← Back to Roomfit·Blog·Terms of Service·中文

Privacy Policy

Last updated: 28 October 2026

This policy explains what data Roomfit collects, why, who processes it, how long it is kept, and how you can ask to see or delete it. It forms part of the Terms of Service.

1. Who collects your data

Your personal data is collected, processed and used by Roomfit (“we”). For any questions, or to exercise the rights in section 5, email hello@roomfit.app.

2. What we collect

• Account information: the email address you provide when you sign in (and the public name / avatar on your Google account).
• Design data: the layouts, furniture arrangements and reference images you create.
• Original files you upload (your own copy): DXF, DWG or PDF floor plans imported while you are signed in. We keep a copy in your cloud storage so you can retrieve it or re-import it later on another device. This copy is readable by you alone, and you can delete it at any time under “My cloud projects → Original files”. This copy is not created while you are signed out.
• Import samples (the copy we keep): every time you import a DXF, DWG or PDF — whether it parses successfully or fails, and whether or not you are signed in — we also keep a copy of the original file, together with its filename, file size, format version, the parsing result and an anonymous device identifier; if you were signed in when you imported it, this copy is linked to your account. This copy sits in storage that only we can read, is never made public, is not visible to you inside the tool, is not removed when you delete the copy above, and we keep it indefinitely.
  It has a single purpose: fixing the importer. Floor plans exported by different programs vary enormously, and when a file will not open on your side we have no way to investigate without that file — DWG import once broke for everyone precisely because we could not obtain a single failing file.
  If you would like us to delete files you have imported, email hello@roomfit.app (see section 5).
• Local storage: while you are not signed in, drafts (layouts and furniture arrangements) stay in your browser's localStorage and are never sent to us; files you choose to import, and the floor-plan picture you send with “Let AI trace it”, are not covered by this — see the items above. For everything else kept in your browser, see section 8.
• AI assistant conversations: the questions you ask “Roomie” and its replies. If there are objects on the canvas when you ask, a summary is sent along with your question (floor area, number of walls and windows, narrowest walkway width, furniture items and their dimensions) so that the answer fits your actual situation — it does not include coordinates, project names, reference images or the content of your notes.
• AI rendering: when you press “Start render”, we send a picture of this design's floor plan and its furniture list (item names, sizes, positions on the plan, plus any furniture photos and style photos you attached) to third-party AI services so they can produce a photo-realistic render. The finished render and the floor-plan image it was made from are stored in your cloud space (along with the name you gave this design, so you can tell your renders apart; the name is not sent to third-party AI services) so they are still there after you switch devices or reload; unless you share them yourself, other users cannot read them.
  If a render fails our automatic quality check (for example, text printed on the image, or furniture or the layout clearly wrong), we do not deliver it to you and the points or free trial for that render are returned; that undelivered render is stored separately in a space only we can read, so we can check whether our quality check judged it correctly. You cannot see it in the tool or delete it yourself.
• AI wall tracing: when you press “Let AI trace it”, we send the floor-plan picture you placed on the canvas (one image; very large ones are shrunk first) through our server to third-party AI services so they can find where the walls are. Only that picture and our fixed instructions are sent — not your project name, furniture list or other design content. We also keep a copy of the picture you sent, together with the wall lines it recognised, whether the run succeeded and whether points were charged, linked to your account, to check and improve how accurately it recognises plans; it is kept whether the run succeeds or fails. After your free tries, you normally see a preview first and points are only taken when you tap “Use this”; once the day’s look-only previews are used up you can also choose to pay directly, with no preview; for a preview you don't use, the image and the traced result are kept the same way. After tracing, the scale you set and the wall lines you edit are also kept, to check and improve recognition accuracy. If you press Undo, the reason you choose (for example "too many mistakes") is kept as well. This copy sits in storage that only we can read, is never made public, is not visible to you inside the tool, and you cannot delete it yourself. You can use AI wall tracing without signing in; in that case the picture and the result are linked to the anonymous device code in your browser (see “General usage statistics” below) rather than an account. If you sign in within 14 days in the same browser, we first ask whether to merge the successful runs into your account and merge them only if you agree (if you sign in in the same tab right after tracing, they are merged directly); merged runs are then handled like runs made while signed in, and anything not merged is deleted automatically as described in section 6.
• Looks like: when you tap “Start” to make a piece in 3D look like a photo, our server reads that photo from your own inspiration wall and sends it to third-party AI services so they can write a 3D model of the piece. Only the photo, the type of furniture, its layout (e.g. straight or L-shaped) and its width, depth and height, and our fixed instructions are sent — not your project name or other design content. We do not keep a separate copy of the photo (it stays in your inspiration wall, under your control); we keep the model that was produced (including pattern parameters such as stripes and wood grain), the style description the AI read, whether it succeeded, whether points were charged, and a fingerprint of the photo (a code that can't be turned back into the photo, used to recognise “the same photo”), linked to your account. We also record an anonymous device code, used to count the free tries on the same device. The model (including the style description) is shown with your design to collaborators and people with a share link; the photo itself is not.
