Roomascope
Privacy notice
Updated 23 October 2026
Who is responsible
Roomascope (Pluto Lab) is operated by Aleksandr Plutalov, an individual entrepreneur in Belgrade, Serbia. For privacy requests, contact [email protected].
What we process
- Room photos you choose or take, generated designs, style choices and design history.
- A randomly assigned account identifier, session credentials and subscription allowance. Email signup is not required; the identifier can still relate to your activity.
- Purchase identifiers, subscription status, billing periods and usage. Apple processes your payment; we do not receive your full payment-card details.
- Product events, such as completing onboarding, attempting a purchase or saving a design, and technical diagnostics such as app version, error codes and crash traces.
- Information and attachments you choose to send to support.
How we use information
We process photos and account data to provide the designs and history you request, manage paid access, and respond to support requests. We use limited diagnostic and usage information to keep the service reliable, prevent abuse and understand product use. Purchase records support subscription administration, accounting and legal obligations.
Where applicable, the legal bases are performing our contract with you, complying with legal obligations, and our legitimate interests in service reliability, security and product improvement. Advertising tracking uses your permission. You may object to processing based on legitimate interests and contact us about applicable choices.
Service providers
- Supabase: account sessions, private photo/design storage and backend services.
- fal and the selected model provider: process the photo and instructions when you request a design. The current model is Nano Banana 2. Temporary generated files may be accessible to anyone with their provider-generated URL; do not share those links.
- Apple and RevenueCat: purchases, subscription status and restoration.
- PostHog: explicit product events associated with the app account identifier.
- Sentry: crash and error diagnostics associated with the app account identifier.
- Meta: advertising measurement when enabled, as described below.
- Cloudflare: hosts this support site and processes connection information to deliver and protect it. The site does not install an advertising pixel or analytics script.
We do not intentionally include room photos or photo URLs in analytics, billing or crash events. Session replay and automatic interaction recording are disabled. Service providers receive connection information, which can include an IP address, when requests reach their services.
Advertising choices
When Meta measurement is enabled, iOS asks whether you allow tracking. If you allow it, the app can share its advertising identifier, a Meta-generated app identifier and app activation information with Meta; RevenueCat can use these identifiers to send subscription events to Meta. This helps measure advertising and match activity to ads or Meta accounts. We do not send your room photos to Meta for advertising.
You can refuse tracking and continue using the app, or change the permission in iOS Settings → Privacy & Security → Tracking. Refusal disables the app’s consent-based Meta event path. Apple may separately provide privacy-preserving, aggregated install attribution without giving us your advertising identifier. Advertising features are being tested and may not be enabled in every build.
Storage and deletion
Your account, photos and designs remain in our application storage until you delete your account and designs. In-app deletion blocks access immediately and queues server cleanup, normally starting after a ten-minute grace period. Network or provider failures can delay completion. See deletion instructions.
The app’s deletion worker removes the Supabase account and associated application photos and designs. It does not automatically erase data held by every other provider. For deletion of associated AI-processing, analytics, diagnostic or subscription records, contact support with your Support ID. We will verify the request and handle it with the relevant providers, subject to applicable exceptions.
Provider copies, logs and backups may persist under provider retention and backup processes; we do not promise that these disappear immediately or on the same schedule as application storage. We retain limited transaction, allowance, security and deletion records where necessary for accounting, legal compliance, resolving disputes and preventing repeated grants. Retention depends on those purposes and applicable obligations; we do not keep those records as an active photo history. Irreversibly aggregated statistics may remain.
Deleting the app alone does not delete server data. Copies saved to Photos or shared outside the service remain under your control. Account deletion does not cancel an Apple subscription.
International processing
Our providers may process information outside Serbia or your country, including in the United States. International processing is subject to applicable data-protection requirements and the safeguards available under our providers’ agreements.
Your rights
Depending on applicable law, you may request access, correction, deletion, a copy of your data, restriction of processing, or object to processing. You may withdraw consent without affecting processing that took place before withdrawal. Email us using the address above; include your Support ID if available, but never passwords, verification codes or payment-card details. We may need to verify that the request concerns your account. You can also raise a concern with the data-protection authority where you live, including Serbia’s Commissioner for Information of Public Importance and Personal Data Protection.
Children and changes
The service is not intended for children under 13. Contact us if you believe a child has provided personal information. We may update this notice; the date above identifies the current version, and material changes will be communicated as required.
Provider privacy information
Supabase · fal · RevenueCat · Apple · PostHog · Sentry · Meta · Cloudflare