HomeMaxxingHomeMaxxing is an iOS app that generates redesign proposals from photos of your home. This policy describes exactly what data the app processes, why, and for how long. We collect nothing beyond what is listed here.
1. What we collect
- Apple account identifier (via Sign in with Apple) and, if you share it, your name and email (Apple lets you hide it behind a private relay address) — to create and authenticate your account. Stored in Firebase Authentication (Google Cloud, EU region).
- Photos you submit (your room/exterior photos, and any inspiration images you add) — to generate your redesigns; that is the product. Stored in Firebase Storage, in a folder private to your account.
- Generated images and design recipes — to show your results and let you revisit them. Stored in Firebase Storage / Firestore, private to your account.
- Your style preferences (weighted tags such as "scandinavian", "warm wood") — to tailor future proposals to your taste. Stored in Firestore, private to your account.
- Credit balance and purchase records (product bought, transaction id — never your payment details) — to deliver what you paid for and prevent double-crediting. Stored in Firestore + RevenueCat.
- A pseudonymous credit record — a one-way hash of your Apple identifier plus your remaining credit balance — to restore your credits if you delete and later re-create your account, and to prevent abuse of the free starter credits. Stored in Firestore.
Location metadata (GPS/EXIF) is stripped from every photo on your device before upload.
2. What we do NOT collect
- No advertising identifiers, no ads, no tracking across apps or websites.
- No third-party analytics.
- No contacts, no precise location, no browsing history.
- No payment card details — payments are handled entirely by Apple.
We do not sell or rent any data, to anyone, ever.
3. How your photos are processed
Your photos are sent to our server (Firebase Cloud Functions, EU region) and forwarded to Google's Gemini API solely to produce your redesign images. They are used for that one purpose. We do not use your photos to train AI models, and our API agreement with Google provides that API content is not used to train their models either.
4. Processors
We rely on three processors, each receiving only what its role requires:
- Google Firebase (authentication, database, storage, functions — EU region
europe-west1) - Google Gemini API (image generation)
- RevenueCat (purchase processing; receives your app user id and transaction data from Apple, no payment details)
Apple additionally processes payments and, through DeviceCheck, device integrity checks (we receive a validity token, no device data).
5. Retention
- Photos, generated images, preferences, account data: kept until you delete them in the app, or until you delete your account.
- Account deletion is available directly in the app (Profile → Delete account). It permanently removes your account, photos, generations, references and preferences.
- After account deletion, we retain only: (a) the pseudonymous credit record described above — it contains no name, email, photo or preference, and cannot be traced back to you without your Apple sign-in; and (b) purchase transaction records, kept as required for accounting and fraud prevention.
6. Your rights (GDPR)
You can access, export, correct or erase your data. Deletion is self-service in the app; for anything else, email hello@nbapps.fr — we answer within 30 days. You may also lodge a complaint with your supervisory authority (in France, the CNIL).
Legal bases: performance of the contract (generating your designs, delivering purchased credits), legitimate interest (fraud prevention via the pseudonymous credit record and device integrity checks), and legal obligation (transaction records).
7. Children
HomeMaxxing is not directed at children under 15 and we do not knowingly collect their data.
8. This website (homemaxxing.app)
This website uses PostHog (EU-hosted) to measure aggregate traffic — pages viewed, approximate visit counts. It runs in cookieless mode: no cookies, no identifiers stored on your device, no cross-site tracking, and visits cannot be linked to you across sessions. The app itself contains no third-party analytics, as described above.
9. Changes
If this policy changes materially, the new version will be posted at this address with an updated effective date before it applies.