• Inspiration wall items: reference pictures you upload or save by pasting a link. When you paste a link, our server fetches that page's preview image and stores a copy (after that we no longer contact the other site). These pictures sit in storage readable by you alone.
• A hash of your network address (IP): this hash is recorded only in three cases: when you use a free trial render, each time you send a picture for “AI wall tracing”, and each time you send a photo for “Looks like”, to stop one source from claiming large numbers of free credits. We store a keyed hash, not the IP itself, and we do not use it to identify you or to track what you browse.
• Short-lived anti-abuse records: when you use a co-editing room, import a file, send usage statistics, create a payment order or claim a free trial, we briefly record a request count together with either your network address (IP) or your account ID — actions that require signing in (for example topping up, spending points, or claiming a free trial) record the account ID rather than the IP — to limit bursts of requests; these records are automatically deleted within 3 days.
• Points and transaction records: your points balance, a ledger of every deduction and refund (time, points, and the render, AI wall tracing or “Looks like” 3D model it belongs to), and your top-up orders (order number, plan, amount, payment result and time, plus the time you ticked the box agreeing to the terms and the terms version).
• Points top-ups: when you top up, we send the order number, amount, plan name and your account ID to ECPay's payment page to take the payment; the account ID is used only for reconciliation. Card details are handled by ECPay and never pass through us; what we keep is the points and transaction records described above.
• Card tips: when you pay by card through “Buy me a coffee”, we send the order number, amount, item name and an anonymous device code to ECPay's payment page to take the payment. Card details are likewise handled by ECPay and never pass through us; we keep the order number, amount and payment result.
• Crypto tips: when you tip in cryptocurrency, we send the order number, amount and coin to NOWPayments (a crypto payment service) to create the payment details. We keep the order together with an anonymous device code and the payment notifications NOWPayments sends back (payment status, amount actually paid and transaction details). The wallet addresses and transfers involved are publicly recorded on the blockchain, where anyone can look them up, and neither we nor NOWPayments can delete them.
• Crypto top-ups: when you top up points in cryptocurrency, we send the order number, amount (in US dollars), coin and item name (the number of points in this top-up) to NOWPayments to create the payment details; we do not send your account ID, email address or name. The payment notifications NOWPayments sends back (payment status, the amount of coin due and actually paid, and transaction details) are kept together with the top-up order, for the same period as top-up orders in section 6. The wallet addresses and transfers involved are publicly recorded on the blockchain, where anyone can look them up, and neither we nor NOWPayments can delete them.
• Your name in co-editing rooms: the name you use in a co-editing room (the nickname you set; if you're signed in and haven't set one, your Google account name or the part of your email before the @) is shown on your cursor label, in the member list and in “X changed…” notices, visible to everyone in the same room; it is also recorded in the room's version history (the room owner can see it under “Restore a previous version”; the latest 20 entries rotate as new ones are saved, and both the room's earliest entry and the entry made just before the most recent “restore” are always kept).
• Tip badge: after a tip completes, the thank-you badge is stored in your browser. When you join a co-editing room, other people in the same room see this badge on your cursor label.
• General usage statistics: routine actions you take in the tool (for example, which feature you opened, which size band your floor area falls into, or what error occurred) are recorded in aggregate form, with no design content, so we can see what's working and where people get stuck. Every record carries two codes: one generated randomly for that visit, which changes each time you open a new tab; and a device code that stays the same across visits, shared with the import samples, Roomie, feedback, free trial renders, free AI wall-tracing tries, free “Looks like” tries and tipping status, which we use to count how many people come back — not to identify you. If you were signed in at the time, these records are also linked to your account.
• Usage statistics (Google Analytics): we use Google Analytics to understand how people use the service: which pages you view, which features you use in the tool (feature names, plus action codes and numbers such as which kind of furniture you added from the library, its size, and your floor area; not anything you type, your images, or your design as a whole), where you came from, your approximate region, and your device and browser type. Addresses sent to Google have co-editing room codes and other parameters removed first. This data is not used for advertising, and we have not turned on Google signals (cross-device identification).
• Feedback and contact form: the text you send us via the in-app "Feedback" tool or contact form, and any screenshot you choose to attach, is kept so we can follow up, reply, and use it to improve the product. If you were signed in when you sent it, the feedback is also recorded against your account so we can reply to you; if not, only the device code is recorded.
• Account profile: the nickname, phone number, birthday, city, role (homeowner / designer / agent / other) and home details (size band, home type, renovation stage) you optionally fill in under "Profile" on the "My points" page. Every field is optional — leaving them blank does not affect any feature. Your avatar is shown directly from your Google account's public picture; we do not store a separate copy of it. We do not collect gender or address. You can edit or clear these fields at any time from "My points" → "Profile".

