Privacy Policy for Remzora

Last Updated: June 20, 2026

This Privacy Policy (“Policy”) explains how Newron Robotics, LLC, a Delaware limited liability company (“Newron Robotics,” “Remzora,” “we,” “us,” or “our”), collects, uses, and shares information when you use the Remzora mobile application on Apple iOS / iPadOS and Android (collectively, the “App”). It applies to the App on both platforms. By downloading, accessing, or using the App, you acknowledge that you have read and understood this Policy.

Remzora is a home-remodeling planning and organization tool. It helps you visualize remodels, build step-by-step plans, review contractor quotes, scan and categorize receipts, and organize homes, projects, contractors, payments, photos, and documents.

1. The short version

• Remzora works primarily on your device. Your homes, projects, plans, receipts, photos, documents, contractors, payment milestones, reminders, and settings are stored locally on your phone or tablet, and the App is fully usable without an account.
• To produce AI results, the specific content you submit for a request (e.g., project details, a room photo, a receipt or quote image, quote text) is sent over an encrypted connection to our server and to our AI provider, OpenAI, processed, and the result is returned to you. Our AI server does not keep a database of your content.
• Accounts are optional. You can create an account with an email address and password. If you sign in and have an active Pro subscription, you can turn on cloud sync to back up your data and access it on your other devices.
• When cloud sync is on, your homes, projects, receipts, plans, quote checks, progress photos, and documents are stored under your account in Google Firebase (a Google cloud service). You can delete your account and all synced data at any time in Settings → Account → Delete account.
• We do not use third-party advertising or analytics SDKs, we do not show ads, and we do not sell your personal information or share it for cross-context behavioral advertising.
• Purchases are handled by Apple (App Store) or Google (Google Play) together with RevenueCat; we never receive your full payment-card details.

2. Information we collect

a) Information you provide (“Content”)

Depending on the features you use, this may include:

• Project details: project and home names, project type, ZIP/postal code, approximate size, budget range, and free-text notes.
• Photos and images you capture or upload: room photos, target-design images, receipt/invoice images, and document images (e.g., permits, contracts, warranties).
• Quote and contractor information you enter: quote/contract text, contractor name, phone, license number, bid amounts, and notes.
• Financial/organizational entries: budgets, payment-milestone amounts and due dates, expense/receipt amounts and categories, reminders, and checklists.

You decide what to enter. Please avoid submitting sensitive personal information (such as government identifiers, health information, or precise financial-account numbers) in photos or text, as it is not needed to use the App.

b) Permission-based device access

With your permission, the App accesses:

• Camera — to take room, receipt, or document photos.
• Photo library / media — to select existing images.
• Notifications — to deliver local reminders you schedule (for tasks and payment milestones). These reminders are scheduled and fire on your device; we do not operate a server that sends push notifications, and we do not collect a push token.

You can change these permissions at any time in your device settings. Some features will not work without them.

c) Purchase and subscription information

If you buy a subscription or feature, Apple or Google processes the transaction, and we use RevenueCat to manage entitlements. We receive limited, pseudonymous data such as purchase/entitlement status, product identifiers, transaction identifiers, and a pseudonymous app-user identifier (and, on iOS, the identifier-for-vendor). We do not receive your payment-card number.

d) Account and cloud-sync information (optional)

If you choose to create an account, we collect:

• Email address and a password. Authentication is handled by Google Firebase Authentication; your password is stored by Firebase in salted, hashed form, and we never see or store your password in plain text.
• An optional display name you provide.
• A unique account identifier (user ID) we assign to your account, which is also used to verify your Pro entitlement and to meter usage.

If you enable cloud sync (available with a Pro subscription), the Content described in Section 2(a) — including your room/receipt/document photos and design renders — is uploaded to and stored in Google Firebase (Cloud Firestore and Cloud Storage) under your account so it can sync across your devices. This information is linked to your account identity. You can delete your account and all associated cloud data from Settings → Account → Delete account (see Section 7).

e) Technical and diagnostic data

To deliver and protect the service, we and our infrastructure providers process limited technical data, such as IP address and request metadata at our API server (used for connectivity and to enforce rate limits that prevent abuse) and basic device/OS information inherent to a network request. We retain such data only briefly (see Section 6).

f) What we do not collect

• We do not use third-party analytics or advertising SDKs and do not build advertising profiles.
• We do not collect contacts, precise background location, microphone audio, or biometric data.
• We do not knowingly collect special-category/sensitive personal data.

3. How we use information

We use information to:

• Provide core features — generate design renders and edits, build project plans, analyze contractor quotes, scan and categorize receipts, and organize your homes/projects/payments/documents.
• Operate, secure, and maintain the service, including preventing abuse, fraud, and excessive use (rate limiting).
• Process purchases and manage Pro entitlements.
• Provide support and respond to your requests.
• Comply with law and enforce our Terms.
• Create and use de-identified and aggregated data. We may create data that does not identify you or any individual (for example, aggregated usage statistics), and we may use, retain, and disclose such de-identified or aggregated data for any lawful business purpose, including to operate, secure, develop, and improve the App. We will not attempt to re-identify it except as permitted by law.

We do not use your Content to train our own models, and our AI provider does not use API content to train its models by default (see Section 5).

