This policy describes what happens to your data when you use the Home Lab AI iOS app ("Home Lab AI", "the app"). It is written to match how the app and its backend actually work, not a generic template.
1. Room photos
When you select or capture a photo of a room, the app sends that photo to our backend (a Cloudflare Worker) so it can be forwarded to Google's Gemini API for AI redesign.
Your photo is processed to generate a redesigned image and is not stored by our backend after processing — the backend does not retain a copy of your photo once the response is returned.
Your original photo, and any design history you choose to keep, are stored locally on your device only. We do not maintain a server-side copy or backup of your photo library or design history.
Deleting the app, or deleting an entry from your in-app history, removes that content from your device; we have no server-side copy to separately delete.
2. AI-generated images
The redesigned image returned by the AI is sent back to your device. It is only saved if you choose to keep it in your in-app design history or export it (e.g. via the Photos app); otherwise it is discarded like any other in-memory app content.
3. Analytics
We use Amplitude for anonymous, aggregate product analytics — for example, which screens are used and whether a design was generated — so we can understand and improve the app. Specifically:
We do not request App Tracking Transparency (ATT) permission, and we do not collect Apple's advertising identifier (IDFA).
We do not use Amplitude Session Replay or any screen-recording analytics.
We do not configure collection of your IP-derived city, carrier, or Apple's vendor identifier (IDFV) as part of analytics events.
Analytics events are tied to an anonymous, installation-level identifier, not to your name, email, or Apple ID.
4. Backend, abuse prevention & fair use
Our backend (a Cloudflare Worker) forwards generation requests to Google's Gemini API and enforces basic abuse and cost protection so the service stays usable and sustainable for everyone:
Requests are attested using Apple's DeviceCheck, which lets our backend distinguish genuine app instances from arbitrary third-party callers. Apple's DeviceCheck token generation does not identify you personally.
To rate-limit and apply fair-use limits, the backend records a salted, hashed identifier derived from request/network information — never your raw IP address or a directly identifying value — together with a request count.
These rate-limit and fair-use records are kept only long enough to enforce the relevant time window (minutes to a bounded number of days) and then automatically expire; they are not retained indefinitely.
5. Purchases
Home Lab AI Premium subscriptions are sold and billed entirely through Apple's StoreKit / the App Store. We never see, collect, or store your payment card details — Apple handles the transaction, and our app only receives confirmation of your subscription status.
6. What we do not do
We do not sell your personal data.
We do not run ads or ad-tracking in the app.
We do not access your location.
We do not have a social network, chat, or public user-content feature.
We do not permanently store your room photos on our servers.
7. Third parties we use
Service
Purpose
Google Gemini API
Generates the AI room redesign, called from our backend, not directly from your device.
Cloudflare Workers / KV
Hosts our backend and stores short-lived, hashed rate-limit/fair-use counters.
Amplitude
Anonymous, aggregate product analytics as described in Section 3.
Apple StoreKit
Processes all subscription purchases and billing.
Apple DeviceCheck
Lightweight, non-identifying request attestation for abuse prevention.
8. Children's privacy
Home Lab AI is not directed at children and we do not knowingly collect personal data from children.
9. Changes to this policy
If how we handle data changes in a material way, we will update this page and change the "Last updated" date above.