3. How we use it

To provide sign-in, cloud storage, collaborative editing and AI rendering, to process top-ups, tips and refunds, to prevent abuse, and to understand — in aggregated, de-identified form — what works well and where people get stuck, so we can improve the product. Feedback you send us is used to follow up and reply. AI assistant conversation logs are additionally used to improve our documentation and features. The import samples described above are used only to diagnose and fix the importer, and for nothing else. The account profile fields you fill in are used to show your nickname in the interface, to contact you if needed, and to understand our user base in an aggregated, de-identified way (for example, what share of users are homeowners vs. designers, or the distribution of home types and renovation stages) — never shared record-by-record. We do not sell or rent your personal data, and we do not run third-party advertising trackers.

We (Roomfit itself) do not use your designs, images or conversations to train any AI model. The features below send content to third-party AI services for processing (section 2 lists what is sent). How those providers keep and use it depends on their own terms. Below, “data” means what is sent plus the results the provider produces. The key points are:

AI rendering (including any furniture photos and style photos you attached):

• Paid use: We pay for this service. That is a fee we pay the provider, and it has nothing to do with whether you use a free render or spend points.
• Not used to improve its products: Because we pay for it, the provider’s terms say it does not use this data (including the images sent) to improve its products.
• Abuse-prevention log: The provider’s policy says it keeps the text prompts sent, any additional context provided with them, and the results produced for 55 days. This is for detecting and preventing violations of its usage policy, and for any legal or regulatory disclosures that are required. Except for models the provider uses specifically to enforce its policies, this log is not used to train or fine-tune any AI model.
• Human review: The provider’s authorized staff may look at data only when the data, or Roomfit’s use of the service, has been flagged as suspicious. This can happen in two ways. The data is flagged by the provider’s safety filters or abuse-detection systems. Or Roomfit’s use of the service keeps showing suspicious activity.
• Where it is kept: This log may be stored briefly, or held as a temporary (cached) copy, in any country where the provider or those acting on its behalf have facilities.

