Privacy Policy

The short version

You upload photographs of a space. We send them to third-party AI providers so they can produce a design, and we store the photograph and the result on your account until you delete them.

We do not train any model on your images, and we have no training pipeline of any kind.

The free plan may show a non-personalized banner ad. Paid plans do not show ads.

You can delete your account, and everything in it, from inside the app or from this website — you do not need the app installed to do it.

What we collect

Only what the product needs to work:

• Your email address, if you create an account. You can use the app without one.
• Photographs you upload, and the renders produced from them.
• Room details you enter yourself — dimensions, room type, style choices.
• Your plan, credit balance and credit history.
• Boards you create, and the comments and votes on them.
• For free-tier advertising, Google AdMob may process your IP address (including to estimate general location), device or app identifiers, ads shown and interactions with them, and SDK diagnostics and performance data.

Where your photographs go

Producing a design means sending your photograph to an AI provider. We cannot do it on our own hardware and we are not going to pretend otherwise. Whatever you asked for, your photograph is sent to these two companies, each for a different step:

• Anthropic (Claude) — scene understanding (describing the room in your photograph); if Anthropic is unavailable, the same photograph is sent to OpenAI for this step instead.
• OpenAI — image generation and masked image editing, and scene understanding as the backup when Anthropic is unavailable.

What we do on our own infrastructure

The structural analysis — working out where the walls, floor, ceiling, windows and doors are, so that a redesign cannot move them — runs on our own servers, on models we host ourselves. Your photograph is not sent to a third party for that step.

Anthropic and OpenAI each handle your photograph under their own terms as processors for us. We do not send a provider-specific no-retention flag with these requests, so each provider’s standard API retention applies. If that matters to you, read the terms of the providers listed above.

Until 8 September 2026, that list named four companies: Google (Gemini), Black Forest Labs, OpenAI and Recraft. From then until this version it named only OpenAI; Anthropic is new in this version, for scene understanding. Three companies that used to receive your photographs no longer do; anything they received before then was received under the policy in force at the time.

Training

We do not train models on your images. There is no training pipeline in our systems.

The setting called "Let Miradora learn from my images" is off by default and stays off unless you turn it on. With it off, nothing you upload is used for any model improvement. Turning it on does not currently enable anything, because there is nothing for it to enable — it exists so that consent is recorded before any such feature could ever be built.

How long we keep things

Room decision workshop budgets, checks and notes are stored locally on your device, separately for each account and room. They are not sent to AI providers. Sharing a decision brief sends the text you select through your device’s share sheet. Completing account deletion in that installation clears these local decisions.

Photographs and renders stay on your account until you delete them or delete your account. There is no automatic expiry, because a room you designed a year ago is exactly the room you want to come back to.

Accounts created without an email address are deleted automatically after 30 days, along with everything in them. Link an email to keep them.

Deleting everything

Accounts linked to Sign in with Apple must complete Apple verification in the iOS app before deletion so we can revoke Apple authorization. If verification or revocation fails, deletion is not scheduled. There is a Delete Account button in the app, and the same control on the web at /delete-account, which is the route to use if you have already removed the app. Either one requests removal of your account, your profile, your rooms, your photographs, your renders, your credit history and your boards, including the files in our storage.

Deletion can take time if processing is still running, you have many files, or storage is temporarily unavailable. We stop new generation jobs and uploads for the account, remove the stored files, and then remove the account. Pending requests are retried automatically. The app and website distinguish a pending request from completed deletion.

After removing the account, we temporarily retain an internal deletion record containing its identifier and cleanup timestamps. We keep checking for late uploads made through previously issued upload links, and remove that record after at least 24 hours once cleanup succeeds. This record does not contain your photographs or renders. Completed deletion cannot be reversed through the app.

If you have a subscription bought through the App Store or Google Play, deleting your account does not cancel it — only Apple or Google can, and you should cancel it there first. A subscription bought on the web is cancelled for you as part of the deletion.

Payments

Purchases are handled by Apple, Google or Stripe. We never see or store your card details. We store which plan you are on, when the period ends, and your credit balance.

Other processors

Besides the AI providers above, we use:

• Supabase — the database, authentication and file storage behind the product.
• RevenueCat — subscription and purchase state.
• Resend — transactional email, such as a sign-in code or a board invitation.
• Google AdMob — non-personalized banner advertising for free-tier users, including ad delivery, measurement, diagnostics and fraud prevention. The ads SDK is not initialized until Google’s consent system says an ad request is permitted.

Security

Photographs and renders are held in private storage. They are served through short-lived signed links that expire after 30 minutes, so a link that leaks stops working. Access to your rows is enforced by the database itself rather than by application code.

Contact

This service is operated by Muhammad Haris Siddiqui, 535 Fessler Ave, Naperville, IL 60565-1215, United States. For any question about this policy or your data, contact support@deepfai.com.