Privacy Policy for Remzora

Last Updated: September 1, 2026

What changed in this update: We now run ads for Remzora on Meta platforms and share limited advertising measurement data with Meta Platforms, Inc. — see the new Section 6. Because of this, we no longer state that we never “share” personal information for cross-context behavioral advertising; Section 8 explains the change and how to opt out. We still do not sell your personal information and we still show no ads inside the App. We have also named three providers that already received limited data: Sentry (anonymous crash reports), Formspree (in-app support form), and Expo (push notifications). Former Sections 6–13 are now 7–14.

This Privacy Policy (“Policy”) explains how Newron Robotics, LLC, a Delaware limited liability company (“Newron Robotics,” “Remzora,” “we,” “us,” or “our”), collects, uses, and shares information when you use the Remzora mobile application on Apple iOS / iPadOS and Android (collectively, the “App”). It applies to the App on both platforms. By downloading, accessing, or using the App, you acknowledge that you have read and understood this Policy.

Remzora is a home-remodeling planning and organization tool. It helps you visualize remodels, build step-by-step plans, review contractor quotes, scan and categorize receipts, and organize homes, projects, contractors, payments, photos, and documents.

1. The short version

• Remzora works primarily on your device. Your homes, projects, plans, receipts, photos, documents, contractors, payment milestones, reminders, and settings are stored locally on your phone or tablet, and the App is fully usable without an account.
• To produce AI results, the specific content you submit for a request (e.g., project details, a room photo, a receipt or quote image, quote text) is sent over an encrypted connection to our server and to our AI provider, OpenAI, processed, and the result is returned to you. Our AI server does not keep a database of your content.
• Accounts are optional. You can create an account with an email address and password. If you sign in and have an active Pro subscription, you can turn on cloud sync to back up your data and access it on your other devices.
• When cloud sync is on, your homes, projects, receipts, plans, quote checks, progress photos, and documents are stored under your account in Google Firebase (a Google cloud service). You can delete your account and all synced data at any time in Settings → Account → Delete account.
• We use the Meta (Facebook) SDK to measure the performance of ads we run for Remzora, and one diagnostics SDK (Sentry) for anonymous crash reports. We do not show ads inside the App, and we do not build advertising profiles about you.
• The measurement data shared with Meta is limited to device advertising identifiers, an anonymous Meta SDK identifier, your IP address, app install/open events, and subscription events — never your name, email, project content, photos, or documents. On iOS we ask first, through Apple’s tracking prompt; on Android there is no equivalent in-app prompt, and you can opt out at the system level or by emailing us. We do not sell your personal information; under California law this measurement may count as “sharing,” and you can opt out — see Sections 6 and 8.
• Purchases are handled by Apple (App Store) or Google (Google Play) together with RevenueCat; we never receive your full payment-card details.

2. Information we collect

a) Information you provide (“Content”)

Depending on the features you use, this may include:

• Project details: project and home names, project type, ZIP/postal code, approximate size, budget range, and free-text notes.
• Photos and images you capture or upload: room photos, target-design images, receipt/invoice images, and document images (e.g., permits, contracts, warranties).
• Quote and contractor information you enter: quote/contract text, contractor name, phone, license number, bid amounts, and notes.
• Financial/organizational entries: budgets, payment-milestone amounts and due dates, expense/receipt amounts and categories, reminders, and checklists.
• Support requests: if you use the in-app support form, the email address and message text you submit, which are delivered to us by Formspree (see Section 5).

You decide what to enter. Please avoid submitting sensitive personal information (such as government identifiers, health information, or precise financial-account numbers) in photos or text, as it is not needed to use the App.

b) Permission-based device access

With your permission, the App accesses:

• Camera — to take room, receipt, or document photos.
• Photo library / media — to select existing images.
• Notifications — to deliver local reminders you schedule (for tasks and payment milestones), which are scheduled and fire on your device, and to tell you when a background AI generation you started has finished. For that second case, if you have enabled notifications, the App obtains a device push token and sends it to our server with the request, so the finished result can be pushed back to you through Expo’s push service (see Section 5). The token identifies a device installation, not you.

