Privacy Notice

• You upload photos of your room. An AI assistant chats with you about design and makes preview pictures.
• The AI runs on Alibaba Cloud servers in mainland China. Your chat messages, room photos, previews and Community posts go there only after you agree on a screen in the app. You can withdraw at any time in Settings.
• We do not sell your personal data and the app shows no ads.
• You can export your data and delete your account inside the app.
• If you post to Community, an automated AI check or our team checks the post before other ShopMyRoom users can see it with your name. You can delete your posts at any time.
• If you buy a subscription or a Room Pack, Apple takes the payment. We never see your card or bank details.
• You must be 18 or over to use ShopMyRoom.

ShopMyRoom is run by C-14 SPACE LTD, a company registered in England and Wales with company number 16905182. Our registered office is 94 Gloucester Avenue, London, England, NW1 8HX. We are the controller of your personal data under the UK GDPR and the Data Protection Act 2018. We are registered with the Information Commissioner's Office (ICO) under reference ZC207154.

For any privacy question or request, email support@shopmyroom.co.uk. This notice covers the ShopMyRoom mobile app, the website at www.shopmyroom.co.uk and our support email. It is written for people in the United Kingdom.

• Account details. Your email address, your name if you give one, a unique sign-in ID and, if you sign in with Google, a link to your Google profile picture. If you use Sign in with Apple, the app asks Apple for your name and email address and we receive what you choose to share. Google Firebase handles your password and we never see it.
• Profile details you add. City, a short bio, and display choices such as theme, units and currency.
• Rooms. The room name and type, measurements you enter and floor plan images.
• Photos. Photos you take or upload. The app shrinks and compresses them before upload. Our server removes the location (GPS) and all other metadata from every photo you upload, apart from the colour profile, before we use the photo or send it to the AI.
• Information we work out from your photos. The furniture we detect, a short description of the room and style data we use to match products.
• Chats and previews. The messages you send to the AI assistant, its replies, photos you attach, your choices in the chat tools and the AI preview pictures made for you.
• Saved items. Products you save to a room.
• Your AI sharing choice. Whether you agreed or declined, when, and which version of the screen you saw.
• Reports. If you report an AI answer or preview, the reason you choose, any note you add and the item you reported.
• Community posts. If you post to Community, what you put in the post: your caption, photos from your phone, a copy of the room you add (its name and type and the room photos you choose), an AI preview from one of your chats, and the products you add from your saved list (name, brand, price, picture, shop link and stock status). We also keep whether the post was approved, turned down or hidden, any note we add, and the result of the automated AI check (its decision, the rule involved, a one-sentence reason and when it ran). Other ShopMyRoom users see the post with the name on your account, or "ShopMyRoom user" if your account has no name, and with your profile picture if your account has one. We never show your email address, or a name made from it, in Community.
• Community likes. The posts you like and when.
• Community reports and blocks. If you report a Community post, a record of your report with a copy of the post. If someone reports your post, their report keeps a copy of your post. If you block another user, a record of that block.
• Community rules. That you accepted the Community rules, which version and when.
• Purchases. If you buy a subscription or a Room Pack, the purchase details we receive from Apple, your plan and your Room Pack previews. We never receive your card or bank details. See Purchases and subscriptions below.
• Usage events. The products you see, tap or save, and when you tap View on retailer. In Community, when you post, like, report or block, with the ID of the post or of the user you blocked. Each event is linked to your account.
• Crash and error events. When the app hits an unexpected error it sends the error type, the lines of our own app code involved, your platform (iPhone or Android) and whether it was a release build. It does not send the error message. Each event is linked to your account.
• Technical data. Your IP address and standard server logs when the app or website contacts our server.
• Messages to us. Anything you send to support.

To create an account you need an email address and a password, or a Google or Apple sign-in. Without one we cannot give you an account. Everything else is optional, although some features need it. For example the AI previews need a room photo. If you say Not now to the AI data sharing, the AI features stay off and the rest of the app keeps working.

Please do not upload photos of people, documents, letters or screens. A photo of a home can show such things by accident. We do not ask for health, ethnicity, religion or similar information.

UK law requires a lawful basis for each use of your data. These are ours.

