← Back to home

Privacy Policy

Version 1.10 · Last updated: 13 October 2026

Where HomeAIFlow stands today. The app is in public testing. Online accounts and photo syncing are not switched on yet: your data stays on your device. The parts describing the account, the private storage and the subscription will apply once accounts open, with version 1.0. We will update this page then, and the date at the top will say so.

In short

HomeAIFlow turns a photo of a room into a short tidying plan. To do that, it needs very little.

• No photo goes to the AI without your explicit agreement, asked for in the app before the first send. Without it, local mode prepares your plan on the device.
• Your photo is used to prepare your plan, then our servers forget it. We do not store it and we do not sell it to anyone.
• Your photos, rooms and progress stay on your phone first. With an account, they can be saved in a private space that belongs to you alone, hosted in Europe, in Ireland.
• No targeted advertising, no cross-app tracking, no data resale.
• You can delete your account and everything attached to it, from the app or from the web.

This page explains the details. It is written to be read, not endured.

1. Who is responsible for your data

The data controller is MERCURE XII, a French limited liability company (société à responsabilité limitée) with share capital of EUR 1,000, registered office at 140 route du Bret, 01540 Saint-Julien-sur-Veyle, France, registered with the Bourg-en-Bresse Trade and Companies Register under number 878 302 181.

• Privacy contact: privacy@homeaiflow.com
• General contact: support@homeaiflow.com

We have not appointed a Data Protection Officer: Article 37 GDPR does not require one here, since neither regular and systematic monitoring on a large scale nor large-scale processing of special-category data is part of our core activities. Write to privacy@homeaiflow.com with any question about your data.

Full legal notice: homeaiflow.com/en/legal-notice.

2. What HomeAIFlow processes, why, and on what basis

3. Your photos

This is the most sensitive point, so it is the most detailed.

• The photo is compressed on your phone before anything is sent. It is resized to 1024 pixels.
• Nothing goes anywhere without your agreement. Before the first send, the app explicitly asks whether you accept your photo being analysed by OpenAI. It names the service, says what goes and what never goes, and offers two equally weighted ways out: switch photo analysis on, or stay in local mode. Closing without choosing is not agreement. Your choice is remembered, visible and changeable at any time from Home → Photo analysis.
• In local mode, no photo leaves the device. HomeAIFlow shows which mode is active before every analysis, and stays fully usable without AI analysis: declining never leaves you without a plan.
• In photo analysis mode, the image goes to our servers and then to OpenAI, solely to produce your plan. The call is made with the store: false option: the request is not retained by OpenAI to train its models, nor exposed in its dashboard. OpenAI may keep technical security logs for up to 30 days, depending on the API account settings and the terms in force.
• What travels with the photo is kept to a minimum. Sent with it: the room category — living room, kitchen, bedroom, child's room, bathroom, entryway, other — your home type, whether children live with you and their age ranges, whether toys are in living spaces, your available time and your language. The name you give a room never leaves the app: "Léa's bedroom" becomes "bedroom". Your name, email and account identifier are never sent.
• Our servers do not keep the photo. It is not written to any file, any log or any database. The cache that avoids re-running an identical analysis holds only the generated plan and a SHA-256 fingerprint of the image and its context, for 14 days. A fingerprint cannot be turned back into an image.
• If you add an "after" photo, both images are compared the same way, to describe the change and prepare your next starting point.
• With an account, your photos live in a private space. They are never public: each file is isolated under your own identifier, and display goes through a short-lived link that only your signed-in device can request. Your starting photo and your latest photo for each room stay as long as your account exists.
• Your online journal is kept until the end of your discovery, plus seven days. The photos in your journal — the ones that are neither your starting photo nor your latest photo — and the matching sessions are kept on our servers until that date, which the app shows you. With an active HomeAIFlow Plus subscription, the period is 365 days: your full photo journal is part of what the subscription pays for, because keeping it has a cost. We keep for less time what the service does not need us to keep for longer (Article 5(1)(e) GDPR). Once the date that applies to your account has passed, those photos and sessions are erased for good: subscribing later does not bring them back. This rule only covers our servers — photos kept on your device are never erased by us.
• A photo of your home says a lot. It can show people, documents, medication, religious or political objects. Frame only what you want analysed, and keep faces and readable paperwork out of the shot.
• HomeAIFlow is not a backup. Photos kept in the browser can disappear if you clear its data or if the system reclaims storage.

4. Your children

If you tell us children live with you, HomeAIFlow offers optional age ranges — under 3, 3 to 5, 6 to 9, 10 and over — to adapt storage height, safety and how much a child can do alone.

We never ask for a child's name, date of birth or identifying photo. These answers stay optional: you can skip them without losing the service.

HomeAIFlow is intended for adults. The service is not aimed at people under 15 (the age of digital consent in France) and we do not seek to collect their data. If an account was created by a minor, write to us and it will be deleted.

5. Who receives data

We sell no data and we run no targeted advertising.

These providers act on our instructions, under a processing agreement compliant with Article 28 GDPR.

We may also disclose data to an authority where the law requires it, and only then.

HomeAIFlow's social media accounts

HomeAIFlow publishes its own content (app screenshots, demos, tidying tips) on its Instagram and Pinterest accounts. To do so we use the official Meta and Pinterest APIs, authorised by our own brand account. These integrations are used only to publish to our own accounts: they do not read, collect or store any data about you or about people who follow or comment on our accounts. Access tokens are kept on our servers, accessible to us alone, and can be revoked at any time from Meta's or Pinterest's settings. If a household photo is ever published, it will only be with that person's written consent and without their name. What you see or do on Instagram and Pinterest is governed by those platforms' privacy policies.

