Privacy Policy

Effective date: November 10, 2026

This policy explains what the Vetrelo app for Android and iPhone (“the app”), its server and this website collect, why, and how long we keep it. Vetrelo is made by Kineto Soft (Ugur Akcelik, Turin, Italy, VAT IT12938420010; “we”, “us”). We are responsible for your data (the “controller” under EU and UK data protection law). Questions? Email info@kineto-soft.com.

1. What we collect

• Account ID. When you first open the app, our server creates an account for you with a random ID. The app gets a secret sign-in key and keeps it in secure storage on your phone (on iPhone, in the keychain). Our server stores only a one-way code (hash) of that key and when it was created and last used. We do not use your phone’s hardware ID, Android ID or advertising ID. Your account ID is not linked to your name or email unless you choose to sign in with Google or Apple.
• Device check. When the app creates your account, Google Play Integrity (Android) or Apple App Attest (iPhone) checks that the request comes from the real app on a real device. We store only whether the check passed. A checked account gets 1 free design; an account that could not be checked gets none.
• Google account (optional). Only if you tap “Save your designs with Google” (Android) or “Continue with Google” (iPhone). Google confirms your sign-in, and we keep your Google account ID and email address with your account. We use them only to keep your designs and Pro after a reinstall or on a new phone. If that Google account already has an Vetrelo account, the app switches to it and moves this phone’s designs there.
• Apple ID (optional, iPhone). Only if you tap “Sign in with Apple”. Apple gives us a user ID that it shares only with apps from our developer account, and an email address if you choose to share one (it can be a private address from Apple that hides your real one). We also keep a token from Apple, so that we can end the link to your Apple ID when you delete your account. We use them only as for a Google account.
• Photos you add. Only the photos you take with the camera in the app or pick in your phone’s photo picker. The app cannot see the rest of your photos. Before upload, the app turns the photo upright, makes it at most 2048 pixels on its long side, crops it to a standard shape and saves it as a new JPEG file. This removes hidden file data such as the camera model, the date and the GPS location.
• Designs and job records. The designs we make for you, and for each one: the mode, room and style you chose, its status and time, whether it used your free design or Pro, and technical details (AI model, processing time and AI cost).
• Consent records. When you confirm that you are 18 or older and agree that your photos are sent to Google Gemini: the time and the version of the text you agreed to. If you withdraw it, the time you did. When you buy Pro: the time you ticked “I understand this plan renews automatically until I cancel”.
• Pro and weekly use. Whether you have Vetrelo Pro, which plan, when it renews or ends, and how many designs you made this week. A history of designs used and given back (a failed design is given back).
• Purchase records. From Google Play or the App Store, through RevenueCat: the product, the store’s order or transaction ID, whether it was a test purchase, the time, and refunds. We never see your card or bank details.
• Reports. If you report a design: the reason you picked, your note if you wrote one, the design’s ID and the time.
• App usage events. The app sends a few usage events to our own server, for example: first open, consent given, design started, done or failed, paywall viewed, purchase, save, share and report. Each event is stored with your account ID, the time and a few details (for example the mode, or the product you bought). Events contain no device model, location or advertising ID. We do not use any third-party analytics, advertising or crash reporting service.
• Technical data. Our server receives your IP address and basic details of each request (time, address requested and app information sent by your phone). Our server logs keep these, plus technical details such as your account ID and errors, to fix problems and keep the service secure. To stop mass sign-ups, we also store a one-way code (hash) of your IP address when an account is created.

We do not collect: your name, your email address (unless you sign in with Google or Apple), phone number, contacts, location, microphone, advertising ID, face data, or any photos other than the ones you add.

2. Photos of your home

A room photo can show more than the room: people (in the room, in pictures or in mirrors), letters and documents, screens, house numbers, valuables, or things that say something about your life. Please keep these out of the photo, or choose another photo.

• We use the photo only to make your design. We do not look for, read or recognize anything in it.
• We never use face recognition, and we never make face templates or other biometric data.
• We never use your photos or designs for ads, for profiling, or to train AI.
• We do not look at your photos or designs ourselves, except a design you reported, or when you ask us for help with one.

3. How we use it

• To make your designs and show them to you, and to keep them in “My designs” for 7 days.
• To run Vetrelo Pro: your free design, purchases, renewals, refunds and the weekly limit. If a design fails, it is given back.
• If you sign in with Google or Apple: to keep your designs and Pro after a reinstall or on a new phone. We never email you for marketing.
• To prevent abuse and fraud and keep the service secure (the device check, a sign-up limit per IP address and a daily limit on AI spending).
• To review reports of harmful or wrong designs, as the app stores’ rules for AI apps require.
• To understand how the app is used and to improve it, using the usage events above.
• To keep proof of the consents you gave, and to meet legal, tax and accounting duties.