You can change these permissions at any time in your device settings. Some features will not work without them.

c) Purchase and subscription information

If you buy a subscription or feature, Apple or Google processes the transaction, and we use RevenueCat to manage entitlements. We receive limited, pseudonymous data such as purchase/entitlement status, product identifiers, transaction identifiers, and a pseudonymous app-user identifier (and, on iOS, the identifier-for-vendor). We do not receive your payment-card number. Because we run ads for Remzora, RevenueCat also collects device advertising identifiers and reports subscription events to Meta on our behalf, as described in Section 6.

d) Account and cloud-sync information (optional)

If you choose to create an account, we collect:

• Email address and a password. Authentication is handled by Google Firebase Authentication; your password is stored by Firebase in salted, hashed form, and we never see or store your password in plain text.
• An optional display name you provide.
• A unique account identifier (user ID) we assign to your account, which is also used to verify your Pro entitlement and to meter usage.

If you enable cloud sync (available with a Pro subscription), the Content described in Section 2(a) — including your room/receipt/document photos and design renders — is uploaded to and stored in Google Firebase (Cloud Firestore and Cloud Storage) under your account so it can sync across your devices. This information is linked to your account identity. You can delete your account and all associated cloud data from Settings → Account → Delete account (see Section 8).

e) Technical and diagnostic data

To deliver and protect the service, we and our infrastructure providers process limited technical data, such as IP address and request metadata at our API server (used for connectivity and to enforce rate limits that prevent abuse) and basic device/OS information inherent to a network request. We retain such data only briefly (see Section 7).

We also use Sentry to receive anonymous crash and error reports — the error type, stack trace, app version, device model, and OS version. Sentry is configured not to attach your identity, IP address, or email, and to strip request bodies, headers, and cookies, redact fields that could hold personal or bulky content (images, documents, addresses, notes, tokens), and drop console logs before anything is transmitted. Crash reports are not linked to you.

f) What we do not collect

• The App includes two third-party SDKs: the Meta (Facebook) SDK for advertising measurement (Section 6) and Sentry for anonymous crash reports (Section 2(e)). We use no other analytics or advertising SDKs, we do not show ads inside the App, and we do not build advertising profiles about you.
• We do not collect contacts, precise background location, microphone audio, or biometric data.
• We do not knowingly collect special-category/sensitive personal data.

3. How we use information

We use information to:

• Provide core features — generate design renders and edits, build project plans, analyze contractor quotes, scan and categorize receipts, and organize your homes/projects/payments/documents.
• Operate, secure, and maintain the service, including preventing abuse, fraud, and excessive use (rate limiting).
• Diagnose and fix crashes and errors using the anonymous diagnostic reports described in Section 2(e).
• Measure the performance of ads we run for Remzora on other platforms, as described in Section 6.
• Process purchases and manage Pro entitlements.
• Provide support and respond to your requests.
• Comply with law and enforce our Terms.
• Create and use de-identified and aggregated data. We may create data that does not identify you or any individual (for example, aggregated usage statistics), and we may use, retain, and disclose such de-identified or aggregated data for any lawful business purpose, including to operate, secure, develop, and improve the App. We will not attempt to re-identify it except as permitted by law.

We do not use your Content to train our own models, and our AI provider does not use API content to train its models by default (see Section 5).

4. Legal bases (EEA/UK)

Where the EU/UK GDPR applies, we rely on: performance of a contract (to provide the App you request); legitimate interests (to secure, maintain, and improve the App, and to prevent abuse); consent (e.g., for camera, photo-library, and notification access, and — on iOS — for advertising measurement via Apple’s App Tracking Transparency prompt, each of which you can withdraw via device settings); and compliance with legal obligations.

