Decoria.Studio Privacy Policy
1. Data controller
The data controller is JS Technology Jakub Szczybiełkiewicz, ul. Bukowa 24A, 55-093 Kiełczów, Poland, Tax ID (NIP): 8272162838, REGON: 100300408 ("we", the "Controller"). Contact for all data matters: hi@decoria.studio.
2. How the app works and where the data comes from
Using the app requires signing in with your Apple account (Sign in with Apple). From Apple we receive only a stable account identifier and — if you agree — your e-mail address (you may use Apple's "Hide My Email" alias). We never receive your password. Projects, scans and packs are tied to your account and available on any device you sign in on. The app additionally keeps a technical, random device identifier (UUID in the Keychain) for free-tier limits and diagnostics.
3. What data we process
| Category | Examples | Purpose |
|---|---|---|
| Account data | Apple account identifier, e-mail address (may be hidden behind an Apple alias) | sign-in, linking projects and packs, cross-device sync, support |
| Device identifier | random UUID | free-tier limits; diagnostics |
| Project content | style-and-budget conversation (brief), room scans (geometry and dimensions), room photos, generated visualisations, shopping lists, furniture layouts | providing the service — generating your interior design |
| Purchase data | Apple transaction ID, purchased product, quantity, environment | crediting packs, fraud prevention, complaints |
| Device telemetry | hardware model (e.g. "iPad13,4"), iOS version, app version, last-activity time | diagnostics, support, statistics |
| Advertising identifiers | IDFA — only with your consent given in the system App Tracking Transparency prompt | serving ads (Google AdMob) |
| Apple DeviceCheck token | anonymous device token | enforcing free-tier limits (abuse prevention) |
We never process your payment-card data — payments are handled entirely by Apple via the App Store.
4. Legal bases
- performance of a contract (Art. 6(1)(b) GDPR) — providing the app's services, crediting purchases;
- legitimate interest (Art. 6(1)(f) GDPR) — security, abuse prevention, basic statistics, serving non-personalised ads;
- consent (Art. 6(1)(a) GDPR) — personalised ads (IDFA, ATT prompt); you can withdraw consent in iOS Settings;
- legal obligation (Art. 6(1)(c) GDPR) — accounting and complaints.
5. Processors and recipients
- Google Cloud (Google Ireland Ltd.) — backend and file hosting; data stored in the europe-central2 region (Warsaw, EU);
- Anthropic PBC (USA) — AI processing of brief content and shopping lists;
- Replicate Inc. (USA) — generating visualisations (room photos and style descriptions are transmitted);
- Google AdMob — ads in the free tier;
- Apple Inc. — payments, DeviceCheck, Keychain sync.
Transfers to the USA rely on the EU–US Data Privacy Framework or Standard Contractual Clauses. We share no personal data with affiliate networks (e.g. Awin) — you are taken to a shop only when you tap a product link yourself.
6. Retention
Project content — until you delete it or request deletion of your device data. Purchase data — for the period required by accounting and limitation rules. Telemetry — up to 24 months after last activity.
7. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection. As there are no accounts, we need your device identifier to act on a request — you will find it at the bottom of the Account screen (tap to copy). Write to hi@decoria.studio; on request we delete the complete data of a device (projects, scans, photos, visualisations, balances). You may also lodge a complaint with your data-protection authority (in Poland: the President of the Personal Data Protection Office, uodo.gov.pl).
8. Children
The app is not directed at children under 13 and does not knowingly collect their data.
9. Changes
We will announce material changes in the app. The current version is always available at this address.