Privacy Notice
Last updated: 26 September 2026
Darifurn designs your room with real products you can buy. To do that we need some information about you and your room. This notice explains, in plain language, what we collect, why, who processes it, and what you can ask us to do.
What we collect
- Your account: email address, name, a securely hashed password and when it was last changed. If you use “Forgot password?”, we keep the email address you entered, with the time and your IP address (as a usage record), so our team can check the request and send a reset link to that account's own email address. We keep a request whether or not the address has an account; ask us through the Feedback button and we delete it together with its usage record.
- Room photos and video frames you upload or capture with your camera. We keep one reference photo per room so renders can redraw your own room.
- Room measurements: walls, doors, windows, ceiling height and wall types, scanned or entered by you.
- Your designs: briefs, chosen products, messages to the design assistant, and generated renders.
- Feedback you send us, together with the page you sent it from and, if you are signed in, your account and email address.
- Usage records: each time you scan a room, generate designs, render, send a chat message, highlight an item in a render, sign up or send feedback, we record what it was, when, your account (if you are signed in) and your IP address. We use these records to prevent abuse and to keep AI costs within daily limits. Activity events, kept separately and without any IP address: when you sign up, create a project, scan or measure a room, generate designs, start or finish a render, send a chat message (not what you wrote), export a file or open a store link, we record what happened and when, your account (if you are signed in), the design, product and store it relates to (if any), and small details such as the room type, budget range, or an exported file's format and language.
Why we use it
To provide the service: measure your room, pick products that fit it, draw renders, answer your design questions, produce your bill of quantities, fix problems you report, prevent abuse, and keep AI costs within daily limits. We also use activity events to understand how Darifurn is used and to improve it. Together with the products chosen in designs, they let us produce anonymous statistics that we may share with stores, such as “this product's store link was opened 120 times this month” or “your products appeared in 40 designs this month: 55 pieces worth SAR 38,000 in total”. These are counts and totals only: they never say who opened a link or made a design, and never include your email address, photos, room or renders.
Who processes it
- Anthropic (Claude): analyses your room photos to measure the room, looks at your room's reference photo to line renders up with it, turns your brief into a design plan, and powers the design chat, which sees your current render.
- Google (Gemini): draws renders from your room's reference photo, checks renders against that photo and your design, and finds items in a render when you point at them.
- Higgsfield and Replicate: used for some renders (for example when Google is unavailable); they receive your room's reference photo, if the room has one, and a description of the design.
- Railway: hosts the app and its database, where your account, rooms, photos and designs are stored.
These providers may process data outside Saudi Arabia. Some render providers may keep a copy of a render for a period under their own terms. Product photos in the design studio load straight from the stores' websites (such as IKEA) or from the image services (CDNs) those stores use, so those websites and services receive your IP address and browser details when the photos load, as with any website you visit. Store links in the design studio and in exported files first go through Darifurn (an address beginning with /go/), which counts the click and then forwards you to the product's page on the store's website; the store can usually see that the visit came from Darifurn. A link in an exported file is counted the same way when anyone opens it, signed in or not. So that repeated clicks by one visitor on one product count once, the server briefly keeps a scrambled (hashed) combination of your IP address, browser details and the product in memory for up to 30 minutes after the click; it is never written to our database or logs. Some store links may be affiliate links: we add the tracking code of the store or its affiliate network, and if you buy, the store may pay us a commission at no extra cost to you. The design studio shows a note when your shopping list contains such links, and exported files carry a note about commissions too. Once you are on a store's website, the store and any affiliate network may set their own cookies under their own privacy policies.
Your photos
Before anything is uploaded, your browser re-draws each photo and video frame as a new, smaller image. This removes hidden data such as the location where a photo was taken. Please avoid capturing people, documents or anything private.
How long we keep it
We keep your data until you delete it. Deleting a project removes its rooms, room photos, designs and renders from our database. You can delete your whole account yourself on your Account page (you will be asked for your password). That removes your account, all your projects, rooms, room photos, designs and renders, the feedback you sent (including password reset requests made with your email address, and their usage records), and the usage records linked to your account. Records that were never linked to your account stay: usage records of things done while signed out (such as creating an account or sending feedback) keep their time and IP address, and feedback sent while signed out keeps its message and page. A password reset request is also deleted, with its usage record, whenever you ask us to. Copies that render providers keep under their own terms are outside our database (see above). Activity events are not deleted with a project or an account: deleting your account removes their link to you, so they remain only as anonymous counts.
Your rights
You can delete your account and its data yourself at any time on your Account page, and change your password there. You can also ask to see the data we hold about you or to correct it: send your request through the Feedback button on any page, while signed in to the account concerned.
Your consent
When you create an account you agree to this notice, including sending your room photos to the AI providers above. You can stop at any time by deleting your projects, or your whole account on your Account page.
Changes to this notice
If this notice changes, we will update it here and change the date at the top.