6. Where your data lives, and what leaves the European Union

Your account, profile, rooms, progress and synced photos are hosted in the European Union, in Ireland. We chose that region so that your data stays in Europe. For this region Supabase runs on Amazon Web Services infrastructure, also located in the European Union.

Two processing operations still leave the Union.

• Analysing your photo, if you switched it on: the image and the room category go to OpenAI, in the United States, for the time needed to produce your plan. Nothing is kept there to train a model. In local mode, this transfer does not happen.
• Hosting the website and the functions, and managing the subscription, rely on providers established in the United States (Vercel, RevenueCat).

Technical support staff of our European providers may also access data from the United States.

Those transfers rely on the European Commission's Standard Contractual Clauses and, where applicable, on the provider's EU-US Data Privacy Framework certification.

7. Audience measurement

On the web version, HomeAIFlow uses Vercel Web Analytics to measure visits and key journey steps: onboarding completed, plan created, session finished, language changed.

These events contain no photo, no name, no email address and no custom room name. The room is reduced to a stable category — living room, kitchen, bedroom, bathroom, entrance, child's room, other.

This measurement applies to the web version. No event is transmitted from the iOS and Android apps: the code only switches measurement on for a public web address, which neither the iOS WebView nor the Android WebView is.

No advertising tracker is used, no advertising identifier is read, and no data is cross-referenced with other sites or apps. On iOS, HomeAIFlow therefore shows no App Tracking Transparency prompt.

Why there is no banner. This measurement is designed to stay within the consent exemption the French data protection authority (CNIL) provides for audience measurement (deliberation no. 2020-091):

• it only measures HomeAIFlow's own audience, on our behalf alone;
• it produces aggregated statistics only, with no cross-referencing with your account or any other processing;
• no cookie is set: the provider tells visits apart using a fingerprint computed from the request, discarded after 24 hours;
• no data is passed to a third party for its own purposes, and no tracking links your browsing across several websites or apps;
• durations are capped: 24 hours for the visit fingerprint, at most 12 months for the statistics.

The detailed criterion-by-criterion analysis is kept internally and can be shared on request.

A copy of the last hundred events stays on the device to make testing easier. It goes nowhere and it is erased along with your data from Home → Erase my data.

8. Reminders

The daily reminder is only offered after your first successful session, never during onboarding. It runs locally on your phone: no notification is sent from a server. You can turn it off in HomeAIFlow or withdraw the permission in your system settings.

9. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability set out in Articles 15 to 22 GDPR, as well as the right to give directions on what happens to your data after your death.

To exercise them:

• In the app: Home → Account → Delete my account, or Erase my data on this device.
• By email: privacy@homeaiflow.com.
• On the web: homeaiflow.com/en/delete-account.

We reply within one month, extendable by two months for a complex request (Article 12(3) GDPR). We may ask for something that lets us verify your identity, without keeping any copy of an identity document.

If our answer does not satisfy you, you can lodge a complaint with the CNIL: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or www.cnil.fr. You may also contact the supervisory authority of your own country of residence.

10. What happens when you delete your account

• Your access is cut off immediately.
• Your account, profile, rooms, progress and synced photos are erased immediately, in a single operation.
• Residual copies, in particular technical backups, disappear within 30 days at the latest.
• Local data on the device is erased at the same time.
• Your subscription customer identifier is deleted or anonymised.
• What remains: what the law requires us to keep, in particular proof that your request was handled. Your subscription invoices are held by Apple or Google, who take the payment and issue them under their own accounting obligations — including on the US storefront, where the publisher is the seller.
• Deleting your account does not cancel your subscription: cancel it in your store settings before the next renewal.

Details: homeaiflow.com/en/delete-account.

11. Security

• Traffic runs over HTTPS, with HSTS.
• The analysis API key stays exclusively on the server: it is never present in the app.
• No photo and no request body is ever logged.
• The technical keys that protect the service against abuse are hashed before being stored: your device identifier and, as a fallback, your IP address are kept only as a truncated SHA-256 fingerprint, never in the clear, and that fingerprint disappears with the counting window.
• API responses are never cached by an intermediary (Cache-Control: no-store).
• Microphone and geolocation are disabled at browser level; only the camera is allowed, and only when you trigger it.
• HomeAIFlow stores no password: authentication is delegated to Supabase Auth.
• On Android, automatic backup of HomeAIFlow data is disabled to avoid copying your photos elsewhere.

No system is infallible. If a data breach is likely to result in a high risk to your rights, we will inform you without undue delay, as required by Article 34 GDPR.

12. Automated decision-making

The tidying plan is produced by an artificial intelligence model. It is a household organisation suggestion: it produces no legal effect and has no similarly significant effect on you within the meaning of Article 22 GDPR. You remain free to follow or ignore each step, and local mode produces a plan without any image analysis.

13. Changes

We may update this policy. The date and version number at the top of the page show the latest revision. For a significant change — a new purpose, a new recipient, a new retention period — we will tell you in the app or by email before it takes effect.

14. Contact us

MERCURE XII — HomeAIFlow 140 route du Bret, 01540 Saint-Julien-sur-Veyle, France

• Privacy and data rights: privacy@homeaiflow.com
• Support: support@homeaiflow.com
• Security: security@homeaiflow.com