Privacy Policy — Facade Architecture Design
Updated: 25 October 2026
Developer: Oana Rinaldi
iOS bundle / Android package: com.oanarinaldi.facadearchitecturedesign
Contact: oanaunciuleanu@gmail.com
Your photos, your control
The app creates architectural exterior concepts from a facade photograph you choose. You can browse the 40-style educational library without uploading a photo or creating an account. The app contains no advertising or third-party analytics trackers.
What stays on your device
Imported photos, rendered images, thumbnails, names, favorites and design settings are saved in the app's local collection. Photos are decoded and re-encoded as JPEG, limited to a 2048-pixel longest edge, before AI processing; this removes original EXIF location metadata. Exported files go only to destinations you choose in the system share interface.
Your own API key
If you use your own OpenAI API key, the optimized photograph and design prompt are sent directly to OpenAI (api.openai.com) only after you confirm Send photo & generate. We do not receive that key or those images through our server. OpenAI bills API usage to your provider account. A ChatGPT subscription does not supply API credits.
On iOS, credentials are kept in the system Keychain with iCloud synchronization disabled and device-only access. On Android they are AES-GCM encrypted using an Android Keystore key; app backup is disabled. Keys can be removed in Settings. iOS Keychain entries can remain after uninstalling the app, so remove your key before uninstalling if you want it erased. The browser development preview keeps personal keys only in memory for the current session.
Optional managed rendering
When managed service is enabled and you choose managed credits, the optimized image and prompt pass through our Cloudflare-hosted service to OpenAI. The service temporarily holds inputs and results so an interrupted request can be recovered. Inputs are deleted after processing; completed or failed job data and output images are removed by hourly cleanup after 24 hours (normally within 25 hours). A failed managed render returns its reserved credits. Your own saved collection remains on your device.
OpenAI processes API data under its own terms and retention rules. API content is not used to train its models by default. Review OpenAI's privacy policy and API data controls. Cloudflare's infrastructure processing is described in its privacy policy. Network services may process technical connection information, including IP addresses. Do not upload photographs containing sensitive information, people without permission, or documents.
Managed accounts and purchases
Managed accounts use a randomly generated private recovery credential rather than a required name or email login. Keep it secret: anyone holding it can access that credit balance. The app stores the credential securely on your device. The server stores a hash used to identify the account and a random account identifier.
Subscriptions and one-time credit packs, when available, are purchased through Apple's App Store or Google Play. We do not receive your payment card number. The service verifies store purchase references and keeps the minimum purchase status, period and credit ledger needed for fulfillment, recovery, refund handling and fraud prevention. Monthly credit allowances reset at renewal; they do not roll over. Pack credits do not expire and monthly credits are spent first. Keep your private recovery code to recover an existing pack balance after reinstalling; completed packs are not granted again by Restore purchases. Store records may remain with Apple or Google under their own policies. Purchases cannot be made until store billing and server verification are enabled.
Content reports
In-app reports contain a random local study reference, a selected reason, the time of the report and a pseudonymous managed-account reference for abuse review. They do not include the original photo, rendered image or prompt. Reports are kept for up to 31 days and then removed. You can also contact oanaunciuleanu@gmail.com; do not email API keys or private recovery credentials.
Permissions
Camera access is used only when you choose Take a photo. System photo selection lets you choose a specific image; the app does not scan your photo library. Save and share operations happen only when you request them. Internet access is required for generation, managed account operations and linked support pages; the style library is bundled for offline use.
Delete your data
Open Settings → Delete my data. If a managed account exists, its server data is deleted before the local collection and stored credentials are removed. A minimal pseudonymous purchase ownership marker may remain to prevent a receipt being claimed twice; it contains no photos, prompts or personal key. Uninstalling removes the app's local collection, subject to the iOS Keychain behavior described above. Deleting data does not cancel store subscriptions: cancel those separately in your App Store or Google Play subscription settings.
If you cannot access the app, see account deletion help or contact oanaunciuleanu@gmail.com. We will explain a secure recovery or verification route; do not send your private key or recovery code by email.
Children, changes and questions
The app is intended for adults designing or studying buildings, and is not directed to children. We do not sell personal information. Contact the developer to ask about access, correction or deletion of data you have supplied. We update this page when the service's data practices change.