5. How information is shared (service providers / subprocessors)

We share information only as needed to operate the App, with providers acting on our behalf or as independent controllers for payments:

• OpenAI, L.L.C. — AI processing (plans, quote analysis, receipt OCR, image generation & editing). Shared: the specific text and/or image content you submit for a given request.
• Apple Inc. — App distribution and in-app purchases (iOS). Shared: purchase/transaction data (handled by Apple).
• Google LLC — App distribution and in-app purchases (Android). Shared: purchase/transaction data (handled by Google).
• RevenueCat, Inc. — Subscription/entitlement management, and server-side forwarding of subscription events to Meta for ad measurement. Shared: purchase and entitlement data, pseudonymous identifiers, device advertising identifiers, and your tracking-consent status.
• Google LLC (Firebase) — Account authentication and, if you enable cloud sync, cloud storage/sync of your Content. Shared: email, password (hashed by Firebase), display name, account/user ID, and the Content you sync (project data, receipts, photos, documents).
• Render (hosting provider) — Runs our API server. Shared: request data in transit and during processing.
• Functional Software, Inc. (Sentry) — Crash and error reporting. Shared: anonymous diagnostic data — error type, stack trace, app version, device model and OS. Configured not to attach user identity, IP address or email, and to strip request bodies, headers and any long or sensitive field before transmission.
• Formspree, Inc. — In-app support form delivery. Shared: the email address and message text a user submits.
• Expo (650 Industries, Inc.) — Push notification delivery. Shared: a device push token, when notifications are enabled.
• Meta Platforms, Inc. — Advertising measurement and attribution for ads we run. Shared: device advertising identifiers, an anonymous Meta SDK identifier, IP address, app install/open events, and subscription events (via RevenueCat’s Conversions API).

• OpenAI: Your submitted content is processed to return a result. Per OpenAI’s API data-usage policies, API inputs and outputs are not used to train OpenAI’s models by default and are retained only for a limited period for abuse and misuse monitoring before deletion. See OpenAI’s privacy policy and API terms.
• Payments: Apple and Google process your payment as independent controllers under their own privacy policies; RevenueCat processes purchase/entitlement data as our processor.
• We may also disclose information to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, property, safety, and security of our users, the public, or us; and in connection with a merger, acquisition, financing, or sale of assets (with notice where required).
• We do not sell your personal information. Our sharing of advertising identifiers with Meta for measurement (Section 6) may be considered “sharing” for cross-context behavioral advertising under California and similar U.S. state privacy laws. See Section 8 for how to opt out.

6. Advertising and measurement

We advertise Remzora on Meta platforms (Facebook and Instagram). To understand which ads bring people to the App, we share limited measurement data with Meta Platforms, Inc.:

• The Meta SDK included in the App records that an install or an app open occurred.
• When you subscribe, start a trial, or renew, RevenueCat reports that event to Meta on our behalf through Meta’s Conversions API. We do not send Meta your name, email address, or any of your project content, photos, or documents.
• The data used for matching is limited to device advertising identifiers, an anonymous identifier generated by the Meta SDK, and your IP address.

On iOS we ask first, through Apple’s App Tracking Transparency prompt; if you decline, we do not share your advertising identifier and we do not report your purchases to Meta. On Android there is no equivalent in-app prompt. You can limit this at the system level by choosing Delete advertising ID in Settings → Privacy → Ads, which stops your advertising identifier being shared with anyone. On either platform you may also email support@newronrobotics.com and we will exclude you from ad measurement. Limited install and app-open signals may still be recorded without identifying you.

We do not show ads inside the App, and we do not build advertising profiles about you. Under California and similar U.S. state privacy laws, this measurement may be considered “sharing” for cross-context behavioral advertising — see Section 8 for your opt-out rights and how to exercise them.