• Create and run your account, sign you in. Data used: Account and profile details. Lawful basis: Contract. You asked for the service.
• Detect furniture in your photos, match products to your room's style, search the catalogue. Data used: Rooms, photos, information we work out from photos. Lawful basis: Contract.
• Run the AI chat and make previews. Data used: Chats, photos, previews, room name and type. Lawful basis: Contract for the feature. For sending data to mainland China we rely on your explicit consent (UK GDPR Article 49(1)(a)).
• Keep a record of your AI sharing choice. Data used: Your AI sharing choice. Lawful basis: Legal obligation and legitimate interests. We must be able to show that you agreed.
• Handle reports of wrong or harmful AI output and keep the service safe. Data used: Reports, chats, previews, account details. Lawful basis: Legitimate interests.
• Show your Community posts and likes to other ShopMyRoom users, and let you edit and delete your posts and block other users. Data used: Community posts, name, profile picture, likes, blocks. Lawful basis: Contract. You chose to use Community.
• Check every post before others can see it, keep a record that you accepted the Community rules, handle reports, hide or remove posts that break the rules and suspend accounts. Data used: Community posts, Community rules, reports, account details. Lawful basis: Legitimate interests. A member of our team checks every post the automated check below does not settle and reviews reports within 24 hours.
• Check new, edited and reported Community posts automatically against the Community rules, if you have agreed to AI data sharing. Data used: The caption and pictures of your Community posts. Lawful basis: Legitimate interests. For sending data to mainland China we rely on your explicit consent (UK GDPR Article 49(1)(a)). The check can approve a post, turn it down or hide it. Anything it is unsure about goes to our team, and you can ask our team to look again at any decision it makes.
• Give you the plan and the previews you paid for. Data used: Purchases, account details. Lawful basis: Contract.
• Stop a purchase being used by more than one account or after a refund, and answer your questions about purchases. Data used: Purchases, account details, messages to us. Lawful basis: Legitimate interests.
• Protect the service from attacks, apply fair-use limits and fix faults. Data used: Technical data, account details, usage events, crash events. Lawful basis: Legitimate interests.
• Understand which features people use so we can improve the app. Data used: Usage events. Lawful basis: Legitimate interests. You can object (see Your rights).
• Check our affiliate reports and earn commission. Data used: Usage events. Lawful basis: Legitimate interests. Commission helps pay for the service.
• Answer your requests and complaints. Data used: Messages to us, account details. Lawful basis: Legal obligation and legitimate interests.
• Defend legal claims and meet legal duties. Data used: Any of the above. Lawful basis: Legal obligation and legitimate interests.

We do not use your data to make decisions that have legal or similarly significant effects on you. We do not sell your data.

The AI chat, the replace tool and the room previews work by sending data to an AI service. We use Alibaba Cloud (Model Studio, also called DashScope) on servers in mainland China. When you chat, ask for a preview or use the replace tool, we send your chat messages, your choices in the chat tools (such as style, budget and furniture categories), any notes you type, the room photos involved and their web addresses, the name and type of your room, and the preview pictures made for you. For previews of selected products we also send the product image from the retailer's listing, and the AI redraws that piece into your room photo. Furniture detection, product search and style matching run on our own server.

If you post to Community, we also send the post's caption and pictures (your phone photos, the room photos you chose and the AI preview, as small copies without metadata) so the AI can check them against the Community rules. We do not send the products, your name or your email address for this check.

China is not covered by a UK decision that its data protection is adequate. We rely on your explicit consent for this transfer. The app asks for it on a screen that names the provider and the country, lists the risks and explains how to withdraw. The screen lists three risks. Your data is processed outside the UK, UK law may not protect it in the same way, and once your data has been sent we cannot fully control what happens to it. We add that the laws of China may let public authorities ask the provider for data it holds.

At the date of this notice we have not signed the UK's standard international transfer terms with the provider.

If you choose Not now, nothing is sent to Alibaba Cloud. The AI chat and the AI previews stay switched off until you agree, and only our team checks your Community posts. Parts of the app that do not need the AI service, such as browsing and saving products, keep working.

To withdraw your consent, go to Profile, then Settings, then Data & privacy, and switch off AI features: data sharing. This stops new chat messages, preview requests and Community checks from sending your data. A chat reply already under way can finish. Withdrawing does not recall or delete data that has already been sent. Alibaba Cloud holds the data it has received under its own terms, and deleting your account here does not delete it there.

A person does not review every chat or preview. A member of our team may look at a chat or preview to help you, to look into a report, or to find and fix a fault.

You can buy a Pro or Premium subscription or a Room Pack in the iPhone app. Apple takes the payment through your Apple ID. We never receive your card or bank details.

