HomyaPrivacy Policy
The short version. Homya has no sign up. We never learn your name, your email or your address. Your room photo, and any photos of your own furniture you add, are sent to be redesigned and are not kept by us afterwards. The prices you type into a shopping list stay on your device. Your finished designs are saved in your own iCloud, which we cannot read.
You can erase everything from inside the app: Settings, then Delete all my data. The long version below says the same thing with the detail regulators require.
- 1. Who is responsible
- 2. What we handle, and why
- 3. What we never collect
- 4. Your designs live in your iCloud
- 5. Legal bases
- 6. Who else is involved
- 7. International transfers
- 8. How long anything is kept
- 9. Erasing your data
- 10. Your rights
- 11. Europe and the United Kingdom
- 12. California
- 13. Turkey
- 14. Children
- 15. Security
- 16. Changes
- 17. Contact
1. Who is responsible
Homya is published by Lumio Studio. For the purposes of the EU and UK General Data Protection Regulation we are the data controller. Under Turkish Law No. 6698 (KVKK) we are the veri sorumlusu. Under the California Consumer Privacy Act we are a business.
Reach us at homya@lumiostudio.co. We answer privacy requests within 30 days.
2. What we handle, and why
| What | Why | Where it goes |
|---|---|---|
| The room photo you choose | To produce the redesigned image you asked for | Sent over an encrypted connection to our processing function, then to Google Vertex AI. Discarded once your result is returned. Never used to train any model. |
| Photos of your own furniture, up to five, when you choose that mode | So the design is built around pieces you are keeping rather than replacing them | Sent with the room photo over the same encrypted connection, handled the same way, and discarded once your result is returned. Never used to train any model. |
| The shopping list, and any price or note you type into it | It is your record of what the design used and what you decided it costs | Stored on your device with the design. Prices and notes you type are never sent to us, to any shop, or to anyone else. |
| The redesigned image | It is the thing you came for | Returned to your device, saved to your own iCloud, and to your photo library only if you tap Save. |
| Your choices for that design | The room type and the look you picked are what the request is made of | Sent with the request, not retained afterwards. |
| Usage events | To see which screens work and where people get stuck | PostHog. Screen views, a generation started, a generation finished, the paywall shown, a purchase completed. This also includes a session recording of how you moved through the app, in which every image and every text field is masked before it leaves your device: your room photo, the design Homya produced and the prices you typed are replaced by grey blocks and never reach us. Tied to a random identifier, never to your name. |
| Subscription status | To know whether your subscription is active and to restore it | Adapty, keyed to the same random identifier. Apple processes the payment; we never see your card. |
| Crash and performance reports | To fix what breaks | Firebase Crashlytics. Device model, iOS version, and where the code failed. |
3. What we never collect
No account, no email address, no name, no phone number, no password. No contacts. No precise location. No advertising identifier, no cross app tracking, no data brokers. We do not sell or share personal information, and we never have.
Your photos are never used to train an AI model, ours or anyone else's. That is a contractual condition of how we call Google Vertex AI, not only a promise on this page.
4. Your designs live in your iCloud
Homya has no login because it does not need one. Your device is already signed in to iCloud, so your finished designs are stored in a private CloudKit database inside your own iCloud account, which is what keeps them on all of your devices without you setting anything up.
A private CloudKit database belongs to you, not to us. We cannot read it. Apple acts as the processor for that storage and the contents are governed by Apple's privacy policy as well as this one.
If you are signed out of iCloud, or you have run out of iCloud storage, Homya still works. Your designs are then kept on the device only. Sync is a convenience, never a requirement.
5. Legal bases
Where the GDPR or the UK GDPR applies, we rely on:
- Performance of a contract (Art. 6(1)(b)) to process the photo you submitted and return the design, and to manage your subscription. Without this the app cannot do the one thing it exists to do.
- Legitimate interests (Art. 6(1)(f)) for crash reports and product analytics, so the app can be kept working and improved. We have balanced this against your interests and use a random identifier rather than anything that names you.
- Consent (Art. 6(1)(a)) for access to your camera and photo library, which iOS asks you for separately and which you can withdraw at any time in iOS Settings.
Where Turkish law applies, the equivalent bases are KVKK Art. 5(2)(c) for processing necessary to perform a contract and Art. 5(2)(f) for our legitimate interests, with explicit consent for anything outside those.
