Privacy Policy

Version 2 — effective 18 July 2026

This policy covers the RumiFit Android app, the RumiFit website, and the RumiFit store portal, operated by RumiFit ("we"). The short version is that the app keeps your data on your device, and we collect the minimum needed to run the retail service.

The app on your device

The RumiFit app works entirely on your device:

• No account is required and none can be created in the app.
• Room plans stay on your device. Rooms, furniture arrangements, measurements and client names you type in are stored in the app's local database only. We cannot see them.
• No analytics, no tracking, no ads. The app contains no analytics or advertising SDKs and, outside store mode (below), makes no network connections.
• Sharing is manual. A room plan leaves your device only when you explicitly share it (for example by email). The file goes wherever you send it, through your own email provider — not through us.
• Barcode scanning (store mode) uses the camera and processes images on-device only; no photos or video leave the device.

If you delete the app, its data is deleted with it.

Store mode (paired retail tablets)

A tablet paired to a subscribing retail store makes network requests to our servers to fetch that store's product catalog and branding. For this we process:

• a device identifier and the device name chosen by the store,
• the store the device belongs to,
• request logs (timestamps and technical metadata) kept for security and troubleshooting.

Customer room plans created on a store tablet are not uploaded — they remain on the tablet, exactly as in the personal app — with one explicit exception: share by code, below.

Share by code

Store staff can hand a room plan over by uploading it to our servers and reading a short code to the customer, who types the code into their own RumiFit app to download the plan. This only ever happens when a person explicitly chooses "Share via code" — nothing is uploaded in the background.

When it is used, we store:

• the room plan itself (room shape, measurements, furniture placement and the room's name — whatever the plan contains),
• which store and tablet uploaded it, and how many times it was downloaded.

Shared plans are kept for 30 minutes and then permanently deleted, code and plan together — long enough for the hand-over in store, and nothing like cloud storage. Once downloaded, the plan lives only on the customer's device. Anyone who knows the code can download the plan while it is live, so treat the code like the plan itself. Downloading a shared plan requires no account and is not logged against any identity.

The store portal

Retailers who register a store account provide a store name, email address and password (stored hashed). Subscription payments are processed by Stripe; card details go directly to Stripe and never touch our servers. Stripe's own privacy policy applies to payment processing. We keep subscription status and invoice records as required for billing and tax.

The website

• The contact form asks for your name, email address and message. It is emailed to our support inbox and used only to reply to you.
• The site sets only the strictly necessary cookies needed for form security (session and CSRF). There are no analytics or advertising cookies.

What we never do

We do not sell personal information, share it with advertisers, or use it to train machine-learning models. We share data only with the processors named above (our hosting provider and Stripe) and where the law requires.

Retention and deletion

Store accounts and their device records are deleted on request once the subscription is closed and billing records are no longer legally required. Contact-form emails are kept only as long as the conversation stays open. To request deletion of anything, contact us via the support page.

Your rights

We handle personal information in line with the Australian Privacy Principles. You can ask us what we hold about you, ask for corrections, or complain — first to us, and if unresolved, to the Office of the Australian Information Commissioner (oaic.gov.au).

Changes

We will update this policy when the product changes what it collects (for example, if cloud sync or crash reporting is added), bump the version number above, and note the effective date. Material changes to store-account data handling are emailed to account holders.

Contact

Privacy questions and requests: use the support page. Messages are read and answered by a real person, not an autoresponder.