Privacy, in plain language.

What FurnishFit processes

A design request can include a room photo; room surfaces, openings, and measurements; camera calibration; architecture and furniture masks; your Keep or Remove choices; a style or written brief; and an opaque request identifier. LiDAR capture may also create aligned depth and confidence data. Guided capture may create several tracked room views.

If a release-approved remote route becomes available, the app will send only the bounded assets needed for the design through FurnishFit’s Cloudflare-hosted service and the selected model provider. Raw LiDAR depth and confidence stay on the device under the current spatial contract. Cloudflare also processes ordinary network information, such as an IP address, to deliver and protect its service.

Planned remote processing

The intended service processes room inputs and generated results for the active request. FurnishFit is designed not to write room or generated image bytes, raw depth, masks, scene documents, or free-text briefs to D1, R2, KV, analytics, or a FurnishFit image store. That does not determine what a selected model provider or safety system retains. The exact deployed route, provider account, stores, logs, metrics, safety handling, and deletion behavior must be verified before this feature is made available.

No production model provider has been approved. The exact provider, model, account settings, subprocessors, regions, training use, abuse or safety handling, logs, and retention remain unresolved. FurnishFit will update this policy with verified production facts before remote generation is enabled.

What stays on your iPhone

Projects you keep, including their local source and result images and any owned RoomPlan or guided-capture artifacts, stay in the app’s protected local storage. You can use the iOS share sheet to export a result. FurnishFit does not request Photos-library access. iOS backups and any exported copies have their own settings and retention behavior.

Service records

FurnishFit may retain a pseudonymous service identifier, an opaque request or job ID, a request hash, bounded result evidence, timestamps, state, and a safe error code for security, duplicate-request prevention, reliability, and cleanup. Eligible operational records are designed for a 30-day deletion deadline, but the exact deployed cleanup, Cloudflare logs, provider retention, and aggregate metrics must be verified before release.

Paid app verification

FurnishFit has no login or user-facing account. The planned app is a $2.99 paid download with one successfully completed design included and no In-App Purchase or subscription. When remote design is enabled, the service—not an on-device counter—will verify signed Apple AppTransaction evidence and App Attest security evidence before accepting a request.

The service may retain a pseudonymous purchase principal, Apple transaction identifiers and status, App Attest key or counter evidence, session-token hashes, request reservations, settlement state, and bounded security events. Apple processes payment-card details; FurnishFit does not receive them. Exact retention, recovery across reinstall or device change, refund or revocation handling, deletion, and App Store privacy classifications remain unresolved and must be approved before release.

Advertising and tracking

The current app has no advertising SDK, third-party analytics SDK, or App Tracking Transparency prompt. FurnishFit does not combine app data with data from other companies for targeted advertising and does not share it with data brokers. Security and fraud-prevention processing is not used to build an advertising profile.

Your controls

• If remote processing becomes available, you choose each capture and design request before it is sent.
• You can revoke Camera access in iOS Settings.
• In Designs, use the ellipsis menu and choose Delete design. The app is designed to remove the project’s local images, metadata, and owned capture artifacts together.
• Uninstalling the app removes its locally stored projects, subject to iOS backup behavior.

For a privacy question or rights request, email cameronbrady101@gmail.com. Do not send a private room photo unless you choose to. FurnishFit may need to verify the relevant Apple purchase or security evidence before acting on service records.

Children

FurnishFit is not directed to children under 13 and does not knowingly collect personal information from children.

Changes

This policy will be updated before remote design is enabled and whenever the production data flow, purchase verification, or provider practices materially change.

Contact

For privacy questions, email cameronbrady101@gmail.com.