4. Legal bases (EEA/UK)

Where the EU/UK GDPR applies, we rely on: performance of a contract (to provide the App you request); legitimate interests (to secure, maintain, and improve the App, and to prevent abuse); consent (e.g., for camera, photo-library, and notification access, which you can withdraw via device settings); and compliance with legal obligations.

5. How information is shared (service providers / subprocessors)

We share information only as needed to operate the App, with providers acting on our behalf or as independent controllers for payments:

• OpenAI, L.L.C. — AI processing (plans, quote analysis, receipt OCR, image generation & editing). Shared: the specific text and/or image content you submit for a given request.
• Apple Inc. — App distribution and in-app purchases (iOS). Shared: purchase/transaction data (handled by Apple).
• Google LLC — App distribution and in-app purchases (Android). Shared: purchase/transaction data (handled by Google).
• RevenueCat, Inc. — Subscription/entitlement management. Shared: purchase and entitlement data, pseudonymous identifiers.
• Google LLC (Firebase) — Account authentication and, if you enable cloud sync, cloud storage/sync of your Content. Shared: email, password (hashed by Firebase), display name, account/user ID, and the Content you sync (project data, receipts, photos, documents).
• Render (hosting provider) — Runs our API server. Shared: request data in transit and during processing.

• OpenAI: Your submitted content is processed to return a result. Per OpenAI’s API data-usage policies, API inputs and outputs are not used to train OpenAI’s models by default and are retained only for a limited period for abuse and misuse monitoring before deletion. See OpenAI’s privacy policy and API terms.
• Payments: Apple and Google process your payment as independent controllers under their own privacy policies; RevenueCat processes purchase/entitlement data as our processor.
• We may also disclose information to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, property, safety, and security of our users, the public, or us; and in connection with a merger, acquisition, financing, or sale of assets (with notice where required).
• We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising (as those terms are defined under California and other U.S. state privacy laws).

6. Data storage and retention

• On your device: Your Content and settings remain on your device until you delete them in the App (Settings → Reset saved data, or by deleting individual items) or uninstall the App. Uninstalling removes locally stored App data from your device.
• On our AI server: Content you submit for AI processing is handled transiently to fulfill your request and is not stored in a persistent database by us. Operational logs (e.g., IP/request metadata for reliability and abuse prevention) are short-lived and routinely rotated.
• In your account (cloud sync): If you enable cloud sync, your account information and synced Content are stored in Google Firebase under your account until you delete them — by removing individual items, or by using Settings → Account → Delete account, which permanently deletes your account and all associated cloud data. Note that deleting the App from a device does not by itself delete data already synced to your account.
• Subprocessors retain data according to their own policies (see Section 5).

7. Your choices and rights

Everyone can:

• Delete data: use Settings → Reset saved data, delete individual items, or uninstall the App.
• Manage permissions: change camera, photo-library, and notification permissions in your device Settings.
• Manage subscriptions: iOS — Settings → [your name] → Subscriptions; Android — Google Play → Subscriptions.

If you have an account, you can also:

• Delete your account and all cloud data: use Settings → Account → Delete account. This permanently removes your account and all Content synced to it from our cloud (Google Firebase). This action cannot be undone.
• Sign out at any time from Settings → Account, which stops syncing on that device while leaving your local data in place.

Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your personal information, to opt out of sale/sharing or targeted advertising (we do none of these), and to non-discrimination for exercising your rights. Because the App is account-free and largely device-local, most of your data is already under your direct control on the device.

• U.S. state privacy laws (e.g., California CCPA/CPRA, Virginia, Colorado, Connecticut, Utah, and similar): We do not sell or share personal information for cross-context behavioral advertising and do not use sensitive personal information for inferring characteristics. To exercise applicable rights regarding any data we or our processors hold, contact us at support@newronrobotics.com.
• EEA/UK (GDPR): You may exercise your rights above and lodge a complaint with your local supervisory authority. We are the controller for the processing described here; contact support@newronrobotics.com.

We will verify requests as required by law and respond within applicable timeframes. We will not discriminate against you for exercising your rights.

8. Children’s privacy

Remzora is intended for adults and is not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 where a higher age applies, such as parts of the EEA/UK). If you believe a child has provided us information, contact support@newronrobotics.com and we will delete it. The App is rated and listed for a general/adult audience accordingly.

9. Security

We use reasonable technical and organizational measures to protect information, including encryption in transit (HTTPS/TLS) between the App, our server, and our providers. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. Because your Content is primarily stored on your device, securing your device (passcode, biometrics, OS updates) is an important part of protecting your data.

10. International data transfers

We are based in the United States, and our providers (including OpenAI, Apple, Google, RevenueCat, and our hosting provider) may process information in the United States and other countries whose data-protection laws may differ from yours. Where required, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses) for international transfers.

11. Third-party links and services

The App may reference or link to third-party services (for example, a store’s subscription-management page or a redemption link). Those services are governed by their own terms and privacy policies, and we are not responsible for their practices.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new “Last updated” date and, where appropriate, provide additional notice in the App or store listing. Your continued use of the App after changes take effect constitutes acceptance of the updated Policy.

13. Contact us