Moodroom
Privacy Policy
Last updated
The short version
- No account. Moodroom never asks for your name, email or contacts.
- Your rooms stay on your iPhone. Photos, redesigns and your brief are stored on your phone, not on our server.
- A photo leaves your phone only to be redesigned. It goes through our server to fal.ai, which runs OpenAI's image model, and the result comes back. Our server does not save the photo or the result.
- We keep very little. A random ID, your plan, your counts and a short log of each redesign (no image). Your IP address appears only in short-lived abuse counts and request logs, for at most seven days.
- No ads, no tracking, no selling, no training. Your photos are never used to train a model.
- You can delete it. Membership, then Delete my data, clears your phone and our server.
1. Who we are
Moodroom is an iPhone app made by Nghia Le, trading as LilGroup, in South Australia ("we", "us"). This policy covers the Moodroom app and this website. Contact: oscar.lehuu@gmail.com.
2. What stays on your iPhone
Moodroom works without an account. These are stored on your phone and we cannot see them:
- the room photos you take or choose, and every redesign made from them;
- your brief: the answers you give in the app (what brings you here, rent or own, what bothers you about the room, the styles you like, how far to go);
- the studio's reading of your room (its colours, light and room type). The reading is measured on your iPhone and is not sent anywhere.
Moodroom uses the camera only when you choose to photograph a room, and sees only the photos you pick from your library. Saving or sharing a redesign goes through the iPhone's share sheet, so Moodroom has no access to the rest of your library.
3. Making a redesign
A redesign cannot be made on the phone. Before your first photo is sent, the app tells you who processes it and asks for your permission. Each redesign then sends, over an encrypted connection (HTTPS):
- the room photo, as a JPEG no larger than 1536 pixels on its long side;
- the choices for that room: room type, style, how far to go, rent or own, what bothers you, and whether the photo is portrait or landscape;
- your random ID and, for members, Apple's signed record of your purchase so we can check your plan.
Our server runs on Cloudflare. It passes the photo and a written design instruction to fal.ai, which runs OpenAI's image model to make the redesign, so the photo is processed by both. Your random ID is not sent to them. We ask fal.ai not to store the photo or the result, and to delete anything it does hold within 24 hours. The result comes back as a private link; the app downloads it and saves it on your phone.
Our server does not store your photo or the redesign. It holds the photo in memory for the seconds the request takes, and nothing image-shaped is written to our database.
The three sample rooms in the app are our own pictures with redesigns made in advance. Using a sample room sends no photo anywhere.
4. What our server keeps
- A random ID for this install, made by RevenueCat (see Purchases), with whether your free redesign has been used, a marker that lasts under two minutes while a redesign is being made, and the dates the record was created and last changed.
- Membership record, if you subscribe: your plan (weekly or yearly), Apple's transaction ID, the purchase and expiry dates, the ID of a refunded purchase if there is one, and how many redesigns you have used in the current period.
- A log line for each redesign: room type, style, how far to go, where in the app it was made, your plan, the quality setting, what it cost us, how many seconds it took, whether it succeeded, was refused or failed, and the time. No photo, no result and no link to either.
- Your IP address, briefly. To stop abuse we count requests per minute by your random ID and by IP address, and free redesigns per day by IP address. A daily clean-up deletes these counts once they are more than a day old, so they hold an IP address for at most three days.
- Request logs kept by Cloudflare for up to seven days: time, route, status, error messages and network details such as IP address. Never your photo.
None of this includes your name, your email, your Apple Account or any image.
5. Purchases
Memberships are sold through Apple In-App Purchase. Apple handles the payment; we never see your card or your Apple Account. We use RevenueCat to manage memberships. It creates the random ID, and receives your purchase and subscription status and basic device information (such as iOS version, app version and App Store country). RevenueCat tells our server when a membership renews, is cancelled or is refunded.
