Privacy Policy

RoomCalm is built to keep as little of your data as possible. This page explains exactly what happens to it, in plain language — including the parts that involve other companies.

Your room photos

When you upload a photo — for a redesign, a Calm Score, or a Fit Check — it is sent securely to our AI processing partners (OpenRouter and Google AI) for the sole purpose of producing your result, which is returned to your browser. We do not store your photos on our servers, we never publish them without being asked to, and we never sell them. There is exactly one exception and you control it entirely — see "Rooms you choose to share" below. Please don't upload photos that show people's faces or someone else's private property without their permission.

Rooms you choose to share

After a redesign you may be offered a button that says "Yes, share my before & after". Nothing is stored unless you press it. If you never press it, the paragraph above applies in full and your photo is gone the moment you close the tab.

If you do press it, this is what happens and nothing else:

• The two images — your original photo and the redesign — are uploaded and served from a public web address, so anyone with the link can see them. They also appear on our gallery at /rooms.
• Alongside them we keep the room type, the style, how far you asked us to go, the note you typed if you typed one, and a salted one-way hash of your IP address used only to stop one person flooding the gallery. No name, no email address, no location.
• Because the page is public, search engines and AI crawlers may index it and keep their own copies. We cannot recall those, which is the honest reason to think for a second before pressing the button.

Changed your mind? Send us the link through the contact page and we delete it — the row and both image files, not just the listing. We do that by hand and it is normally the same day.

Data stored on your device

Quite a lot lives on your device rather than with us, on purpose:

• Your free-redesign counter and any credits bought before you signed in are kept in your browser's local storage.
• Your last 20 redesigns — the before and after photos themselves — are saved inside your own browserso you can find them again under "My redesigns". They are on your device, not on our servers. Delete them one by one there, or clear your browser data to remove them all at once.
• If you start a Fit Check and go to sign in or view the plans, your two photos are held in your browser so you don't lose them on the way back. They are cleared once the check runs.
• When you move from one tool to another — say from the Calm Score or the paint visualizer to a redesign — your photo travels with you in your browser's session storage so you are not asked for it twice. It never goes to a server to make that work, and it is discarded when the redesign screen picks it up or when you close the tab.

Your email address

If you buy a plan, we store your email address so your credits can belong to your account and follow you between devices. If you subscribe to our updates, we store your email address for that too, and nothing else — no name, no tracking of what you open. Ask us and we will delete it.

Two companies are involved in keeping that promise: your account and its email address are stored with Supabase, our database provider, and the emails we send you (your files after a purchase, your free prints) go out through Resend. Neither uses your address for anything else.

Googlesign-in is optional; an emailed code does the same job. Choose Google and it tells us your name, email address and profile picture, but we use only the address, to find or create your account; the name and picture sit unused in your Supabase record. Google knows you signed in, and its button loads only on the sign-in screen. Revoke RoomCalm's access any time under Security in your Google Account, and we delete your account if you ask.

Payments

Purchases are processed by Paddle, our merchant of record. Your card details go to Paddle, never to us. Paddle's own privacy policy applies to the checkout.

Shopping links

"Shop this look" links lead to retailers such as Amazon. Once you click through, that retailer's privacy policy applies. See our affiliate disclosure.

How we measure the site, and how we advertise

We want to be straight with you about this, because most sites are not.

• Google Analytics counts visits and shows us which pages actually help people.
• A page counter of our own.When a page loads we record which page it was and what brought you here: either a campaign link (for example, a particular Pinterest post) or the name of the website you came from, such as "google.com" — the site's name only, never the address of the page you were on. One more word can be added: "internal" if the load was a reload from one of our own pages, or "bot" if it came from an automated browser. That bot check happens inside your browser and only the one word is sent, so your browser details never leave your device. The same counter records which step of a redesign or a purchase was reached, such as "finished a redesign", "opened the plans" or "paid". That is the whole record. It has no cookie, no ID, no IP address and no device information, nothing is stored on your device, and there is no way to connect one row to another or to a person, so it tells us "forty people opened this article" or "twelve people paid" and can never tell us who, or whether they were the same people. It runs whether or not you accept the banner above, because there is nothing in it to consent to; if it needed anything from your device, we would ask.
• A count of free redesigns.The first redesign is free, and to keep that fair we count how many free redesigns each internet connection has used this month. We do not store the connection's address. We store a one-way code made from the address and a secret key. Without that key, which never leaves our server, the code cannot be turned back into the address. The code also changes every calendar month, so one month's count cannot be linked to the next. A few other free features use the same kind of one-way code, never the address itself, to stop abuse: star ratings, the free Precise repaint, offer events, shared rooms and the Calm Score. Those older codes are made the same way, address plus secret key, but they do not change monthly: the same address keeps the same code. That is a fair amount of machinery to avoid keeping one address, and it is the point.
• The Meta (Facebook) pixeltells Facebook and Instagram when someone visits RoomCalm or finishes a redesign. We use that to show our ads to people like you, and to stop showing them to people who have already bought. That is advertising measurement, and we would rather name it than hide it behind the word "analytics".

We never send Meta or Google your photos, your redesigns, or your name. They receive the fact that a visit or a redesign happened, not what your home looks like.

You can switch this off. Most browsers have a "block trackers" setting, and Facebook lets you turn off off-Facebook activity in your account settings. Blocking it changes nothing about how RoomCalm works for you.

Questions or requests

Email hello@roomcalm.com any time, or use our contact page — a real person answers. That includes deleting your email address or any support messages we hold about you.

Changes

If this policy changes, the date at the top changes with it. Major changes will be noted on the site.