Privacy Policy

The controller for the processing described below is:

Name

[OPERATOR_NAME]

Address

[STREET_AND_NUMBER], [POSTCODE_AND_CITY]

Country

[COUNTRY]

Email

[CONTACT_EMAIL]

When you create an account we store your email address, the name you give us, your language preference and the status of your account. Your password is only ever stored as a hash by our authentication provider — we never see it. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

Everything you enter about a renovation — projects, rooms and their measurements, budgets, expenses, tasks, shopping lists and saved guides — is stored under your account so the app can show it back to you. Legal basis: Art. 6(1)(b) GDPR.

Before/after and progress photos you upload are kept in our file storage. They are delivered from a public file address: that address is not listed anywhere, but anyone who has it can open the photo without signing in. Please do not upload anything you would not want a link-holder to see. Deleting a photo in the app deletes the stored file.

When you write to Nima your message goes to our AI service and from there to [AI_PROVIDER], which produces the answer. If a project is selected its context travels with the message: room names and measurements, task titles, the budget and the expense figures. Photos you send Nima for analysis are transmitted the same way. Conversations are stored by the AI service ([AI_HOSTING_REGION]) so that you can reopen them. Please do not type anything into the chat that you would not want an external AI provider to process. Legal basis: Art. 6(1)(b) GDPR.

The web app runs on infrastructure operated by [HOSTING_PROVIDER]. Account data, project data and photos live in a Supabase project located in [SUPABASE_HOSTING_REGION].

We set no advertising or analytics cookies, and there is no cookie banner, because we store only what the app needs in order to work: a session cookie from our authentication provider so that you stay signed in, plus a handful of flags in your browser's local storage remembering which one-off hints and the install prompt you have already dismissed. Those flags never leave your device. Clearing your browser data removes both.

When something breaks, a technical error report is sent to Sentry. It carries the error itself plus your user id, the id of the project you were looking at, your language and the page — it is configured to carry neither your name, nor your email address, nor the contents of your fields. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in an app that works).

We email you about your account only: confirming your address, resetting your password, and invitations. Those messages are delivered by our authentication provider or our email delivery provider, which needs your address in order to send them.

Besides us, these providers process your data on our behalf:

• Supabase — database, file storage, authentication and account emails ([SUPABASE_HOSTING_REGION]).
• [HOSTING_PROVIDER] — hosting and delivery of the web app.
• [AI_PROVIDER] — turns the message and project context sent to it into Nima's answer.
• Sentry — receives technical error reports.
• Resend — delivers invitation emails where configured; otherwise Supabase sends them.

Your data stays for as long as your account exists. If an administrator deactivates an account it disappears from the app but is not erased straight away. Write to [CONTACT_EMAIL] to have your account and everything in it deleted.

Under the GDPR you may ask for a copy of your data (Art. 15), have it corrected (Art. 16) or erased (Art. 17), have its processing restricted (Art. 18), receive it in a portable format (Art. 20), and object to processing based on legitimate interests (Art. 21). Where processing rests on your consent you may withdraw that consent at any time. Write to [CONTACT_EMAIL].

You may complain to a data protection supervisory authority at any time. The authority responsible for us is [DATA_PROTECTION_AUTHORITY].

We update this page whenever the app changes what it processes. The date above tells you when that last happened.