Roomie, AI wall tracing and “Looks like” (“Looks like” means making a piece in 3D look like its photo):

• Not for training: The provider’s commercial terms say it may not train models on this data.
• How long it is kept: The provider automatically deletes this data within 30 days of receiving or producing it.
• Exceptions: In some cases the provider’s policies allow it to keep the data longer. Examples: when its automated systems flag the data as violating its usage policy, when it needs to keep the data to enforce that policy, and when the law requires it.
• Where it is processed and stored: This data may be processed in any region the provider has available. The provider says the only storage region it currently offers is the United States.

Data needed for the core service is collected on the basis of our contract with you (Article 19(1)(2) of Taiwan's Personal Data Protection Act); optional fields such as your account profile are collected with your consent. The corresponding statutory purposes are: 069 contracts and similar legal relationships; 090 consumer and customer management and services; 135 information and communication services; 136 information, communication and database management; 148 online shopping and other e-commerce services; 157 surveys, statistics and research analysis.

4. Where data is stored and international transfers

To provide the service, your data is stored on systems run by service providers we use, some of which are outside Taiwan, so your data is transferred internationally. We give each provider only the data needed for its part of the service and require appropriate security measures:

• Supabase (managed database and sign-in, servers in Singapore): cloud data such as your account, designs, uploaded files, AI renders and points and transaction records is stored here. Sign-in is handled by Supabase Auth and Google OAuth.
• Google: Google account sign-in.
• Third-party AI services: AI rendering — the floor plan and furniture list described above are sent to third-party AI services to produce the render, and the render and its source plan are stored on Supabase. The replies from our AI assistant “Roomie” are also generated by third-party AI services; your question and the summary described above are sent to them, and the conversation log is stored on Supabase. In addition, when you use “AI wall tracing”, the floor-plan picture you send is also passed to third-party AI services so they can find the walls; the result and the copy of the picture we keep are stored on Supabase. When you use “Looks like”, that photo is also sent to third-party AI services to build the furniture model; the model is stored on Supabase. Where the content sent may be processed or stored is described in section 3.
• Cloudflare: delivers the website; page-view traffic is separately measured by Cloudflare Web Analytics, which does not use cookies and cannot identify who you are.
• Google Analytics: the usage statistics above are processed by Google and sent to Google's servers in the United States and elsewhere.
• Railway (cloud hosting): our own back-end server runs here; it parses the DXF, DWG and PDF files you import and post-processes AI renders (for example, adding a watermark).
• ECPay (Taiwan): takes card payments for top-ups and card tips; the payment page is on ECPay's own domain and card details never pass through us — we receive only the order number, amount and payment result.
• NOWPayments: takes cryptocurrency tips and cryptocurrency points top-ups.
• Brevo (email delivery): what you send through the in-app contact form (including the email address and contact details you give) is delivered to our inbox through it.
• Resend (email delivery, via Amazon SES): system emails such as sign-in links are sent through it; when you sign in by email, it handles your email address.
• Telegram: feedback and contact-form text and any screenshot you attach, tip payment notifications, and our daily operations report (which may list individual users' email addresses and how many days they used the service) are sent to our internal Telegram group so we can respond promptly.

5. Your rights and deleting your data

Under Article 3 of Taiwan's Personal Data Protection Act you have the following rights over the personal data we hold about you, and they cannot be waived or limited in advance: (1) to make an inquiry or ask to review it; (2) to request a copy; (3) to ask for it to be supplemented or corrected; (4) to ask us to stop collecting, processing or using it; (5) to ask for it to be deleted. Email hello@roomfit.app and we will respond within the statutory periods: 15 days for inquiries, reviews and copies, and 30 days for supplements, corrections, stopping processing or deletion; we may extend once if necessary and will tell you why. You can also do some of this yourself inside the tool, such as editing your account profile or deleting cloud projects and original files.

The two copies of a drawing are separate and have to be dealt with separately.

Your own copy: deleted cloud projects stay in the Trash for 30 days so you can restore them, and are cleared after that; DXF / DWG / PDF originals you delete under “My cloud projects → Original files” are removed immediately, with no waiting period.