6. Who else is involved
We keep the list short on purpose. Every processor below is bound by a data processing agreement.
| Processor | What they do | Where |
|---|---|---|
| Google Cloud, Vertex AI | Generates the redesigned image, then discards the input | United States and the EU |
| Google Firebase | Runs the function your request passes through, and crash reporting | United States |
| Apple, iCloud and CloudKit | Stores your designs in your own account. We have no access | Apple's global infrastructure |
| Apple, App Store | Takes the payment and handles refunds | Apple's global infrastructure |
| PostHog | Product analytics | European Union |
| Adapty | Subscription status and restore | European Union and the United States |
7. International transfers
Homya is available worldwide, so some of the processors above are outside your country. Where data leaves the European Economic Area or the United Kingdom, the transfer is covered by the European Commission's Standard Contractual Clauses together with the UK International Data Transfer Addendum, or by an adequacy decision where one exists.
For transfers out of Turkey, we rely on your explicit consent or on the mechanisms set out in KVKK Art. 9 as amended in March 2024, including standard contractual clauses notified to the Board.
Ask us at homya@lumiostudio.co and we will send you the safeguards that apply to your region.
8. How long anything is kept
- Your room photo: for the length of the request only. It is not written to any database of ours and is discarded once your result comes back, typically within a minute.
- Your designs: for as long as you keep them. They are in your iCloud and you control them.
- Usage events: 12 months, then deleted.
- Crash reports: 90 days, then deleted.
- Subscription status: for the life of the subscription and then as long as tax and accounting law requires us to keep the record of a sale.
9. Erasing your data
Open Homya, go to Settings, then Delete all my data. It runs immediately and takes one confirmation. It erases your saved designs on the device and in your iCloud private database, and it discards the random identifier so future usage events cannot be connected to anything you did before.
Two things it honestly cannot do, so that you are not surprised:
- It does not cancel an active subscription. Only Apple can do that, in iOS Settings under your name, then Subscriptions.
- It does not remove Apple's record of a purchase you made. That receipt belongs to Apple, not to us.
Deleting the app alone removes what is on the device but not what is in your iCloud. Use the in-app option first if you want everything gone.
10. Your rights
Wherever you live, you can ask us to confirm what we hold, give you a copy, correct it, delete it, restrict or object to how we use it, and hand it to another provider. Write to homya@lumiostudio.co. We will not charge you and we will not treat you differently for asking.
Because there is no account, we usually cannot connect a request to a specific person on our own. If you want us to act on the random identifier held by our analytics, the app can show it to you in Settings so you can quote it. For everything stored in your iCloud, you already hold the controls.
11. Europe and the United Kingdom
You have the rights in Articles 15 to 22 of the GDPR, including data portability and the right to object to processing based on legitimate interests. There is no automated decision making that produces legal effects for you. Generating an image from your photo is not profiling.
You may complain to your national supervisory authority. In the United Kingdom that is the Information Commissioner's Office at ico.org.uk. We would rather you told us first at homya@lumiostudio.co.
12. California
In the last twelve months we collected identifiers (a random app identifier), internet activity (in app usage events) and visual information (the photo you submitted, transiently), for the purposes described in section 2.
We do not sell personal information and we do not share it for cross context behavioural advertising, as those terms are defined by the CCPA as amended by the CPRA. We have not done so in the preceding twelve months, and we do not sell the personal information of minors under 16. Because we run no such programme, there is no Do Not Sell link to offer you.
You may request access, deletion and correction, and you may appoint an authorised agent. Exercising any of these rights will never get you a worse price or a reduced service.
13. Turkey
Under Art. 11 of Law No. 6698 you may learn whether your personal data is processed, request information about it, learn the purpose and whether it is used accordingly, learn the third parties it goes to inside and outside Turkey, request that inaccurate data be corrected, request erasure or destruction under Art. 7, request that any correction or erasure be notified onwards, object to a result produced solely by automated analysis, and claim compensation for damage caused by unlawful processing.
Send Turkish language requests to homya@lumiostudio.co and we will answer in Turkish.
14. Children
Homya is not directed at children and is rated accordingly on the App Store. We do not knowingly collect personal data from anyone under 16, or under the higher age of digital consent where a country sets one. If you believe a child has used the app, write to us and we will erase whatever we hold.
15. Security
Everything travels over TLS. Your photo is processed in memory and is not written to any database of ours. Access to our infrastructure requires multi factor authentication and is limited to the people who operate it. Your designs sit in Apple's encrypted private CloudKit storage.
No system is perfect. If a breach ever affects your data, we will notify the relevant supervisory authority within 72 hours and tell you directly where the law requires it.
16. Changes
If we change how any of this works, we will update this page and move the effective date at the top. For a change that materially affects you, we will tell you in the app before it takes effect rather than quietly editing this page.
17. Contact
Lumio Studio
Privacy enquiries: homya@lumiostudio.co
We reply within 30 days, and usually much sooner.