When you start a purchase, the app gives Apple an account link, which is your ShopMyRoom account ID, so that we can match the purchase to your account. When you buy or restore a purchase, the app sends our server the purchase record that Apple signed. Apple's servers also tell our server when a subscription renews, ends or is refunded. From these records we keep:

• Apple's transaction ID and original transaction ID for each purchase and renewal
• the product you bought (Pro, Premium or Room Pack)
• the purchase date and, for a subscription, when it expires or ends, and any grace period Apple gives when a payment fails
• whether it was a test purchase in Apple's sandbox, whether it was a free trial and whether you moved to a higher plan
• the date of any refund or revocation
• the purchase type, the date Apple signed the purchase record and the date we recorded it
• your current plan, when it ends and when its current period started
• a record of each Room Pack preview added to your account, used, or removed after a refund

We do not store the other details in Apple's signed record.

Why. To give you the plan and the previews you paid for, to stop one purchase being used by more than one account or after a refund, and to answer your questions about purchases. Lawful basis: Contract for giving you what you bought. Legitimate interests for preventing misuse and for answering your questions.

Who receives it. Apple processes your payment as a separate controller under its own privacy policy. The only thing we give Apple is the account link described above. We do not share your purchase records with anyone else, apart from the hosting provider and developer who run our systems, or when the law requires it (see Who receives your data).

How long we keep it. Until you delete your account. Deleting your account deletes your plan, your purchase records and your Room Pack previews, including any you have not used. After that we keep only the Apple transaction ID, product and date of each Room Pack you bought, with nothing that links it to you, so that the same Room Pack cannot be used twice. These have no automatic deletion at present. Apple keeps its own records of your purchases under its own terms.

Export. Export my data includes your plan, your purchase records and the record of your Room Pack previews.

These companies and people receive your data to run ShopMyRoom. Most of them act on our instructions. Apple for payments, Awin, the shops and regulators decide for themselves how to use data they receive.

• Alibaba Cloud (Model Studio, DashScope). Why: Runs the AI chat, makes previews and checks Community posts against the Community rules. What they receive: Chat messages and tool choices, room photos you send and their web addresses, room name and type, retailers' product images, previews, and the caption and pictures of your Community posts. Where: Mainland China.
• Our hosting provider. Why: Stores your account, photos, chats and previews, and our backups. What they receive: All the data listed under What we collect. Where: United States.
• Our developer, a contractor. Why: Runs, fixes and supports the service. What they receive: Remote access to our production systems, which hold all of that data. Where: Works from mainland China.
• Google (Firebase Authentication). Why: Sign-in and account identity. What they receive: Email, name, sign-in ID, profile picture link, your password in secured form. Where: Google's global network, including the United States.
• Apple (Sign in with Apple). Why: Sign-in, if you choose it. What they receive: The name and email address you choose to share. Where: Apple's network.
• Apple (App Store purchases). Why: Takes the payment if you buy a subscription or a Room Pack. What they receive: Your ShopMyRoom account ID, which the app attaches to the purchase. Apple handles the payment as its own controller under its own privacy policy. Where: Apple's network.
• Awin and the shops you tap through to. Why: Take you to the shop and pay us a commission. What they receive: When you tap View on retailer your device connects to Awin and the shop, which see that you came from ShopMyRoom. We do not send them your name, email address or account ID. Where: UK, EU and elsewhere. They decide how to use their data and have their own privacy notices.
• Other ShopMyRoom users. Why: You chose to share a post to Community. What they receive: Everything in each post our team approves (caption, photos, room name, type and photos, AI preview and products), the name on your account or "ShopMyRoom user", your profile picture if your account has one, and the number of likes. The app also receives your internal account ID, which it uses for blocking and does not show. They do not receive your email address. Where: Wherever they use the app. We cannot control what they do with what they see, for example if they take a screenshot.
• Regulators, courts and our professional advisers. Why: When the law requires it or to protect legal rights. What they receive: Only what is needed. Where: UK.

If we join, sell or restructure our business, your data may pass to the new owner, who must follow this notice.

These are the transfers of your data outside the UK.

• AI processing in mainland China. We rely on your explicit consent, as described above.
• Hosting and backups in the United States. Our server and its nightly backups are in the United States.
• Our developer in mainland China. Our developer is a contractor who works from mainland China and can reach our production systems remotely, including the database, the stored photos and the chats, to run, fix and support the service.
• Google. Google handles sign-in on its global network, including the United States. Google's Firebase data processing terms cover transfers under the UK GDPR. They say Google relies on the Data Privacy Framework for transfers to its certified US entities and on standard contractual clauses where that is not available.
• Apple. Apple handles Sign in with Apple and App Store purchases on its own network, as its own controller under its own privacy policy. What it receives from us is listed under Who receives your data.

