Privacy Policy — Home Morph

1. Overview

Home Morph ("the App") is developed and operated by ProtoSwarm Limited ("We", "Us", "Our"). The App lets you redesign photos of your rooms using artificial intelligence.

Our core privacy commitment is simple:

• The App works without any account and collects no Personally Identifiable Information (PII) by default. Your device is identified only by an anonymous, randomly generated device token. Signing in is entirely optional and exists solely to protect your purchased tokens (see Section 2.4).
• Your room photos are sent to our servers and to Google Gemini AI only when you explicitly request an AI redesign. They are processed and returned to you — they are not stored on our backend after processing is complete.

Use of the App is also governed by our Terms & Conditions, which include important disclaimers regarding AI-generated content, Tokens, refunds, and limitations of liability.

2. What Data We Process

2.1 Room Photos (AI Redesign)

When you use the AI room redesign feature, the following is transmitted:

• The room photo you selected, and (optionally) a style reference photo you chose;
• Your text description of the desired changes;
• Your selected redesign options (e.g. quality, redesign mode).

Before upload, photos are resized, compressed, and stripped of all metadata (EXIF) — including any embedded GPS location, date, or camera information. Only the image pixels themselves are transmitted.

How your photos travel:

1. Your photo is sent over an encrypted connection (HTTPS) to ProtoSwarm servers (api.protoswarm.com).
2. Our server forwards the photo to Google LLC's Gemini AI API, which generates the redesigned image.
3. The result is returned to your device.
4. After processing is complete, your original and generated images are deleted from our backend. We do not keep a copy, use your photos for AI training, or share them with anyone other than Google's Gemini API as described above.

Google's processing of data submitted to the Gemini API is governed by Google's own terms and privacy policies. See https://policies.google.com/privacy and https://ai.google.dev/gemini-api/terms.

AI redesign is entirely optional and user-initiated. No image ever leaves your device unless you tap the button to start a redesign.

2.2 Anonymous Device Registration

To provide the service and manage your token balance, the App registers your device with our backend using:

• A randomly generated anonymous device identifier (UUID);
• Platform (Android / iOS) and App version;
• Device model and manufacturer (e.g. "Pixel 8", "Google").

This identifier is not linked to your name, email address, phone number, or any other personal information — we never ask for any. It exists solely so that your token balance and redesign requests can be associated with your device.

2.3 Purchase Verification

When you buy tokens, the purchase receipt issued by Google Play or the Apple App Store is sent to our backend to verify the purchase and credit tokens to your device. We never see or store your payment card details, billing address, or store account identity — payments are handled entirely by Google Play or the Apple App Store.

2.4 Optional Sign-In (Account Linking)

To protect your purchased tokens against device loss or replacement, you can optionally sign in with Google (Android) or Apple (iOS). If you do, we receive and store:

• A stable, provider-issued account identifier;
• Your email address, if the provider shares it (with Sign in with Apple you can choose to hide it);
• Your display name, if the provider shares it.

This information is used only to key your token balance to your account so it can be restored on any device you sign in on. We do not use it for marketing, we do not send you emails, and we never sell or share it. If you never sign in, none of this data is collected and the App remains fully anonymous.

You can unlink at any time by signing out in the App, and you can request deletion of your account record by emailing contact@protoswarm.com.

2.5 Data Stored Locally on Your Device

The following stays on your device only and is never uploaded:

• Your redesign history (before/after images and prompts);
• App preferences and settings;
• Your device's secure credentials used to sign API requests.

Uninstalling the App permanently deletes this local data.

2.6 What We Do NOT Collect

• No names, email addresses, or phone numbers — unless you voluntarily sign in (Section 2.4);
• No passwords — sign-in, if you choose to use it, is handled entirely by Google or Apple;
• No location data;
• No contacts, files, or photos other than the images you explicitly submit for redesign;
• No advertising identifiers processed by us — advertising data is handled only by Google AdMob, and only when you choose to watch an optional rewarded ad (Section 2.7).

2.7 Optional Rewarded Ads (Google AdMob)

The App contains no banner ads, no interstitial ads, and no forced advertising of any kind. The only ads in the App are rewarded ads that you explicitly choose to watch in exchange for a free AI token.

When you choose to watch a rewarded ad, the ad is served by Google AdMob (Google LLC). Like any ad network, Google may process device information (such as advertising identifiers and IP address) to serve and measure the ad; this processing is governed by Google's own policies — see https://policies.google.com/privacy and https://support.google.com/admob/answer/6128543. Where required, you may be shown a consent prompt before ads are personalized, and non-personalized ads may be served instead.

When you complete a rewarded ad, Google's servers notify our backend with a cryptographically signed confirmation containing your anonymous device identifier, which we use solely to credit the earned token. We receive no other advertising data. If you never tap "watch an ad," no ad is ever loaded or shown.

3. Third-Party Services

We do not sell, rent, or trade any data to any third party.

4. Data Security

• All communication between the App and our servers uses encrypted HTTPS connections.
• Every API request is authenticated with a per-device cryptographic signature (HMAC-SHA256), so only your device can access its token balance.
• Device credentials are stored in your device's secure storage (Android Keystore / iOS Keychain).
• Images are held on our servers only for the duration of processing and are deleted afterwards.

5. Data Retention

• Images: retained only transiently during AI processing, then deleted. Not stored, not used for training.
• Anonymous device record and token balance: retained for as long as needed to provide the service. Because the record contains no personal information, it cannot be linked back to you as an individual.
• Purchase verification records: retained as required for accounting and fraud-prevention purposes.

6. Your Rights

Depending on your jurisdiction (including under UK/EU GDPR), you may have rights to access, correct, or delete personal data. In practice:

• You can delete all local data by uninstalling the App;
• You can avoid any image transmission by simply not using the AI redesign feature;
• You can unlink your sign-in account at any time by signing out in the App;
• You may contact us at contact@protoswarm.com to request deletion of your anonymous device record and/or your linked account record (including email and name).

7. Children's Privacy

The App is not directed at children under 13. We do not knowingly process data from children under 13. If you believe a child has provided data through the App, contact us and we will delete it.

8. International Data Transfers

Our servers and Google's Gemini API may process images in data centres located outside your country, including the United Kingdom, the European Union, and the United States. Transfers are protected by encryption in transit and the safeguards described above.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced within the App; minor updates will be reflected by a new Effective Date on this page. Continued use of the App after changes take effect constitutes acceptance.

10. Contact

For any privacy questions or requests:

Email: contact@protoswarm.com
Subject line: "Privacy Policy Inquiry — Home Morph"

ProtoSwarm Limited, Company No. 15050578, United Kingdom.

Terms & Conditions — Home Morph