6. Product analytics
We use PostHog to see how the app is used and where it fails. It receives these events, tied to a random ID for this install:
- first open of the app;
- each onboarding step you reach, and the choices you tap there (for example rent or own, and how you heard about us);
- that the room reading was shown (room type and light level);
- the membership offer being shown or closed, and a purchase being started or completed (which plan);
- a redesign being started, finished or failed (style, room type, seconds taken);
- a share (image or video), and reaching your limit.
PostHog also receives your device model, iOS version and app version, and works out an approximate location (country and city) from your IP address. It never receives your photos or redesigns. We do not use it for advertising or to follow you into other apps or websites.
7. What we never do
- We never show ads, and we never sell your data or share it for advertising.
- We never track you across other companies' apps or websites, and we do not use the advertising identifier (IDFA).
- We never use your photos or redesigns to train or improve any model.
- We never store your photos or redesigns on our server.
- We never publish your rooms. Sharing happens only when you tap Share.
8. Who processes data for us
| Provider | What it receives | Why |
|---|---|---|
| Cloudflare | Every request from the app, with the photo in transit; the records in section 4 | Runs our server and database, and hosts this website |
| fal.ai | The room photo and the design instruction | Runs the image model and hosts the result at a private link for up to 24 hours |
| OpenAI | The room photo and the design instruction, through fal.ai | Its image model makes the redesign |
| RevenueCat | Random ID, purchase status, basic device information | Manages memberships |
| PostHog | Random ID, the events in section 6, device model, iOS and app version, approximate location | Product analytics |
| Apple | Payment and App Store data, under your agreement with Apple | App Store, payments, refunds |
These providers are based in, or process data in, the United States and other countries. They handle data under their own terms, linked above. We may also disclose information when the law requires it.
9. How long we keep data
- Photos and redesigns: never stored on our server. fal.ai is asked to delete anything it holds within 24 hours.
- IP address counts: at most three days.
- Cloudflare request logs: up to seven days.
- Random ID, free-redesign flag and redesign log: until you tap Delete my data or ask us to delete them.
- Membership record: see the next section.
- Analytics events: kept by PostHog under its own retention, tied to the random ID.
- Emails you send us: as long as needed to help you, then deleted within 12 months.
10. Deleting your data
In Moodroom, open Membership and tap Delete my data. It removes your brief, your saved rooms and every photo from your iPhone, and deletes from our server your random ID, your free-redesign flag, your redesign log and your request count.
One thing stays: if you have subscribed, the membership record (Apple's transaction ID, plan, dates and the count for the current period) is kept with your random ID removed from it. Without that, deleting and coming back would reset a member's limit. It no longer points to you or your install.
Deleting the app removes everything on your phone but does not reach our server, so use Delete my data first, or email us. Deleting your data does not cancel a membership; cancel in iPhone Settings, your name, Subscriptions. To have analytics events removed, email us.
11. Children
Moodroom is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child has used the app, contact us and we will delete what we hold.
12. Your rights
Wherever you live, you can ask us what we hold about you, and ask us to correct or delete it. Email oscar.lehuu@gmail.com. Because there are no accounts, we will explain how to find the random ID of your install so we can find your records. We reply within 30 days.
- EU, EEA and UK: we process your photo and membership data to provide the service you asked for (contract), and abuse counts, logs and analytics under our legitimate interest in running a secure, working app. You may object to that processing, ask for a copy of your data, and complain to your data protection authority. Transfers to the United States rely on our providers' Standard Contractual Clauses or the EU-US Data Privacy Framework.
- California: we collect identifiers (the random ID, and an IP address for at most seven days), commercial information (membership status) and usage information. We do not sell personal information or share it for cross-context behavioural advertising, and we will not treat you differently for using your rights.
- Australia: we follow the Australian Privacy Principles. If we do not resolve a complaint, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
13. Changes
If the app or the law changes we will update this page and its date. If a change affects how your photos are used, the app will ask for your permission again.
14. Contact
Nghia Le, trading as LilGroup, South Australia, Australia
Email: oscar.lehuu@gmail.com