The import sample we keep: there is no delete button for it inside the tool, and the button above does not touch it. To have it deleted, email hello@roomfit.app telling us roughly when you imported and what the file was, and we will action it within 30 days.

The AI wall-tracing pictures and records we keep: there is no delete button for them inside the tool. To have them deleted, email hello@roomfit.app telling us roughly when you used it, and we will action it within 30 days; they are also deleted when you ask us to delete your entire account. AI wall-tracing records made without signing in and not yet merged into an account do not belong to any account, so they are not deleted together with an account; they are deleted automatically as described in section 6. Records already merged into your account are deleted together when you ask us to delete your account (picture files are cleared within 3 days after the account is deleted at the latest).

Undelivered AI renders: there is no delete button for them inside the tool. To have them deleted, email hello@roomfit.app and we will action it within 30 days; they are also deleted when you ask us to delete your entire account.

To delete your entire account and all associated data (including the import samples, the AI wall-tracing pictures and records we keep and the undelivered AI renders described above), likewise email hello@roomfit.app and we will action it within 30 days. Once your account is deleted, any remaining points are forfeited and not refunded (see section 12 of the Terms of Service), so please use them up before asking. After deletion, copies in our daily database backups are cleared as the backups rotate, within about 35 days; however, a few backup files from runs that didn't complete, and the mirror backup of image files (reference images and pictures placed on the canvas, and screenshots attached to feedback or the contact form), are currently not deleted automatically. Top-up orders (order number, plan, amount, payment result, the account ID recorded when the order was created, and the time you ticked the consent box and the terms version) are an exception: they are kept for 5 years from the date the order was created, for accounting and payment-dispute purposes, and are not used for anything else during that time; if your account is deleted these records remain, and what the order keeps is an account ID that contains no email address, name or other personal details of yours.

The copy already sent to a third-party AI service: when you delete something in the tool, or ask us by email to delete data or your whole account, we delete what we keep on our side. Any copy already sent to a third-party AI service is handled by that provider under its own periods, which are listed in section 3.

The general usage statistics and feedback mentioned in section 2 are handled differently: usage statistics sent while you are signed in are linked to your account and are covered by the "all associated data" above. Whether feedback carries your account depends on whether you were signed in when you sent it: feedback sent while signed in is linked to your account and is covered by the "all associated data" above; feedback sent while signed out carries only an anonymous device code, not your account, so there is no record for account deletion to find. If you'd like your signed-out feedback dealt with too, email us as with import samples above, telling us roughly when you sent it and what it said, and we will try to match and action it.

