Privacy Policy

Effective 7 October 2026

Alma (the iOS app and almapic.com) turns a photo of your room into a redesigned version and shows real furniture you can buy. Alma is operated by Ariel Halevy, Israel. This policy explains exactly what we collect, why, who else processes it, and how to delete it. Contact: support@almapic.com.

What we collect

• Room photos you choose to upload, plus the room type, palette and any notes you type. We need these to create the redesign. The app only receives the photo you pick; it has no access to the rest of your photo library or to your camera.
• Sign-in details, only if you sign in. Signing in is optional. With Sign in with Apple we receive an Apple account identifier and, if you share them, your name and email (which may be an Apple private-relay address). With Google we receive your name, email, Google account identifier and profile picture link.
• Things you save on the website while signed in: saved rooms and designs (including the original and redesigned images), and your cart.
• Order requests on the website: the name, phone number, address, city and note you enter at checkout, and the products ordered. We use these only to arrange the order with you by phone.
• Technical data that any web server receives, such as IP address and request time, kept in our hosting provider's logs.

We do not use advertising, analytics or tracking SDKs, we do not track you across other apps or websites, and we do not sell or rent your data.

How your photo is processed, and by whom

Before your first redesign the app asks for your permission to send the photo for AI processing. When you start a redesign, the photo and your choices are sent over an encrypted connection to our server, which uses these third-party AI services on our behalf:

• OpenAI (GPT-4o) analyses the room and plans where products go.
• Google (Gemini) generates the redesigned image.
• Langfuse, an AI monitoring service, keeps a diagnostic record of each redesign (inputs including the photo, and outputs) so we can find and fix failures.

Our server and database run on Railway (cloud hosting). Product links open the retailer's own website, which has its own privacy policy.

These providers process data only to provide their service to us, under contractual terms that restrict their use of it, and they are required to protect it at least as well as this policy describes. Under their API terms, OpenAI and Google may keep inputs for a limited period (OpenAI: up to 30 days) to detect abuse, and do not use them to train their models.

How long we keep data

• Redesigns in the app are not saved to your account or our database. The photo and result stay on your device until you start over.
• Diagnostic records (Langfuse) are kept only as long as needed to debug and improve the service. You can ask us to delete any record linked to you.
• Account data (sign-in details, saved rooms and designs, cart) is kept until you delete your account.
• Orders are business records. They are kept after account deletion where the law requires it; otherwise we delete them on request.

Deleting your account and data

In the app: tap the account icon, then Delete account. This immediately and permanently deletes your account, sign-in sessions, saved rooms and designs, and cart. You can also stop using Sign in with Apple for Alma at any time in your iPhone's Settings, under your name, Sign in with Apple.

Anywhere else, or to delete diagnostic records or orders, email support@almapic.com from the address you used. You can also ask for a copy of your data or a correction. You can withdraw your permission for AI processing at any time by not starting further redesigns.

Security

All traffic is encrypted in transit (HTTPS). The app keeps your sign-in session in the iOS Keychain. Sessions expire and can be revoked.

Children

Alma is not directed at children under 13, and we do not knowingly collect their data.

Your rights

Depending on where you live (including under Israel's Privacy Protection Law and the EU GDPR), you may have the right to access, correct, delete or object to the processing of your data, and to complain to a data-protection authority. Email support@almapic.com and we will respond within 30 days.

Changes

If we change this policy we will update this page and its effective date. If a change affects how we use data you already gave us, we will ask again first.