Privacy Policy

1. Introduction

This Privacy Policy explains how MB Kimarta (“we”, “us”, or “our”), the operator of restylai, collects, uses, and protects your personal information when you use our floor planner and home design service, on the website and in the restylai app for Android. We are committed to protecting your privacy and to complying with applicable data-protection laws, including the General Data Protection Regulation (GDPR) for users in the European Economic Area.

2. Information we collect

Personal information. When you create an account or make a purchase, we collect your name, email address, and billing details.

Signing in with Google. If you choose Continue with Google, Google shares your name, email address and Google account identifier with us. We do not receive your Google password.

Floor plans and plan pictures. We store the floor plans you draw, the pieces and finishes you place, and the photos, images and PDFs of floor plans you add to trace, including photos you take with your phone’s camera in the app. The app only reaches your camera when you choose Take a photo of your plan, and the photo is taken by your phone’s own camera app.

Purchases in the app. Subscriptions bought in the app are sold and charged by Google Play. Google shares with us the purchase identifiers, the product, its status (for example trial, active, cancelled) and its renewal dates, so we can open the plan you bought. We never receive your card or other payment details.

Error reports. When something breaks, the website and the app send us a technical error report (what failed, the page, the browser or device type). Error reports do not contain your plans, photos or payment details.

Payment information. Payments are processed securely by our third-party payment processor (Stripe). We do not store your full card details on our servers; the processor handles them in accordance with its own privacy policy and PCI-DSS standards.

Usage data. We collect information about how you interact with the Service, including IP address, browser and device type, and pages visited.

Room photos and generated content. We temporarily process the photos you upload in order to generate your redesigned images and videos. We do not use your uploaded photos or generated results to train AI models. Anonymous free renders and free-account content are automatically deleted within 30 days; paid-account content is retained while your account is active and deleted on request or after account closure.

You may browse the public site anonymously, and you can generate a limited number of free, watermarked redesigns without an account.

3. How we use your information

We use your information to:

• provide, operate, and improve the AI redesign and video service;
• process your transactions and deliver the credits, images, and videos you purchase;
• communicate with you about your orders and account;
• respond to support requests;
• send important notices about changes to our terms, policies, or service;
• detect, prevent, and address fraud, abuse, and security issues; and
• comply with legal obligations and enforce our policies.

We will not sell, exchange, or transfer your personal information to third parties for their own marketing, except as necessary to provide the Service or as required by law.

4. Payment processing

Payments are processed through a PCI-DSS compliant third-party processor. We currently use Stripe for card payments (privacy policy: stripe.com/privacy). When you make a purchase, your payment details are collected and processed directly by the processor; we receive only the limited information needed to fulfil your order, such as confirmation of payment and basic transaction details. We do not have access to your full card number or sensitive payment data.

In the restylai app for Android, subscriptions are processed by Google Play under Google’s terms and privacy policy (policies.google.com/privacy). Your Google Play account is charged, and you manage or cancel the subscription in Google Play.

5. Data security

We use industry-standard measures to protect your information: all data transmissions are encrypted with SSL/TLS, payment data is handled by PCI-DSS compliant systems, and access to personal information is restricted to authorized personnel. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

6. Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, maintain your session and cart, and analyze site usage so we can improve the Service. You can control cookies through your browser settings; disabling them may limit some functionality.

The restylai app for Android shows no ads. With your permission, the app uses Google Firebase Analytics to understand how the app is used and Meta’s app events tool to measure our advertising (for example, whether an install, a sign-up or a purchase came from one of our ads). For this, Google and Meta receive your device’s advertising ID, the app version, basic device and operating system details, and these events: installs, app opens, sign-ups, free trials and purchases with their price. They never receive your floor plans, photos, renders, name or email address. In the EU, the EEA, the United Kingdom and Switzerland the app asks the first time you open it; elsewhere this is on from the start. You can turn it off at any time in the app under Account, Analytics and ads, and you can reset or delete your advertising ID in your phone’s settings. The app also sends crash reports (Firebase Crashlytics) with technical details of the crash and your device, which contain no advertising ID. The app keeps you signed in with a session cookie, like the website. Until you agree, or after you turn it off, Google Firebase still counts installs, app opens and the events above without your advertising ID or any other identifier (Google’s consent mode), and Meta receives nothing.

7. Third-party service providers

We share information with trusted providers who help us run the Service, including payment processing (Stripe), app purchases (Google Play), sign in with Google (Google), error reports (Sentry), app analytics and crash reports (Google Firebase), measuring our advertising in the app (Meta Platforms), cloud hosting and infrastructure, AI image and video generation (Google Cloud Vertex AI), email delivery, and analytics. To generate your redesign, the contents of your uploaded photo are sent to our AI generation provider solely to produce your result. These providers are contractually required to keep your information confidential and to use it only for the purposes we specify. We do not sell or rent your personal information.

8. Your rights under GDPR

If you are in the European Economic Area, you have the following rights:

• Access: request a copy of the personal data we hold about you;
• Rectification: request correction of inaccurate or incomplete data;
• Erasure: request deletion of your personal data (“right to be forgotten”);
• Restriction: request that we restrict processing of your data;
• Portability: receive your data in a structured, machine-readable format;
• Objection: object to processing of your data; and
• Withdraw consent: where processing is based on consent.

To exercise any of these rights, contact us using the details below. We will respond within 30 days.

9. Data retention

We retain personal information only as long as necessary to provide the Service and comply with legal obligations. Uploaded photos and generated renders are deleted on the schedule described in section 2. Account information is retained until you request deletion or as required by law.

Deleting your account. You can delete your account at any time: in the app under Account, Delete account, or on the website at restylai.com/account/delete. Deleting it stops any subscription from renewing, then permanently erases your plans, renders, uploaded photos and plan pictures, and your name and email address. We keep payment records that tax law requires us to keep, without your name or email.

10. International data transfers

Your information may be transferred to and processed in countries other than your own. Where it is, we ensure appropriate safeguards are in place to protect it in accordance with applicable data-protection laws.

11. California privacy rights

California residents have rights under CalOPPA and the CCPA, including the right to know what personal information is collected, used, or shared; to request deletion; to opt out of the sale of personal information (we do not sell personal information); and not to be discriminated against for exercising these rights. You can update your account information at any time by signing in to your account.

12. Children’s privacy

The Service is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe we have collected information from a child under 13, please contact us and we will delete it.

13. Terms of Service

Please also review our Terms of Service, which establish the use, disclaimers, and limitations of liability governing the Service.

14. Your consent

By using restylai, you consent to this Privacy Policy.

15. Changes to this policy

We may update this Privacy Policy from time to time. We will indicate changes by updating the “Last updated” date above. We encourage you to review this policy periodically.

16. Contact us

If you have questions about this Privacy Policy or wish to exercise your data-protection rights, please contact us at [email protected].