We are putting UK transfer terms in place for the US server and for our developer's access. Until they are in place, you can ask us how your data is protected in any of these transfers by emailing support@shopmyroom.co.uk.

We keep your data until you delete it or your account, except where the table says otherwise. If we set shorter fixed periods we will update this notice.

Data you delete in the app can stay in our backups for up to 32 days.

Export. Go to Profile, then Settings, then Data & privacy, then Export my data. The app creates a JSON file and opens your phone's share sheet so you can save it (for example with Save to Files on iPhone) or send it. The file lists your profile, your rooms (name, type and status), saved products, chats with their messages and picture links, reports, AI sharing choices, your Community posts (caption, links to your phone photos and status, including deleted posts we still hold), the posts you like, the users you block, your acceptance of the Community rules, and your plan, purchase records and Room Pack previews. It leaves out measurements, usage and crash events, links to your room photos and floor plans, extra chat attachments, the data we work out from your photos, and the room details, AI preview, products and automated check results in your Community posts. Email support@shopmyroom.co.uk for a fuller copy.

Delete. Go to Profile, then Settings, then Data & privacy, then Delete account, and confirm. If you signed in with Apple on an iPhone, the app also asks you to confirm with Apple so that we can disconnect your Apple ID from ShopMyRoom. You can also email support@shopmyroom.co.uk from the address on your account with the subject Delete my account. The Delete Account page has the steps.

Deletion removes your account and sign-in (including your Google Firebase login), rooms, photos, floor plans, measurements, chats, AI previews, saved items, Community posts and their photos, Community likes and blocks, your acceptance of the Community rules, AI sharing choices, reports (including reports other people made about your posts), usage events, crash events, your plan, purchase records and Room Pack previews, including any you have not used. Deleting your account does not cancel an App Store subscription. Cancel it first: open Settings on your iPhone, tap your name, tap Subscriptions, tap ShopMyRoom, then tap Cancel Subscription. We delete your sign-in before completing deletion of your account records. If deletion fails, contact support so we can check what remains. If we cannot delete your sign-in account, nothing is deleted and the app asks you to try again. Photo and preview files are removed from storage right after. If that step fails the files can remain, so email us if you want them checked. Preview images created before 8 September 2026 were stored without your account name, so they are not deleted when you delete your account.

What can remain after deletion:

• A random sign-in ID with no name or email, kept so that a deleted account cannot be recreated by mistake. It has no automatic deletion at present.
• Staff action logs that refer to your internal ID. They have no automatic deletion at present.
• Backups, for up to 32 days.
• Data already sent to Alibaba Cloud, which it holds under its own terms.
• The Apple transaction ID, product and date of each Room Pack you bought, with nothing that links them to you. No automatic deletion at present.
• Apple's own records of your purchases.
• Records we must keep by law.

Delete a Community post. You can delete any of your own posts in Community at any time without deleting your account. The post disappears from Community straight away. The post and its photos stay in our systems until our team removes them. Email support@shopmyroom.co.uk if you want that done.

Under UK data protection law you have the right to:

• be told how we use your data, which this notice does
• see the data we hold about you (use Export my data in the app, or email us for a fuller copy)
• correct wrong data (edit your profile in the app or email us)
• delete your data (see above)
• restrict how we use your data
• move your data, using the export file
• object to our use of your data for our legitimate interests, including usage events
• withdraw your consent at any time where we rely on it (see the AI section)
• ask for a person to look again at an automated decision that significantly affects you. We do not make such decisions.

To use these rights, email support@shopmyroom.co.uk. We may ask you to confirm who you are. We reply within one month. For complex requests or many requests we can extend this by up to two further months and we will tell you why. There is normally no charge.

Please tell us first at support@shopmyroom.co.uk. We will confirm that we have your complaint within 30 days, look into it without undue delay and tell you the result.

You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or by telephone on 0303 123 1113.

ShopMyRoom is for people aged 18 and over. The app asks you to confirm that you are 18 or over before it creates an account. We do not knowingly collect data from anyone under 18. If you think a child has given us data, email support@shopmyroom.co.uk and we will delete it.

Many product links are affiliate links. If you buy after tapping one, a shop may pay us a commission. It does not raise your price. Read our Affiliate Disclosure. When you leave ShopMyRoom for a shop, the shop's and the affiliate network's own privacy notices apply.

Our website sets no cookies. It stores up to two values in your browser's local storage. See the Cookie Policy.

We will update the date at the top of this notice when we change it. We will tell you in the app before a material change takes effect, for example a new AI provider or a new country.