your personal data
• Object to or restrict certain processing
• Receive a copy of certain data in a portable format
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority

If you want to exercise your rights, contact us at instaroom.team@gmail.com.

You can request deletion of your account in the app at:

Settings > Delete account

You may also contact support to request deletion.

Deleting your account may remove your access to uploaded content, generated images, and account-related data, subject to any lawful retention obligations.

We take reasonable technical and organizational measures intended to protect personal data against unauthorized access, loss, misuse, or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Service may rely on third-party platforms, app stores, or websites. Their privacy practices are governed by their own policies, and we are not responsible for the privacy practices of third parties except as required by law.

We may update this Privacy Policy from time to time. If we make material changes, we may provide notice through the Service, our website, or by other reasonable means. The "Last updated" date at the top shows when this Privacy Policy was last revised.

If you have questions, requests, or complaints regarding this Privacy Policy, contact:

For terms governing your use of the Service, see the Terms of Service.