Effective Date: 9 October 2026
Privacy at a glance
- Archio AI processes only the photos you choose to upload or capture for a design request.
- Your photos and design instructions are used to provide the AI design features you request.
- Archio AI does not intentionally keep uploaded photos or generated images in its application database or cloud object storage after the generation request is processed.
- Generated designs and design history are stored locally on your device unless you choose to save or share them elsewhere.
- We use AppsFlyer to measure app installs and marketing performance. With your iOS tracking permission, identifiers and app/subscription events may be shared with Meta to measure and optimize advertisements for Archio AI.
- Your design photos and instructions are not sent to AppsFlyer or Meta by our advertising integration.
- We use service providers including Supabase, OpenAI, RevenueCat, AppsFlyer and Apple. Their processing and our advertising partner Meta are described below.
Who we are
Archio AI is operated by Kalestial Teknoloji Limited Şirketi ("we", "us"), Türkiye.
For privacy questions or requests, contact:
hello@kalestial.com
Registered Address: Esentepe Mah. Büyükdere Cad. Ferko Signature No: 175/6, 34394 Şişli/İstanbul, Türkiye
Information we process
Photos and design instructions
When you choose or capture a photo, we process that image together with the design choices you provide, such as room type, style, color palette, masks, selected areas, object-replacement instructions and other editing requests.
Photos may contain personal information. Please avoid submitting faces, identity documents or other sensitive information that is not necessary for the design feature you are using.
App identity and sessions
Archio AI creates a pseudonymous app identifier and authentication session so the service can verify requests, protect access and operate server-side safeguards.
You do not need to provide a name, email address or password for this process. Because the identifier may be associated with subscription status and service usage, it should not be considered fully anonymous information.
Subscription information
We process information such as product identifiers, transaction information, subscription status, expiration dates and free-trial eligibility to provide and restore PRO access.
Apple processes subscription payments. We do not receive your complete payment-card details.
Service, usage and security information
We may process request identifiers, timestamps, success or failure status, usage counters and associated pseudonymous app identifiers to:
- operate and troubleshoot the service;
- prevent duplicate requests;
- protect the service from fraud, abuse or automated misuse;
- investigate technical or security incidents; and
- enforce temporary service safeguards where necessary.
Our hosting and infrastructure providers may also process technical information such as IP addresses and server logs as part of operating their services.
Support communications
If you contact us, we receive the information you choose to provide, such as your email address, message and any attachments.
Advertising measurement and tracking choices
Starting with version 1.0.1, we use AppsFlyer to understand which marketing campaigns lead to app installs, app opens and subscriptions, and to measure and improve advertising for Archio AI. Measurement data may include IP address and approximate location derived from it, device model, operating system and app version, timestamps, install/session events and an AppsFlyer installation identifier. We do not request precise GPS location for advertising measurement.
If you allow tracking through Apple's App Tracking Transparency prompt, we also enable collection of advertising and vendor identifiers (IDFA and IDFV), associate our pseudonymous app user ID with attribution records, and permit event sharing with Meta. RevenueCat may send AppsFlyer subscription events, product identifiers, amounts, currency and matching identifiers. Configured install, app-open, trial and purchase events may be forwarded to Meta to attribute and optimize advertisements for Archio AI. This can link activity in Archio AI with advertising interactions on other companies' apps or websites.
If you do not allow tracking, our integration disables IDFA and IDFV collection by AppsFlyer, omits our customer user ID from AppsFlyer, and blocks user-level partner sharing and RevenueCat subscription forwarding to AppsFlyer. AppsFlyer measurement and Apple's privacy-preserving SKAdNetwork attribution may still operate without that permission. Denying tracking does not prevent you from using Archio AI or purchasing PRO.
You can change your tracking choice in iOS Settings under Privacy & Security > Tracking. The app applies the current setting when it next becomes active. Changing permission limits future processing; it does not automatically delete previously processed information. Contact hello@kalestial.com for deletion requests.
How we use information
We use the information described above to:
- generate and edit designs you request;
- provide and verify PRO access;
- restore purchases;
- operate, secure and troubleshoot Archio AI;
- prevent fraud, duplicate requests and misuse;
- provide customer support;
- understand subscription performance;
- measure and improve our advertising, with tracking permission where required; and
- comply with applicable legal obligations.
Service providers
We use third-party providers to operate Archio AI:
Supabase: Hosting, pseudonymous authentication, server-side request handling and service/security records.
OpenAI: AI image generation and editing using the images, masks and design instructions you submit.
RevenueCat: Subscription validation, entitlement management and subscription analytics.
AppsFlyer: Install attribution, app/session measurement and permitted subscription-event measurement and advertising-partner sharing.
