Privacy Policy
Effective date: August 6, 2026 · Last updated: August 6, 2026
This Privacy Policy describes how Restyla: AI Interior Design ("Restyla," "we," "us," or "our") handles your information. It applies to the Restyla app for iPhone (the "App").
Also see our Terms of Service and Support.
Who We Are
Data Controller: Anton, individual developer
Location: Batumi, Georgia
Contact: support@byanton.dev
Website: byanton.dev
Summary, and the one thing that matters: Restyla restyles a photograph of your room, so the photograph you choose does leave your device — it has to, because the image model that redraws it runs on a server. That is the only thing that leaves. It is sent to produce the picture you asked for and nothing else, it is never used to train any model, it is never sold or shared with advertisers, and it is deleted automatically: originals after 2 hours, results after 24 hours. There is no account and no sign-in. We collect no name, email, location, contacts, or tracking identifiers; there are no ads and no third-party analytics SDK in the app at all. Your finished rooms are stored only on your device.
1. Information We Collect
1.1 The photograph you choose
| Data | Purpose | Where it goes | Retention |
|---|
| The room photograph you take or pick | To produce the restyled picture you asked for | Uploaded over HTTPS to our own server (Cloudflare Worker), which passes it to our image-generation provider | Deleted after 2 hours, by a scheduled sweep that runs hourly — not a setting someone can forget to tick |
| A reference picture, if you choose to bring one | Read for its colours and materials only, never its layout | Same as above | Same as above |
| The restyled result | Returned to your phone | Held briefly so the app can collect it if you close it mid-generation | Deleted after 24 hours |
We do not look at your photographs, we do not index them, and we do not keep a copy beyond the windows above. We never compute or store an image hash, so there is nothing left that could identify a picture after it is deleted.
1.2 Information that stays on your device
| Data | Purpose | Storage | Retention |
|---|
| Your finished rooms — the before and after images | Your archive, grouped by room and project | On your device, in the app's own container | Until you delete them in-app or delete the App |
| Room names, project names, notes about what must stay | Organising your work | On your device | Same |
| Your budget figure, if you type one | Working out proportions on device, in your currency | On your device (UserDefaults) | Same |
| Your room balance | Knowing how many restyles you have left | On your device | Same |
None of this is transmitted to us or to anyone else.
1.3 Information collected automatically
- A random per-install identifier — a UUID the app generates on your device the first time it runs. It is used for one thing: rate limiting, so one installation cannot flood the service. It is not the IDFA, not the IDFV, and it is not linked to you, to your photographs, or to anything else. Deleting the App discards it.
- Purchase status — handled entirely by Apple's StoreKit. We never see your payment details. Apple gives the app a receipt that says whether a subscription is active; that check happens on your device.
- Service metrics — our server records which endpoint was called, the room type, the scheme name, how long the generation took and whether it succeeded. It never records image bytes and never records an image hash.
Restyla contains no third-party analytics, advertising, attribution or crash-reporting SDK, and does not track which screens you view.
1.4 Information we do NOT collect
- Name, email, phone number, or address (unless you choose to email our support)
- Location — we never request location permission
- Contacts, calendar, microphone, or health data
- Your photo library — we can only ever see the single photograph you pick, chosen through Apple's own picker
- Advertising identifiers (IDFA) — we do not use App Tracking Transparency because we do not track
- Browsing history, cookies, or web tracking pixels
- No user accounts or registration; no Apple, Google, or social sign-in
2. Permissions the App Asks For
- Camera — only if you choose to photograph a room rather than pick an existing picture. The camera is used for that shot and nothing else; there is no background capture.
- Photo library — through Apple's system picker, which hands the app the one image you select and shows us nothing else in your library.
Both are optional in the sense that the app is useless without a picture, but you choose which picture and you can decline either permission and use the other.
3. Third Parties
| Who | What they get | Why |
|---|
| Apple | Payment details, subscription status | All purchases go through the App Store. We never see your card. See Apple's Privacy Policy. |
| Cloudflare | The request, including the photograph, in transit and in temporary storage | Our server runs on Cloudflare Workers and its temporary object storage. See Cloudflare's Privacy Policy. |
| Our image-generation provider | The photograph and the written scheme, for the seconds it takes to produce a result | To redraw the room. We use OpenAI's image API under terms that do not permit training on API inputs. See OpenAI's Privacy Policy and their API data usage policy. |
There is no advertising network, no data broker, and no analytics vendor in that list, because there are none in this app.
4. Legal Basis (GDPR)
- Performance of a contract (Art. 6(1)(b)) — processing the photograph you submit is the service you asked for; without it there is nothing to deliver.
- Legitimate interests (Art. 6(1)(f)) — the per-install identifier used for rate limiting, and the service metrics, both of which are necessary to keep the service running and neither of which identifies you.
We do not rely on consent for tracking, because we do not track.
5. Your Rights
Because there is no account, most of your data is simply in your hands:
- Delete everything — Settings › Delete everything on this device, or delete the App. Both remove your rooms, your projects and the per-install identifier.
- Your photographs on our side — already deleted, automatically, within 2 hours (originals) or 24 hours (results). If you want a specific request confirmed sooner, email us and we will tell you what we hold, which will almost always be nothing.
- Access, rectification, portability, restriction, objection (GDPR Art. 15–21) — email support@byanton.dev. We answer within 30 days.
- Complaint — you may lodge one with your local supervisory authority.
6. Children
Restyla is not directed at children under 13 and we do not knowingly collect information from them. If you believe a child has sent us a photograph, email us and we will delete it — though in practice the automatic sweep will already have done so.
7. International Transfers
Our server runs on Cloudflare's global network and the image model runs in the United States. Where your photograph crosses a border it does so under the processors' own standard contractual clauses, for the seconds it takes to produce your picture, after which it is deleted on the schedule above.
8. Security
- Everything in transit is over HTTPS/TLS.
- The temporary copies are held in private object storage that is not publicly listable, and are removed by a scheduled task rather than by hand.
- There is no user database to breach, because there are no users — there are only installs, and an install is a random number.
9. Changes
If this policy changes materially we will update the date at the top and, where the change affects what leaves your device, say so in the App. Continued use after a change means you accept it.
10. Contact
support@byanton.dev — Anton, individual developer, Batumi, Georgia.