7. Data storage and retention

• On your device: Your Content and settings remain on your device until you delete them in the App (Settings → Reset saved data, or by deleting individual items) or uninstall the App. Uninstalling removes locally stored App data from your device.
• On our AI server: Content you submit for AI processing is handled transiently to fulfill your request and is not stored in a persistent database by us. Operational logs (e.g., IP/request metadata for reliability and abuse prevention) are short-lived and routinely rotated.
• In your account (cloud sync): If you enable cloud sync, your account information and synced Content are stored in Google Firebase under your account until you delete them — by removing individual items, or by using Settings → Account → Delete account, which permanently deletes your account and all associated cloud data. Note that deleting the App from a device does not by itself delete data already synced to your account.
• Subprocessors retain data according to their own policies (see Section 5).

8. Your choices and rights

Everyone can:

• Delete data: use Settings → Reset saved data, delete individual items, or uninstall the App.
• Manage permissions: change camera, photo-library, and notification permissions in your device Settings.
• Manage subscriptions: iOS — Settings → [your name] → Subscriptions; Android — Google Play → Subscriptions.

If you have an account, you can also:

• Delete your account and all cloud data: use Settings → Account → Delete account. This permanently removes your account and all Content synced to it from our cloud (Google Firebase). This action cannot be undone.
• Sign out at any time from Settings → Account, which stops syncing on that device while leaving your local data in place.

Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your personal information, to opt out of sale/sharing or targeted advertising, and to non-discrimination for exercising your rights. Because the App is account-free and largely device-local, most of your data is already under your direct control on the device.

Your advertising choices (opt out of “sharing”)

Under the CPRA and similar U.S. state laws, our sharing of advertising identifiers with Meta for measurement may be considered “sharing” for cross-context behavioral advertising. We do not sell your personal information. To opt out:

• Everyone, on any platform: email support@newronrobotics.com and we will exclude you from ad measurement. This route is available to all users regardless of device, and on Android it is the direct way to opt out with us.
• On iOS: decline the App Tracking Transparency prompt, or turn Remzora off at any time under Settings → Privacy & Security → Tracking.
• On Android: there is no in-app prompt. Choose Delete advertising ID in Settings → Privacy → Ads (Android 12 and later), which makes your advertising identifier return all zeros and stops it being shared with anyone. Note that resetting the ID is not an opt-out — it only issues a new identifier and sharing continues.

We honor these choices without degrading the App — every feature works the same whether you opt out or not.

• U.S. state privacy laws (e.g., California CCPA/CPRA, Virginia, Colorado, Connecticut, Utah, and similar): We do not sell personal information and we do not use sensitive personal information for inferring characteristics. Our advertising measurement with Meta (Section 6) may constitute “sharing” for cross-context behavioral advertising, and you may opt out using the methods above. To exercise applicable rights regarding any data we or our processors hold, contact us at support@newronrobotics.com.
• EEA/UK (GDPR): You may exercise your rights above and lodge a complaint with your local supervisory authority. We are the controller for the processing described here; contact support@newronrobotics.com.

We will verify requests as required by law and respond within applicable timeframes. We will not discriminate against you for exercising your rights.

9. Children’s privacy

Remzora is intended for adults and is not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 where a higher age applies, such as parts of the EEA/UK). If you believe a child has provided us information, contact support@newronrobotics.com and we will delete it. The App is rated and listed for a general/adult audience accordingly.

10. Security

We use reasonable technical and organizational measures to protect information, including encryption in transit (HTTPS/TLS) between the App, our server, and our providers. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. Because your Content is primarily stored on your device, securing your device (passcode, biometrics, OS updates) is an important part of protecting your data.

11. International data transfers

We are based in the United States, and our providers (including OpenAI, Apple, Google, RevenueCat, Sentry, Formspree, Expo, Meta, and our hosting provider) may process information in the United States and other countries whose data-protection laws may differ from yours. Where required, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses) for international transfers.

12. Third-party links and services

The App may reference or link to third-party services (for example, a store’s subscription-management page or a redemption link). Those services are governed by their own terms and privacy policies, and we are not responsible for their practices.

13. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new “Last updated” date and, where appropriate, provide additional notice in the App or store listing. Your continued use of the App after changes take effect constitutes acceptance of the updated Policy.

14. Contact us