Operated by MagicCraft Foundation Ltd. · Contact: contact@merlintheai.com

Privacy policy

HouseSpell helps you visualize rooms and outdoor spaces. This page describes the implemented data flow. Updated 12 October 2026.

Photos and design instructions

Choosing a photo previews it on your device. We send your source and optional reference photo, design settings and instructions through our server to OpenAI via OpenRouter only after you consent and request a generation. We remove image metadata and resize uploads before the provider request. Uploaded source and reference files are processed in server memory, not stored as server files.

OpenRouter routes the generation request to OpenAI and may process request and usage data under its privacy policy. OpenAI may retain API content for abuse monitoring according to its applicable data controls. We have not enabled or promised zero data retention. See OpenAI API data controls. API content is not used to train OpenAI models by default.

Local projects and recovery

Your app or browser stores saved source images, reference images, generated results and settings locally. An unfinished request also keeps its photos and settings locally so it can be recovered. Use the app's project deletion and unfinished-request discard controls, or clear the app's data, to remove these local copies. Uninstalling can remove local projects. We do not provide account-based cloud sync or backup. Your operating system's backup or device-transfer settings may apply to local app data.

Completed generated images are encrypted on our server for up to one hour for result recovery. Recovery requires the same installation identity and never starts a second generation.

Subscriptions and service records

Apple or Google processes native payments. Our server verifies signed Apple transactions or Google purchase tokens against current store records. Native payments are handled by your app store. We do not receive full payment-card details. Web purchases are currently unavailable; the browser editor remains available.

We store native purchase evidence encrypted on the server so your installation can check paid access. Billing evidence has no automatic deletion schedule. Contact us to request access or deletion; we verify that you control the affected installation or purchase before processing a request. Removing saved purchase evidence does not cancel an app-store subscription. We may retain the limited usage and fraud-prevention records described below, and records required by law. Recovering paid access does not restore locally saved projects.

Hashed usage and security records are retained for up to 400 days to enforce credit allowances, prevent duplicate charges and investigate service errors. Optional reports are retained for up to 90 days. The deployment disables HTTP access logs for this app. Nginx error logs may include an IP address or request path and rotate daily with 14 archived rotations. Application diagnostics use the host's size-managed system journal, which does not have a fixed age limit. We do not log photo bodies, instructions, purchase evidence or provider credentials. The app does not make separate backups of server image data. Infrastructure snapshots and operating-system backups, if used, may retain older data independently; we do not promise physical erasure of every copy at the recovery deadline.

Reports

When you report a generated design, we retain its request identifier, a hashed installation identifier, selected reason, optional note and time for up to 90 days. Reports contain no uploaded image files. Do not put sensitive personal information in report notes. Reports help us review and improve the service.

Your choices and questions

You can use the editor without sending a photo, decline generation consent, delete local projects and manage subscriptions in the store where you purchased . Contact contact@merlintheai.com for privacy or deletion assistance. Do not email passwords, payment details or home photographs unless specifically needed and agreed.