Privacy Policy

Last updated: July 29, 2026

Bozzetto ("we", "us") makes an iOS app that uses AI to redesign photos of your rooms, home exterior, or garden — six tools in all: Restyle, Clean Up, Wall Color, Flooring, Exterior, and Garden & Patio. This policy explains what we collect, how we use it, and the choices you have. We built Bozzetto to collect as little as possible: there are no accounts and no logins.

1. The photos you submit

When you choose to redesign a room, the photo you select is sent over an encrypted connection to our servers and then to Google, which generates the redesigned image. We show you a clear consent screen that names Google before your first photo is ever sent, and you can decline.

• Your photo is used only to generate your redesign.
• We do not store your original photo or the generated result on our servers after the request completes.
• Google's handling of data sent to its AI services is governed by Google's privacy policy and terms. See Google's Privacy Policy.
• The photos you submit and the results you keep are stored in the app's own storage on your device, never on our servers. Like other app data, they are included in your device's standard backups (for example iCloud Backup), which are yours and not accessible to us. Deleting the app removes them from the device.

2. Subscriptions and purchases

Subscriptions are sold through Apple's In-App Purchase and managed for us by RevenueCat. Plans are weekly, monthly, or annual. To enforce the generation allowance for your billing period, we store a small record keyed to an anonymous identifier (a RevenueCat app user ID that is not tied to your name, email, or Apple ID): your subscription tier, the current billing period, and how many generations you have used. We also keep a row per generation with no image in it — the date, which tool you used, and the style or room type you chose — so the allowance adds up, and the subscription-status messages RevenueCat sends our server. We never receive your full payment card details — Apple handles billing.

3. What we do not do

• We do not require an account, name, email, or phone number.
• We do not track you across other apps or websites.
• We do not show ads and do not sell your data.
• We do not use your photos to train any AI model.

4. Analytics & diagnostics

To understand how the app is used and keep it reliable, we collect anonymous usage events (for example, that a generation was started and which style was chosen) via PostHog, and crash and performance reports via Sentry. PostHog events are keyed to the same anonymous identifier as your subscription record; Sentry reports carry only its own random installation identifier. Neither is tied to your name, email, or Apple ID, and neither ever includes your photos, the images the AI returns, or any text you type into the app. Neither is used to track you across other apps or websites. We also log basic, non-identifying technical information server-side (such as error events and aggregate request counts); these logs do not include your photos.

5. How long we keep things

Your photos and the images the AI returns are never retained: they live on our servers only for the seconds it takes to produce your result. Your redesign history stays in the app's storage on your device and in your own device backups, and deleting the app removes it from the device. For the small records we do keep:

• The subscription and allowance record (section 2) is kept while your subscription is active and for up to 12 months afterwards, so that Restore Purchases keeps working — then deleted.
• The per-generation rows (date, tool, style — never an image) and the subscription-status messages from RevenueCat are kept for up to 12 months, then deleted.
• Analytics events in PostHog and crash reports in Sentry are retained for no longer than 12 months.

6. Children

Bozzetto is not directed to children under 13, and we do not knowingly collect personal information from them.

7. Your rights, including deletion

Because we do not hold accounts or your original photos, there is very little personal data to access or delete. Your on-device history is cleared by deleting the app. To have the server-side records tied to your anonymous identifier erased, or to exercise rights under the GDPR or CCPA:

• In the app, open Settings → Privacy & legal → Anonymous ID and tap that row to copy or share the full identifier.
• Email the identifier to support@zertyn.com and say you want your data deleted.

We then erase the per-generation rows and the subscription and allowance record keyed to that identifier (section 2). The identifier is the only thing that links those records to you: without it we have no way to find them, so we cannot act on a request that omits it. We do not need — and will not ask for — your name, email, Apple ID, or any App Store receipt, and we complete deletion requests within 30 days.

8. Changes

We may update this policy; we will revise the "Last updated" date above and, for material changes, surface a notice in the app.

9. Contact

Questions? Email support@zertyn.com.