Privacy Policy

1. Data We Collect

Account data: Email address, name (optional), and authentication data when you register.

Profile data: Property type, preferred design styles, and HDB flat type — collected during onboarding to personalise your experience.

Uploaded assets: Room photos, optional project floor plans, and private reference images you add to a Renovation Design Pack. These are stored in Supabase Storage; floor plans and report reference images are kept in private buckets.

BTO inspection photos: Photos submitted to the public BTO Defect Checker are stored privately behind short-lived access links and are deleted after analysis or when you remove them before analysis.

Generated content: AI-generated design images stored privately in Supabase Storage. These are retained to allow you to re-access your history.

Usage data: Feature usage, page visits, and generation history collected for product analytics via PostHog.

Abuse-prevention signals: We use pseudonymous hashes derived from your email identity, device cookie, and coarse network range to enforce free-offer limits. We do not store the raw device identifier or IP address in this system.

Payment data: Payment is handled entirely by Stripe. We store only Stripe customer and subscription IDs, never card details.

2. How We Use Your Data

• To provide and improve the ElumiHome service;
• To process payments and manage subscriptions;
• To send transactional emails (account, generation results, billing);
• To personalise your design experience based on property type and style preferences;
• To detect and prevent fraud and abuse;
• To comply with legal obligations.

We will not sell, rent, or share your personal data with third parties for marketing purposes without your explicit consent.

3. Third-Party Service Providers

We work with the following data processors:

4. Data Retention

• Uploaded room images: Retained while needed for your active design history or until account deletion;
• Project floor plans and report reference images: Retained while attached to an active project; removable at any time from Projects;
• Generated designs: Retained while your account is active;
• Account data: Retained while your account is active;
• Payment records: Retained for 7 years as required by Singapore accounting standards;
• Analytics: Retained for 12 months in aggregated, anonymised form.
• Abuse-prevention signals: Inactive signals are removed after 30 days, activated signals after 90 days, and risk events after 180 days.

5. Your Rights (PDPA)

Under Singapore's PDPA, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate data;
• Withdraw consent for data uses where consent is the basis;
• Delete your account and associated data via Settings → Delete Account.

To exercise these rights, email hello@elumihome.com.

6. Cookies

We use essential cookies for authentication (Supabase session tokens) and optional analytics cookies (PostHog). You may disable analytics cookies via your browser settings without affecting core functionality.

7. Children's Privacy

The Service is not directed at individuals under 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact us and we will delete the account promptly.

8. Changes to This Policy

We will notify you of material changes to this policy via email and a notice on the platform. Continued use after changes constitutes acceptance.

9. Contact

For privacy queries, contact our Data Protection Officer at hello@elumihome.com.