Legal bases (EEA and UK): providing the service you ask for, including Pro, purchases and optional Google or Apple sign-in (contract); sending your photos to Google Gemini (your consent, see section 5, and the contract); security, abuse prevention, handling reports, usage events, improving the app and keeping proof of consents (our legitimate interests; you can object); and keeping tax and accounting records (legal obligation).

4. AI processing by Google

• To make a design, our server sends your photo to Google’s Gemini API with fixed instructions: the mode, the room, the style, and to keep the walls, windows, doors, floor and camera angle. Google sends back the design.
• We use the paid Gemini API. Google acts as our data processor under its data processing terms. Under Google’s terms for paid services, Google does not use your photos or designs to improve its products.
• We send each request with storage turned off (store=false), and we keep Gemini’s request logging off, so Google does not keep your request for later use.
• Google still keeps prompts, photos and designs for up to 55 days to detect abuse and misuse of its service. People at Google may check items that its systems flag. This is Google’s rule for every Gemini API user, and we cannot turn it off. Our 7-day deletion does not cover it.
• Google’s safety filters may turn down some photos, for example photos with people in them. Then you are not charged, and the app asks you for another photo.
• Every design carries SynthID, Google’s invisible watermark that shows an image was made with AI. We also add a visible label (“AI-generated”, “Virtually staged” or “Digitally altered”) and a tag in the file’s metadata.

5. Your consent

Before your first photo leaves your phone, the app shows “Before you start”: your photo is sent to Google Gemini, a third-party AI; we delete photos and designs after 7 days; Google may keep them up to 55 days to check for abuse; and only add photos you took or have the right to use. You tick “I am 18 or older” and tap “Agree and continue”. Nothing is uploaded before that. We save the time and the version of the text.

To withdraw your consent, open Account, find “AI processing consent” and tap Withdraw. After that, the app uploads no new photos. Designs you already made stay until day 7, or until you tap “Delete my photos now”. To make designs again, you agree again. Withdrawing does not affect what we did before.

6. Who we share data with

We run the app’s server ourselves. These companies process data on our behalf:

• Hetzner Online GmbH: rents us the server in Germany (EU) that stores our database, your photos and designs. They provide the machine and network only and do not use your data for their own purposes.
• Google Gemini API (paid tier): makes your designs (see section 4).
• Google Play (Android): handles payments (Google Play Billing) and the device check (Play Integrity).
• Apple (iPhone): handles App Store payments and the device check (App Attest).
• Google Sign-In and Sign in with Apple (optional): confirm your account when you choose to sign in, and for Apple, end the link when you delete your account.
• RevenueCat, Inc. (USA): manages purchases and subscriptions for us. It gets your random account ID (not your name or email) and your purchase details from the store. Its software in the app also sends basic technical details, such as the app version, the system version and the store country. We use it to know whether you have Pro.

Payments are made in Google Play or the App Store, under Google’s or Apple’s own privacy policy. We never see your card or bank details. We only receive the purchase details listed in section 1.

We may also share data if the law requires it, to protect our users or the service, or with a buyer if the app is sold (who must then follow this policy).

No ads, no selling. The app shows no ads. We do not sell your personal information, and we do not share it for targeted or cross-context advertising.

Learn more in Google’s Privacy Policy, how Google uses data from apps that use its services, Apple’s Privacy Policy and RevenueCat’s Privacy Policy.

7. Where your data is stored

Our database, photos and designs are stored on our own server, rented from Hetzner Online GmbH in Germany. To make your designs, your photos are sent to Google’s Gemini API, which may process them in other countries where Google has facilities, including the United States. Google Play, Play Integrity and Google Sign-In are run by Google, the App Store, App Attest and Sign in with Apple by Apple, and RevenueCat processes purchase data in the United States. If you live in the EEA, the UK or Switzerland, these transfers are protected by the companies’ data processing terms, which include the EU Standard Contractual Clauses (and the UK addendum), and for Google also by its certification under the EU-U.S. Data Privacy Framework.

