1. Who we are
DecorAI is operated by DecorAI Ltd, a company registered in England and Wales. We act as the data controller for the personal data we collect through the DecorAI website and mobile app. Contact details for our Data Protection lead are at the bottom of this page.
2. What we collect
We try to collect the least data possible while still running the app. Specifically:
Photos you upload
Room photos you upload are processed to generate your redesigns. They are used for that purpose only — never sold, never shared with advertisers, never used to train other people's models. You can delete any uploaded photo from your account at any time.
Account information
An email address (to sign in and recover your account), a device identifier, and — if you subscribe — a pseudonymous billing reference from the Apple App Store or Google Play. We do not store your card details; Apple and Google handle the payment flow.
Usage data
Aggregated, anonymous product analytics — which screens are used, which styles are most popular, crash reports. This is kept in a form that cannot be tied back to you personally.
What we do not collect
- Your name, date of birth, or home address (unless you choose to tell us in a support request)
- Contacts, calendar, location, or microphone access
- Any information about people whose faces appear in your photos — we ask you to frame the room, not the people in it
3. Why we collect it (legal basis)
Under UK GDPR and the Data Protection Act 2018, we rely on the following lawful bases:
- Contract — to deliver the redesign service you sign up for
- Legitimate interest — for product analytics and fraud prevention, balanced so your rights are not overridden
- Consent — where UK law requires it (for example, optional marketing emails)
- Legal obligation — where we are required by law to keep certain records (for example, tax)
4. Where your data lives
Your data is stored in encrypted cloud infrastructure in the United Kingdom and European Economic Area. Where a supplier is based outside the UK/EEA, we rely on standard contractual clauses and a UK addendum to protect your data to the same standard.
Data in transit is encrypted with TLS. Data at rest is encrypted with industry-standard cipher suites.
5. Who we share it with
We only share personal data with the suppliers we need to run the service:
- Cloud hosting (UK/EU data centres)
- AI model infrastructure — limited to transient processing of your room photos to produce a redesign
- Product analytics (pseudonymous, aggregated)
- Customer support tools (only if you contact us)
- Apple and Google, for App Store / Google Play billing
We do not sell your data. We do not share it with advertisers or data brokers.
6. Your rights
Under UK GDPR you have the right to:
- Access — ask for a copy of the personal data we hold about you
- Rectify — ask us to correct anything that is wrong
- Erase — ask us to delete your account and the data associated with it
- Restrict — ask us to pause processing while a query is resolved
- Port — ask for a machine-readable export of your data
- Object — to processing based on legitimate interest
- Withdraw consent — where consent is the legal basis, you can take it back at any time
Most of these are available directly inside the DecorAI app — Settings → Your data. For anything the app cannot do, email privacy@decorai.co.uk and we will respond within one calendar month.
7. Data retention
Room photos and their generated redesigns are retained for as long as your account is active, or until you delete them. Deleted items are removed from live systems immediately and purged from backups within 30 days.
Basic account records (email, billing pseudonym) are kept for up to six years after account closure to meet UK tax and legal obligations, then erased.
8. Cookies and similar technologies
The DecorAI website uses a small number of cookies and equivalent device identifiers:
- Strictly necessary — to keep you signed in and remember your preferences. These do not require consent.
- Analytics — pseudonymous usage analytics (we anonymise IP addresses). You can opt out in your browser or from our cookie banner.
We do not use third-party ad-tracking cookies.
9. Children
DecorAI is intended for users aged 13 and over. If you believe we have collected data from a child under 13, please contact us and we will remove it promptly.
10. Changes to this policy
If we make a material change to how we handle your data, we will post an updated policy on this page and, where appropriate, notify you by email or in-app message at least 14 days before the change takes effect.
11. Contact & complaints
For any question about your personal data, email privacy@decorai.co.uk. If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
DecorAI Ltd, registered in England & Wales. This policy is governed by the laws of England and Wales.