Roomtale

Privacy Policy (United States)

Version: v1.1 (updated 2026-10-25)
Effective date: the date the Service is first published in the U.S. App Store
Applies to: the Space Design app, its website, and support services (the “Service”).
Launch storefront: United States. The Service is not offered in Taiwan, mainland China, or Japan at launch.

This policy explains what data the Service collects, why we use it, who we share it with, how long we keep it, and the choices available to you. Operator details and public contact information are shown below.

1. Who we are

For privacy requests, contact support@whyboo.net. We may need to verify that you control the account before acting.

2. Data we collect

Account and identifiers

Content you provide

Transactions and membership

Technical and usage data

Data from third parties

We do not intentionally collect special-category data such as medical records, genetic data, sexual life, health examinations, or criminal records. We do not create face-recognition or fingerprint templates. Do not upload photos containing other people’s sensitive personal data unless you have a lawful basis.

3. Why we use data

  1. Provide and maintain the Service: accounts, photo upload, AI generation, plans, records, and cross-device sync
  2. Authenticate users and protect accounts
  3. Provide support, troubleshoot, and handle feedback
  4. Manage subscriptions, purchases, refunds, reconciliation, and membership benefits
  5. Prevent abuse, fraud, and security incidents; monitor reliability
  6. Comply with law or lawful requests
  7. Analyze and improve the Service using aggregated or de-identified data where practicable
  8. Marketing: not used at launch. If introduced, we will obtain consent and provide an opt-out.

4. Photos, cloud sync, AI, and generated content

5. Retention, regions, recipients, and method

Retention

Regions

We use a single U.S. region for launch (US West) for hosting, database, and object storage. AI processing runs on Alibaba Cloud Model Studio with its endpoint and stored data in the United States (Virginia); inference may use Alibaba Cloud international nodes outside mainland China. Other providers are located in the United States. Data may be transferred within the United States and to those international AI inference nodes. Provider locations are listed at https://roomtale.whyboo.net/vendors.

Recipients

We do not sell, rent, or trade personal data.

Method

Automated systems, API transfers, encrypted connections, and access controls. Support and disputes may involve manual review.

6. International transfers

We may transfer data to the recipients above. We use appropriate safeguards and contractual terms required by applicable law. Where consent is required, we obtain it separately. You may contact support@whyboo.net for information about transfers.

7. Your rights

Depending on your location and applicable U.S. state privacy laws, you may request:

  1. Access to your personal data
  2. A copy of your data
  3. Correction or supplementation
  4. Restriction of collection, processing, or use
  5. Deletion

Use Account → Export my data for a JSON copy, or Account → Delete account. You may also email support@whyboo.net; we may verify your identity. The export contains account, usage, membership, records, asset metadata, consent records, and feedback. It does not include photo files, cloud storage keys, Apple authorization tokens, or anti-abuse logs. To request a supplemental copy of photo files, email support@whyboo.net from your account email; we will verify account ownership before providing it.

We do not discriminate against you for exercising privacy rights. We may charge a reasonable cost-based fee where permitted for access or copies; correction, restriction, and deletion are free. We aim to respond within the time required by applicable law.

If you decline to provide necessary data, you may not be able to create an account, generate designs, sync, subscribe, or use support.

8. Security and incidents

We use reasonable technical and organizational measures, including encrypted transport, access controls, data minimization, vendor management, and monitoring. No system is completely secure. If a personal-data incident occurs, we will investigate, contain it, and notify you and authorities as required.

9. Children

The Service is not designed for children. Minors must use it with the consent of a parent or guardian as required by local law. If we learn that we collected a child’s data without consent, we will delete it.

10. Third-party services, subscriptions, and App Store transactions

11. Changes

We may update this policy when features, law, or vendors change. We will notify you of material changes in the app or by email and obtain consent where required.

12. Contact