Meta: Advertising attribution and optimization for Archio AI through the configured AppsFlyer integration, subject to tracking choices.
Apple: App distribution, purchases, subscription management and iOS permissions.
When you request AI generation, the selected image and relevant design instructions are sent through our backend to OpenAI.
We do not use your photos to train our own AI models. OpenAI states that data sent through its API is not used to train or improve OpenAI models by default unless the API customer explicitly opts in.
OpenAI may retain API content in abuse-monitoring records for a limited period under its own policies. OpenAI states that these records are generally retained for up to 30 days, subject to applicable legal, safety and security exceptions.
You can read more in OpenAI's API data controls: https://developers.openai.com/api/docs/guides/your-data.
Our advertising integration does not send your design photos, generated images or design instructions to AppsFlyer or Meta. Advertising identifiers and event sharing are described in “Advertising measurement and tracking choices” above. Learn more about AppsFlyer's processing of customer data: https://www.appsflyer.com/legal/processing-customer-data/ and Meta's Privacy Policy: https://www.facebook.com/privacy/policy/.
We may disclose information where required by law, where reasonably necessary to protect rights, safety or the security of the service, or in connection with a business transfer subject to applicable privacy protections.
Photos, generated designs and storage
Archio AI does not intentionally store uploaded photos or generated images in its application database or cloud object storage after the generation request is processed.
Images are transmitted through our backend only as needed to perform the AI operation you request.
This does not mean that every service provider immediately deletes every copy. As described above, OpenAI may retain API content for a limited period under its own data-retention and abuse-monitoring policies.
Generated designs and design history are stored locally on your device.
If you save a generated image to Photos, share it with another service, send it to another person or include it in a device backup, that copy is controlled by the destination service or device. Removing a design from Archio AI does not remove copies that you exported elsewhere.
Retention
Uploaded photos and generated images are handled as described in “Photos, generated designs and storage” above. Local design history remains on your device until you remove it or the app's local data; copies in Photos, backups or other services must be managed separately.
Pseudonymous authentication and service-request records currently remain in our backend until they are deleted. We do not currently apply a fixed automatic expiry period to these records. The daily window used for service safeguards is a usage-calculation window, not a data-deletion deadline.
Subscription records are processed by Apple and RevenueCat to administer purchases, verify and restore access, and handle transaction-related obligations. Their retention practices apply to records they hold. Support correspondence is held in our support mailbox; it is not subject to an automatic deletion period described by this policy.
You may contact hello@kalestial.com to request deletion of information associated with your use of Archio AI. We assess requests under applicable law and explain any information that must be retained and the reason for retention. A request may require proportionate verification to locate your pseudonymous app record.
Third-party service providers may retain information under their own policies and applicable legal requirements. This policy does not promise that deleting the app or making a request to us immediately removes every provider-held copy.
Advertising measurement records are retained according to the applicable AppsFlyer account settings and provider policies. We do not promise a fixed automatic deletion period for those records. Previously shared information may remain with advertising partners under their retention policies; withdrawing tracking permission does not itself delete those records.
Your choices and privacy rights
You control which photos you submit.
You can manage camera and photo permissions through iOS Settings. You can stop future AI processing of photos by not submitting additional generation requests. This does not reverse processing that has already been completed.
Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability or objection in relation to certain personal information.
Where processing is based on consent, you may withdraw that consent without affecting processing that was lawful before withdrawal.
To make a privacy request, contact:
hello@kalestial.com
We may request proportionate information to identify the relevant app record. Do not send passwords or payment-card details.
You may also have the right to complain to your local data-protection authority.
Deleting the app does not automatically delete server-side records or cancel your Apple subscription. Subscriptions can be managed or canceled through your Apple account.
Legal grounds and international processing
Where applicable, our legal grounds for processing include:
- performing the service you request;
- our legitimate interests in operating, securing and administering the service;
- complying with legal obligations; and
- consent where required by law.
Our service providers may process information in countries other than your own, where data-protection rules may differ. Applicable international-transfer requirements depend on the countries involved and the processing arrangement. Contact hello@kalestial.com for information about where your data is processed and the transfer arrangements relevant to it.
Children
Archio AI is not directed to children under 13.
We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact hello@kalestial.com so we can investigate and take appropriate action.
Local age and parental-consent requirements may impose additional restrictions.
Security
We use safeguards such as encrypted network connections, access controls and server-side credential protection to protect information.
No service can guarantee absolute security.
Changes to this Privacy Policy
We may update this Privacy Policy when our practices, service providers or legal obligations change.
If a change is material, we will provide additional notice or obtain consent where required by law.
The published policy will identify its effective date. Material changes will be communicated as required by applicable law.