Privacy Policy

Scope

This policy applies to the HomeGPT website, including the HomeGPT design and project tools, and the HomeGPT mobile apps for iOS and Android. Some data practices differ by platform and are identified below. In short: we use your photos to make the designs and plans you ask for, we keep them private unless you share them, and you can download or delete everything at any time.

1. Information we collect

When you use HomeGPT, we collect the following types of information:

• Account information, including your email address and Firebase user ID, when you create or use an account. If you use HomeGPT as a guest, Firebase creates an anonymous, device-scoped account identifier
• Photos you choose to upload of your home, rooms or garden
• What you make with them: designs and their line items (materials, colors, finishes and rough costs), the items you tick, your projects and plans, contractor briefs, voting links, and any contractor quotes you upload for Quote Check
• Original and generated design images saved to your private gallery. Guest designs are saved automatically so you can return to them on the same device
• Optional words you type, such as a note for a design or a change you ask for, and feedback you give on a design
• Your approximate location as a country and region code (for example US and CA, or GB and ENG), worked out from your IP address when you upload a photo or start a design. We keep only those two codes with the photo, design and project, never your IP address, city or precise location, so plans can show typical prices in your currency. You can change the country a project is priced for
• Messages you send to support, with the email address you give us
• Purchase records for your plans and one-off purchases. Payment card details stay with the payment provider
• Your email preferences, including whether you opted in to the weekly design digest and whether you later unsubscribed
• Website usage data and analytics. The mobile apps contain no advertising or third-party analytics SDKs and do not track you across apps or websites

2. How we use your information

We use the information we collect to:

• Provide and improve our AI home design services
• Read your photo (for example, whether it shows a house front, a kitchen or a garden) so we can offer the jobs that fit it
• Write design options with line items and rough costs, render them on your photo, and build your plan, contractor brief and Quote Check results
• Save designs to your personal gallery when you choose to do so
• Authenticate your account, keep track of your designs allowance and provide account features
• Answer your support messages
• Send service emails and, only when you explicitly opt in, a weekly design digest. Every digest includes a one-click unsubscribe link
• Create a public before-and-after design page when you choose Share. Anyone with its link can view that page
• Analyze website usage patterns to improve the service
• We use a first-party cookie called subscription_attribution_v1 for up to 90 days to remember the first visit source and the most recent campaign or referring website. It stores the referring domain, entry section and campaign labels, without full referring URLs, search terms or advertising click IDs. When you start a subscription checkout, we attach this source information to the Dodo Payments record to understand which channels bring subscribers. Clearing cookies removes the browser record. We do not create this record when your browser sends Global Privacy Control.

We do not use your photos to train AI models, and we do not sell your photos.

3. Photos and image data

Your uploaded images are processed securely:

• Images are transmitted over encrypted connections
• In the HomeGPT design and project tools, every photo is re-saved when you upload it, without camera details or GPS location. Photos you share publicly are always re-saved this way
• A submitted image is sent to our AI providers solely to produce the requested read, design or edit (see section 4)
• We do not use face recognition and we do not identify anyone in your photos. Our photo read may note that a person seems to be in a photo, only so we can suggest a clearer photo of your home
• Please avoid uploading photos where people, especially children, can be recognised, and crop them out of anything you share. If such a photo reaches us, contact support and we will remove it
• Guest designs are stored in the anonymous account's private gallery and are scheduled for deletion after 90 days. Creating an account can move those designs into your signed-in gallery
• On the website, generated designs are automatically saved to a signed-in user's private gallery when saving is available
• You can delete saved designs from your gallery at any time
• When you choose Share, HomeGPT copies the original and generated image to a public share page. Do not share a design that contains information you do not want accessible to anyone with the link

Voting links, contractor briefs and local project tools

Creating a voting link publishes a copy of the original photo and two to four selected concepts after you confirm permission to share them. Anyone with the link can view these photos and vote. The link expires after 90 days; the shared copies and votes are then removed by our scheduled cleanup. You can remove them earlier with the private removal key provided when the link is created. Account deletion also removes voting links associated with that account. Removal cannot revoke copies already downloaded by other people or held in their browser caches.

Voting uses a random browser cookie that lasts up to 90 days to recognise repeat votes and let you change your choice. A poll-specific hash identifies the ballot; your name and email are not required. We also use IP-based limits to reduce abuse. Your browser remembers your selected vote and, for links you create, the private removal key.

A "Which one?" link from a design shows only the two options of that design and its before photo. A contractor brief shows only the spaces, images and items in the plan you chose to share; prices stay hidden unless you show them. Anyone with a brief link can open it, so share it only with people you want to quote. You can revoke a brief link at any time, and deleting your account removes every link.

Budget phases are saved in your browser until you clear the site's data. Before-and-after social images are assembled on your device. Downloading a social image does not publish it or send it to a social network.

4. AI processing and service providers

We use trusted providers to run HomeGPT. They receive only what their task needs and their use of it is governed by their terms with us:

• Runware, running OpenAI image models, receives your photo and the design instructions to produce design images, and a finished picture when you save it in HD
• OpenAI receives your photo, your optional notes, any change you ask for, the questions you ask about a design (with that design's plan) and any quote you upload, to read the photo, write design options, answer your questions, check text for safety and read contractor quotes. When you chat with our support assistant, your messages (with card numbers and passwords removed) and your plan, billing dates and today's usage go to OpenAI to write the answers, without your name or email. We keep a chat only if it opens a ticket for our team, as a support message
• Firebase (Google Cloud) for sign-in, database and file storage
• Vercel to host the website
• Resend to deliver service emails, support replies and opted-in weekly digests
• Dodo Payments to process web purchases, and Google Play, the App Store and RevenueCat for purchases in the apps. HomeGPT does not receive or store your full payment-card details
• Sentry to record errors so we can fix them

These services have their own privacy policies and data handling practices. The website also uses analytics and advertising services; those website services are not included in the mobile apps.

5. How long we keep data

• Signed-in accounts: your photos, designs, projects, briefs and quotes stay until you delete them or your account
• Guests: photos, designs, projects and quotes are deleted after 90 days without use
• Support messages: kept for two years, then deleted
• Design feedback and usage records: kept for a set period, then deleted automatically. They never contain your photos or words
• Purchase records: kept as long as tax and accounting law requires, even after you delete your account, without your name or email address
• Backups: deleted data can remain in our encrypted backups for up to 30 days before it is overwritten

6. Data security

We implement industry-standard security measures to protect your data, including encryption in transit and at rest, secure authentication, and regular security audits. Your photos and projects are private to your account and reachable only through HomeGPT, and our access keys are kept in secure server settings, never in our code.

7. Your rights

You have the right to:

• Access your personal data, and download your projects, designs and Quote Check results as a file from your account
• Delete your account and associated HomeGPT data from Settings on the website or through Account → Delete account in the mobile app. For your safety we may ask you to sign in again first
• Delete your account even with an active subscription bought on our website: deleting your account cancels it, so you are not charged again. A subscription bought in the apps is managed by Google Play or the App Store, so cancel it there first, then delete your account
• Delete individual saved designs from your gallery
• Export your generated designs
• Opt out of marketing communications

We will never send you marketing email without a postal address and a one-click unsubscribe link in it.

8. Children

HomeGPT is a home improvement tool for adults. It is not directed at children under 13 (16 in the EU and UK), and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

9. Where your data is stored

HomeGPT stores your data with Firebase (Google Cloud) in the United States. Our providers may process it in other countries under their own safeguards.

10. Contact us

If you have questions about this Privacy Policy or your data, contact us at support@homegpt.app. We'll reply by email.