Privacy policy

Data Controller

Bitfuse UG (haftungsbeschränkt)
Schloßstr. 48, 40477 Düsseldorf, Germany
Email: privacy@roomagine.ai

Roomagine was previously known as RoomGenius. The controller is unchanged.

This Website

Hosting

This website (roomagine.ai) is a static site served by Cloudflare Workers, a service of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When you visit, Cloudflare's network automatically logs standard access data including your IP address, browser type, operating system, referring URL, and the date and time of your visit. Cloudflare also processes this data to terminate the encrypted connection and to detect and block attacks and other malicious traffic.

This is processed on the basis of Art. 6 para. 1 lit. f GDPR (our legitimate interest in secure and reliable website operation). Log files are retained for a limited period and then deleted. Cloudflare acts as our processor under a data processing agreement.

Unlike a single-location host, Cloudflare serves this site from whichever of its data centres is closest to you, which may be outside the EEA. See Transfers Outside the EEA below.

Analytics

This website uses Cloudflare Web Analytics, provided by Cloudflare, Inc., to understand how visitors use the site so we can improve it.

Cloudflare Web Analytics does not set cookies, does not use localStorage or any other client-side storage, and does not use fingerprinting. It does not track you across other websites or over time. Rather than identifying individual visitors, it counts page views whose referrer is a different site, and collects page performance measurements through your browser's standard Performance API.

Because it stores no information on, and reads no information from, your device, this service does not require consent under § 25 TDDDG — which is why this site shows no cookie banner. The processing is based on Art. 6 para. 1 lit. f GDPR (our legitimate interest in understanding and improving our website).

Cookies

This website does not set cookies.

No other tracking

Beyond the hosting logs and Cloudflare Web Analytics described above, this website does not run advertising networks, social-media trackers, or cross-site profiling. Fonts are served from our own servers rather than loaded from a third party, so visiting this site does not transmit your IP address to a font provider.

The Roomagine App

The Roomagine mobile app processes the photographs and sketches you submit in order to generate redesigns, and the account data required to operate your credit balance.

Account and authentication

We process your email address so that you can create an account, sign in, and access the designs and credits associated with it. Legal basis: Art. 6 para. 1 lit. b GDPR (performance of our contract with you).

Images you upload

Photographs and sketches you submit are processed in order to produce the redesign you requested. To do this they are transmitted to the AI providers named below: to Google, which generates the redesigned images, and to Microsoft, which produces the written design suggestions that accompany them. Legal basis: Art. 6 para. 1 lit. b GDPR (performance of our contract with you).

Under the Gemini API terms that apply to us as a customer established in the European Economic Area, Google does not use the content we submit, or the responses it returns, to improve or train its products.

To suggest furniture that matches a generated design, we query our own furniture catalogue, which is held in a hosted vector database operated by Chroma Inc. in the United States. That database contains product data only. The query we send is a numerical representation of the design; it contains no image, no account identifier and nothing that identifies you.

Designs stored on your device

The designs generated for you are stored in the app on your own device rather than in an account library on our servers. Uninstalling the app or moving to a new device therefore removes them. Your account and credit balance are held server-side and are unaffected.

Purchases and credits

Purchases are made through the Apple App Store or Google Play. We do not receive or store your payment card details. We receive confirmation of a completed purchase and the identifiers needed to credit your account. Legal basis: Art. 6 para. 1 lit. b GDPR.

Deleting your account

You can delete your account at any time via roomagine.ai/deleteaccount/.

Service Providers

We use the following processors. Each is bound by a data processing agreement and processes personal data only on our instructions.

• Cloudflare, Inc. (USA) — website hosting, content delivery, security and web analytics. Privacy policy
• Amazon Web Services, Inc. — our app backend and storage. Place of processing: Europe. Privacy policy
• Google LLC — the Gemini API, used to generate redesigned images from the room photos you submit. Place of processing: USA. Privacy policy
• Microsoft Corporation — Azure OpenAI Service, used to produce written design suggestions from the room photos you submit. Place of processing: Europe. Privacy policy
• RevenueCat, Inc. — subscription and purchase management. Place of processing: USA. Privacy policy

Transfers Outside the EEA

Some of our processors are established in the United States, so personal data is transferred outside the EEA.

Cloudflare, Inc. and Google LLC are certified under the EU–U.S. Data Privacy Framework. Cloudflare's data processing addendum additionally incorporates the EU Standard Contractual Clauses. We rely on both mechanisms wherever they are available, so that a valid basis for the transfer remains in place even if the adequacy decision underlying the Framework were to change. Where a processor is not covered by an adequacy decision, transfers are made on the basis of the EU Standard Contractual Clauses.

Data Retention

Server log files are retained for a limited period and then deleted. Account data is retained for as long as your account exists, and is deleted when you delete your account. Data we are required to keep for statutory retention periods, such as records relating to purchases, is kept for as long as those periods require and is then deleted.

Your Rights

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format (Art. 15–21 GDPR). Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where we process data on the basis of our legitimate interests, you may object on grounds relating to your particular situation. To exercise any of these rights, contact us at privacy@roomagine.ai. We will respond within one month.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.

Changes to This Policy

We update this policy when our processing changes. The current version always appears on this page. This version replaces the previous policy of 12 February 2024, which described a different hosting and analytics arrangement.

Last updated: 9 August 2026