6. How long we keep data

• Account data, designs, AI renders and their source plans, and inspiration wall items: kept until you delete them or your account is deleted; they do not expire automatically.
• Original files you upload (your own copy): kept until you delete them or your account is deleted.
• Import samples: kept until you ask us by email to delete them or your account is deleted.
• Undelivered AI renders (the ones that failed the quality check and were refunded): kept until you ask us by email to delete them or your account is deleted; they do not expire automatically.
• Pictures sent for AI wall tracing and their recognition records (the copy we keep; runs made while signed in, and runs made without signing in that were later merged into your account): kept until you ask us by email to delete them or your account is deleted; there is currently no automatic deletion period.
• AI trace calibration and edit records (how you calibrated and the length or area you entered, the scale, the AI draft and your edited wall coordinates, how many walls you changed, whether you pressed Undo and the reason you chose): kept together with that trace's record until you ask us to delete it or your account is deleted; there is currently no automatic deletion period.
• “Looks like” 3D models and their records: kept until your account is deleted (the model is displayed with your design).
• Points records: kept until your account is deleted.
• Top-up orders (order number, plan, amount, payment result, the account ID recorded when the order was created, and the time you ticked the consent box and the terms version): they are kept for 5 years from the date the order was created, for accounting and payment-dispute purposes, and are not used for anything else during that time; if your account is deleted these records remain, and what the order keeps is an account ID that contains no email address, name or other personal details of yours.
• Tip records: carry only an anonymous device code, not your account; those with a payment result (success or failure) are kept as payment records. Card-tip orders that never received a payment result are deleted automatically after 7 days; crypto-tip orders are kept once their payment details have been created, so blockchain transfers can be reconciled.
• Short-lived anti-abuse network address records: automatically deleted within 3 days.
• Network-address hash used to guard against abuse of free trial renders: linked to your account and kept until your account is deleted; there is currently no separate automatic cleanup schedule.
• AI wall-tracing records made without signing in and never merged into an account (including when you did not sign in within 14 days in the same browser, and runs that failed): the picture and result are deleted automatically after 14 days; the anonymous device code and network-address hash (used to guard against abuse of the free tries) are cleared after 90 days. Records already merged into your account follow the “Pictures sent for AI wall tracing and their recognition records” item above.
• Network-address hash used to guard against abuse of AI wall tracing: kept with the record of that run; for runs made while signed in (or later merged into your account) it is kept until your account is deleted, and for runs never merged see the previous item (cleared after 90 days).
• Network-address hash used to guard against abuse of “Looks like”: kept with the record of that run until your account is deleted; there is currently no automatic cleanup schedule that removes it.
• If a “Looks like” run fails, the AI's response (an excerpt of its raw text) is kept for 30 days for troubleshooting, then automatically cleared.
• Daily database backups: the latest 35 or so are kept and older ones are cleared on rotation; a few backup files from runs that didn't complete, and the mirror backup of image files (reference images and pictures placed on the canvas, and screenshots attached to feedback or the contact form), are currently not deleted automatically.
• Google Analytics usage statistics: 14 months, after which Google deletes them automatically.
• General usage statistics, AI assistant conversations and feedback: kept for a reasonable period to improve the product.
• Any copy already sent to a third-party AI service: handled by the provider under its own periods (see section 3).

When the specific purpose of collection no longer applies or the retention period ends, we will delete, or stop processing or using, the data on our own initiative or at your request (Article 11 of the Personal Data Protection Act).

7. If you choose not to provide data

Your email address is required to sign in; without it you cannot create an account or use features that need sign-in, such as cloud storage and points top-ups. Without the data needed for payment, a payment cannot be completed. Not providing any other optional data does not affect any feature.

8. Cookies and local storage

The service does not use marketing or advertising cookies. We use Google Analytics analytics cookies (_ga and those starting with _ga_) to measure usage, not for advertising; if you don't want to be measured, you can install Google's Google Analytics opt-out browser add-on. To make the tool work, we keep the following in your browser (localStorage and similar local storage): your sign-in state, drafts (a copy is kept locally whether or not you are signed in), the nickname you use in co-editing rooms, the name of the cloud project you have open, an anonymous device code (see section 2), a marker of where you first came to the site from, the credential used to revoke share links you created, the claim credentials left when you use AI wall tracing without signing in (used to merge those runs into your account when you sign in later; kept for at most 14 days), your group in feature experiments, your tip badge and any order that is mid-payment, and interface preferences such as language, units and which tips you have already seen. This data stays on your device and is removed when you clear your browser data; after that you will need to sign in again, and local drafts and your tip badge will be gone.

9. Security

We take reasonable technical and organisational measures to protect your personal data, such as encryption in transit and access controls, but no transmission over the internet can be guaranteed to be completely secure. If a personal data incident such as a breach occurs, we will notify you and handle it as the law requires.

10. Minors

The service is not designed specifically for minors. If you are under 18, please use the service with your legal guardian's consent, and only top up or tip with their consent; if we learn that valid consent has not been given, we will stop processing or delete the related data.

11. Changes and complaints

When we revise this policy, we will post it on this page and update the “Last updated” date; material changes will also be announced in the app or by email. For questions or complaints about this policy, email hello@roomfit.app.

This English text is provided for convenience. The Traditional Chinese version is the authoritative one; if the two differ, the Chinese version prevails.