Privacy policy

Decorous for iPhone and iPad, by Strange Mesa LLC. Last updated 2026-10-23.

Your photos

What happens when you make a design

When you start a redesign, virtual staging, declutter, paint, curb appeal or backyard job, or type an edit, the app sends the photo and your choices (job, room type, style, color palette, how much to change, and any text you typed) to our server over an encrypted connection. Our server resizes the photo and sends it, with an instruction, to Google's Gemini image service, which returns the edited image.

• Input photos are not stored. Our server uses your photo to make the result and then discards it. We don't save it to a database or to storage.
• Results are stored. The result image is saved in a Google Cloud Storage bucket under a long random file name, and the app loads it from there. Anyone who has that exact link can open the image, but the link isn't published or listed anywhere, and it isn't connected to your name, email or Apple Account. The app keeps your list of past results in the History tab on your device.
• Design advice. If you use the Advice tab, the photo and your question are sent through our server to OpenAI to write the answer. We don't store the photo.

The app only reads the photos you pick or take. It doesn't scan your library.

Older versions. Earlier versions of Decorous could add results to an in-app public feed unless you marked them private. Current versions don't add anything to it. If you'd like an old result removed from the feed or from storage, email us.

What else we collect, and why

App usage analytics (Google Firebase Analytics)

The app records events about how it's used, so we can see what works and what to fix: for example, which job you picked, that a photo was added, that a result was made, saved or shared, that an edit was typed, and steps in the subscription screens (shown, closed, purchase started, completed or failed, restore). We also record which version of a screen you saw when we test changes.

Firebase also collects standard information automatically: device model, iOS version, app version, language, approximate country or region (worked out from your IP address), session and first-open times, and a random identifier for this installation. We attach the random customer identifier from RevenueCat (below) so analytics and purchases can be matched. Analytics don't include your photos or what you typed.

Subscriptions (Apple and RevenueCat)

Subscriptions are bought through Apple, which handles payment; we never see your card details. We use RevenueCat to confirm subscriptions and restore them. RevenueCat receives your App Store transaction records and a random customer identifier it creates for the app. It doesn't receive your name or email. Our server also receives that identifier when the app loads its settings, to decide which version of a screen you see in a test.

Apple Ads attribution

If you installed the app after seeing one of our ads on the App Store, Apple's AdServices framework can tell us which campaign, ad group and keyword led to the install. The app passes Apple's attribution token to RevenueCat, which asks Apple for that information. It tells us which ads work; it doesn't identify you.

Notifications

If you allow notifications, the app can remind you about a design. Firebase Cloud Messaging gives your device a push token so we can send them. You can turn notifications off in the iPhone Settings app at any time.

What we don't do

• We don't use the advertising identifier (IDFA), and the app never asks for permission to track you.
• We don't show ads in the app.
• We don't sell your data or share it with data brokers or advertisers.
• We don't use your photos to train AI models, and we don't ask for an account, your location or your contacts.

Who processes the data

• Google (Gemini image service, Cloud Run, Cloud Storage, Firebase Analytics and Cloud Messaging): Google privacy policy, Firebase privacy information
• OpenAI (design advice): OpenAI privacy policy
• RevenueCat (subscriptions): RevenueCat privacy policy
• Apple (App Store, payments, AdServices attribution): Apple privacy policy

We use these services through their paid business APIs. Their handling of the data we send is set by their terms with us and their own policies. Data may be processed on servers in the United States and other countries.

How long we keep it

• Input photos: not kept.
• Result images: kept in storage so the app can show them, until you ask us to delete them or we clear old results.
• Analytics: kept for the retention period set in Firebase, then deleted.
• Subscription records: kept as long as needed for purchases, refunds and accounting.

Your choices and rights

• To have results or analytics linked to your installation deleted, email support@strangemesa.com. Because we don't know who you are, we may ask for details (such as the image, or roughly when you made it) to find it.
• Depending on where you live (for example the EU, UK or California), you have rights to access, correct, delete or move your data, and to object to processing. Email us and we'll respond within 30 days. You can also complain to your local data protection authority.
• You can stop all collection by deleting the app.

Children

The app isn't directed at children under 13, and we don't knowingly collect personal information from them. If you think a child has sent us data, email us and we'll delete it.

This website

This site has no analytics, no ads and no cookies. The App Store badge image is loaded from Apple. Our hosting provider (Google Firebase Hosting) keeps standard server logs, such as IP addresses and pages requested, to run and protect the service.

Changes

If we change what the app collects, we'll update this page and the date at the top.

Contact

Strange Mesa LLC, 611 South DuPont Highway, Suite 201, Dover, DE 19901, USA.
Privacy questions: support@strangemesa.com.