8. How long we keep data

• Photos, designs and job records: deleted automatically after 7 days. Cleanup runs once a day, so they are gone within a day after the 7 days have passed. “Delete my photos now” deletes them at once.
• Google’s abuse log: up to 55 days, as described in section 4.
• Copies on your phone: the app keeps temporary copies in its cache. “Delete my photos now” or uninstalling removes them. Images you save to your gallery or share stay where you put them; we cannot delete those.
• Account data (account ID, sign-in key hashes, the device check result, consent records, Pro status, Google or Apple sign-in details): kept until you delete your account.
• Weekly design counts and AI cost records (no images): up to 100 days, so that deleting designs does not reset the weekly limit.
• Reports: kept until you delete your account. The reported design itself is deleted after 7 days, like all designs.
• App usage events: deleted automatically after 60 days.
• IP address hash for the sign-up limit: deleted automatically after 1 day.
• Server logs: up to 30 days.
• Auto-renewal consent (the time you ticked the box when you bought Pro): 3 years, or 1 year after your subscription ends if that is later, as California law requires. This record is kept even if you delete your account.
• Purchase records: as long as needed for accounting, tax, refunds and other legal duties, up to 10 years under Italian law. After you delete your account, they are no longer linked to it.
• Backups: our database (not photos or designs) is backed up every day, and each backup is kept for 14 days. Data you delete can stay in these backups until they are removed.

9. How to delete your data

• Only your photos and designs: open Account and tap Delete my photos now. This deletes all your photos and designs on our server and in the app at once. Your account, Pro and weekly count stay. Or do nothing: they are deleted after 7 days anyway.
• Your whole account, in the app: open Account, tap Delete account and confirm. This deletes your account, photos, designs, job records, consent records, reports, usage events and the link to your Google account or Apple ID (for an Apple ID, Apple is asked to end the link too). Purchase records, the auto-renewal consent record and weekly design counts are kept, as in section 8.
• Subscriptions: deleting your account does not cancel Vetrelo Pro. Cancel it first in Google Play or in your iPhone’s Settings (see Support).
• Without the app: email info@kineto-soft.com. The steps and what we need from you are on the Delete your account page. We delete your data within 30 days.
• Deleted data is also gone from our database backups within 14 days.
• Uninstalling the app stops all data collection. Data already on our server is deleted as described above. Without Google or Apple sign-in, you may not get back to your old account after uninstalling.

10. Your rights

EEA and UK (GDPR and UK GDPR). You have the right to:

• access the data we hold about you and get a copy of it;
• correct it;
• delete it;
• object to or restrict how we use it (for example, usage events);
• receive it in a portable format;
• withdraw your consent at any time (this does not affect what we did before).

You can also complain to your local data protection authority: in Italy the Garante per la protezione dei dati personali, in the UK the Information Commissioner’s Office (ICO).

United States. Depending on your state (for example California, Colorado, Connecticut, Virginia, Texas or Oregon), you may have the right to know what data we have about you, to get a copy of it, to correct it and to delete it. You may also have the right to opt out of the sale of your data, targeted advertising and profiling. We do none of these. We will not treat you differently for using your rights. If we say no to a request, you can appeal: reply to our answer with the word “Appeal”, and we will answer within 45 days. If we still say no, you can contact your state’s attorney general.

California residents: in the terms of the CCPA, we collect identifiers (account ID, IP address, and with optional sign-in your email address and Google or Apple account ID), commercial information (Pro and purchases), app activity (usage events and job records) and the photos you add, for the purposes in section 3. We do not sell or share personal information, and we do not use it to infer things about you.

How to use your rights: you can delete your photos and your account yourself in the app (see section 9). For anything else, email info@kineto-soft.com. Include your account ID (shown in the app under Account), the email you sign in with, or a store order ID, so we can find your data. We may ask you to confirm that the account is yours. We reply within 30 days.

11. Adults only

Vetrelo is for adults (18 and over). It is not directed to anyone under 18, and we do not knowingly collect data from them. If the app store tells the app that a user is under 18, the app uploads nothing. If you believe a minor has used the app, email us and we will delete the data.

12. Security

• All connections use HTTPS, so data is encrypted on the way.
• Your photos and designs can only be reached with your account’s sign-in key, and we store only a hash of each key. Links to your photos and designs are signed and stop working after a few hours.
• The database cannot be reached from the internet; only our server software uses it.
• The AI key, the RevenueCat key and our Google and Apple service keys are kept on our server, never in the app.

No system is perfectly secure, but we work hard to protect your data.

13. This website

This website sets no cookies and has no analytics. It loads its fonts from Google Fonts, so your browser sends your IP address to Google when you open a page. Our server logs keep the request details for up to 30 days, like the app’s.

14. Changes to this policy

We may update this policy. We will post the new version on this page and change the effective date at the top. If a change is important, we will also tell you in the app or in its release notes.

15. Contact

Kineto Soft (Ugur Akcelik), Turin, Italy, VAT IT12938420010
Email: info@kineto-soft.com