Decorat lets you photograph a room and have it redesigned by an AI model. That means photographs of your home leave your device, so this page is specific about where they go and what happens to them. Simahum Trading and Services LLC operates the service from Oman.
The short version. We collect your email address, the room photographs you upload, the designs generated from them, and basic usage and crash data. Photographs are sent to a third-party AI provider to be redesigned. We do not sell your data, and we do not use your photographs to train any model. You can delete everything at any time, from inside the app or by emailing us.
What we collect
| Data | Why we have it | How long we keep it |
|---|---|---|
| Email address | To identify your account. Provided by Apple or Google when you sign in — we never see or store a password. | Until you delete your account |
| Room photographs | They are the input to the redesign. Without them the app cannot do anything. | Until you delete the room or your account |
| Generated designs | So your results are still there when you come back. | Until you delete the room or your account |
| Purchase history | To know which plan you are on and how many redesigns you have left. | Until you delete your account, then retained where tax law requires |
| Push notification token | To tell you when a redesign has finished. Only if you allow notifications. | Until you turn notifications off or delete your account |
| Usage events | Which screens and features are used, so we know what to improve. | Rolling retention in our analytics tool |
| Crash reports | To find and fix errors. Not linked to your account. | Rolling retention in our error tool |
We do not ask for your name, address, phone number or date of birth, and the app has no social features, so nothing you create is visible to another user.
Where your photographs go
This is the part worth reading carefully. When you ask for a redesign:
- The photograph is uploaded from your device to our servers over an encrypted connection.
- It is sent to a third-party AI provider, together with a text description of the style and colours you chose.
- The provider returns the redesigned images, which we store against your account and show you.
The AI provider processes the photograph in order to return a result. Their own terms govern what they do with it, and we choose providers whose terms state that API content is not used to train their models. We do not use your photographs to train anything, and we do not licence them to anyone.
Who else handles your data
- Our hosting provider — runs the servers and the database.
- Cloudflare R2 — stores uploaded photographs and generated images.
- The AI provider — performs the redesign, as described above.
- Apple and Google — handle sign-in and, if you subscribe, payment. We never see your card details.
- RevenueCat — records which plan you are on.
- PostHog — product analytics.
- Sentry — crash and error reporting.
- Expo — delivers push notifications.
These providers act on our behalf and may process data outside your country. We do not sell personal data, and we do not share it for advertising.
Your choices
Deleting your account
In the app: Profile → Delete account. This removes your account, your rooms, every photograph you uploaded and every design generated from them — from the database and from file storage. It cannot be undone. If you have already uninstalled the app, see the deletion page.
Deleting one room
Open the room and use the delete control. Its photograph and every design made from it are removed the same way.
Notifications and permissions
Camera, photo library and notification access are all requested at the moment you first need them, and all can be revoked in your device settings. Declining any of them leaves the rest of the app working.
Access and correction
Depending on where you live you may have the right to a copy of your data, to correct it, or to object to its processing. Email us and we will respond within 30 days.
Security
All traffic uses HTTPS. Sign-in tokens are short-lived and rotate. On iOS and Android they are held in the device keychain; in the browser version they are held in local storage, which is less protected — that is a limitation of browsers, and it is why the tokens are short-lived.
Children
Decorat is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, email us and we will remove it.
Changes
If this policy changes in a way that materially affects you, we will say so in the app before the change takes effect. The date at the top always reflects the current version.
Contact
Privacy questions and data requests: rashdis@simahum.om, or by telephone on +968 9510 3362.