Privacy Policy
Effective date: August 29, 2026
Last updated: August 29, 2026
This Privacy Policy explains how CodeLoop Studio ("CodeLoop," "RoomFit," "we," "us," or "our") processes personal data when you use the RoomFit iOS application, the RoomFit website, and related support services (together, the "Services").
RoomFit lets you preview objects at real-world size using augmented reality ("AR"), save spaces and projects, compare products, perform home-planning calculations, and request optional AI-powered style analysis.
1. Who Controls Your Personal Data
The controller responsible for RoomFit is:
CodeLoop Studio
Bulevar Branioca Dobrinje 15
Sarajevo, Bosnia and Herzegovina
Privacy inquiries: privacy@codeloop.ba
General support: info@codeloop.ba
Website: https://roomfit.codeloop.ba
2. Privacy at a Glance
- RoomFit is designed to process measurements, projects, AR data, and most images on your device where reasonably possible.
- Room and product images are not uploaded merely because you capture, select, or save them locally.
- When you deliberately request a cloud or AI feature, the images and related information identified on the confirmation screen may be transmitted for that request.
- Payments are processed by Apple through the App Store. We do not receive your complete payment-card details.
- We do not sell personal data or use room or product images for targeted advertising.
- AI results are suggestions only and are not used to make decisions that produce legal or similarly significant effects about you.
3. Data We Process
The data processed depends on the features you choose to use.
3.1 Data you provide
RoomFit may process:
- object, furniture, room, wall, rug, television, doorway, window, and viewing-distance measurements;
- paint-calculation inputs;
- project, space, and object names;
- object categories, selected styles, preferences, and comparison choices;
- room and product photographs that you capture or select;
- questions, instructions, and other text you submit to an AI feature;
- messages and contact details you provide when requesting support; and
- any other content you deliberately enter or submit.
3.2 Camera, photo library, and AR data
With your device permission, RoomFit may access the camera or photographs you select to:
- detect surfaces and support AR tracking;
- place and display virtual objects;
- photograph a room, product, or object;
- isolate a product from its background;
- preview furniture, televisions, rugs, wall art, or other objects;
- compare products with a space; and
- provide an AI Style Check or other feature you expressly request.
AR functionality may temporarily process detected planes, camera position, device motion, spatial tracking, lighting information, depth or scene information supported by the device, and similar technical information needed to render the requested experience.
RoomFit does not continuously record or upload your camera feed merely because AR mode is active. Camera and AR sensor data used only for an active local session is not retained by us.
3.3 Locally stored data
Depending on your device and the features you use, RoomFit may store projects, measurements, preferences, saved spaces, room photographs, product photographs, and locally generated results on your device.
We generally cannot access data that remains only on your device. Device backups or synchronization controlled by Apple may separately contain application data according to your device and Apple account settings.
3.4 AI request data
RoomFit AI, Ask RoomFit AI, and AI Style Check are optional. When you start an AI request, RoomFit may transmit only the data reasonably necessary to answer it, such as:
- the room and product images you selected for that request;
- resized, compressed, cropped, or otherwise optimized versions of those images;
- the question or instruction you submitted;
- product category, dimensions, style selection, color information, or other relevant context;
- a pseudonymous request or installation identifier;
- usage-credit and entitlement information; and
- security and technical metadata needed to deliver and protect the request.
An image of a room can incidentally reveal people, family circumstances, belongings, documents, addresses, health-related items, religious or political material, or other sensitive information. Review images before submitting them. Do not submit images containing people, children, confidential documents, financial information, account credentials, or other unnecessary sensitive information.
We do not use AI request content to make eligibility, employment, credit, insurance, housing, legal, or other decisions that produce legal or similarly significant effects. We do not use submitted room or product images to train our own general-purpose AI models. We require AI processors to handle request data under applicable contractual and security restrictions; where their service offers a no-training or equivalent business/API setting, we use that setting.
3.5 Purchases and entitlements
Paid features, subscriptions, lifetime purchases, and consumable AI credit packs are offered through Apple's App Store and StoreKit. Apple processes the payment and may provide us with limited transaction and entitlement data, such as:
- product identifier;
- purchase, renewal, expiration, cancellation, or refund status;
- transaction and original transaction identifiers;
- storefront or general region;
- subscription status; and
- signed information needed to verify access.
We do not receive or store your complete payment-card number, card security code, or Apple ID password.
3.6 Website and technical data
When you visit the RoomFit website or use an online feature, hosting, content-delivery, and security providers may process ordinary network and request data, including:
- IP address;
- browser, device, and operating-system information;
- requested page or endpoint;
- date and time of a request;
- referring page;
- approximate location derived from IP address;
- error, performance, and security logs; and
- strictly necessary cookies or similar technologies, if used.
The RoomFit website does not currently use third-party advertising pixels, cross-site tracking, or optional marketing cookies. If non-essential analytics or advertising technologies are introduced, we will update this Policy and obtain consent where required before activating them. See also the Cookie Policy.
3.7 Support communications
If you contact us, we process your email address, message, attachments, and related correspondence so we can respond, investigate problems, and maintain an appropriate support record.
4. Why We Process Data and Our Legal Bases
Where the laws of Bosnia and Herzegovina, the GDPR, UK GDPR, or similar laws apply, we rely on the following legal bases:
| Purpose | Data involved | Legal basis |
|---|---|---|
| Provide local AR, planning, saving, matching, and calculation features | Measurements, device permissions, selected images, projects, AR session data | Performance of our contract with you; data processed locally may remain under your control |
| Provide an AI feature you deliberately request | Selected images, prompt, relevant context, request metadata | Performance of our contract; your affirmative action to submit the selected content; explicit consent where required for sensitive data |
| Process and restore purchases and apply feature limits | StoreKit transaction, entitlement, and credit data | Performance of our contract; compliance with legal obligations |
| Operate, secure, and troubleshoot online services | Network, request, security, and diagnostic data | Legitimate interests in providing a secure and reliable service; legal obligations where applicable |
| Respond to support and privacy requests | Contact details, correspondence, verification information | Performance of our contract; legitimate interests; compliance with legal obligations |
| Establish, exercise, or defend legal claims and prevent fraud | Relevant transaction, security, and correspondence records | Legitimate interests; legal obligations |
Where we rely on consent, you may withdraw it at any time for future processing. Withdrawing consent does not affect processing already completed lawfully. You can revoke camera or photo-library access in iOS Settings, although affected features will stop working.
5. How We Use Data
We use data to:
- provide, personalize, and maintain the features you request;
- generate AR previews and planning calculations;
- store projects and spaces on your device;
- process and return optional AI analysis;
- verify purchases, subscriptions, and remaining AI credits;
- restore eligible purchases;
- respond to support and privacy inquiries;
- secure the Services, enforce usage limits, and prevent fraud or abuse;
- diagnose failures and improve reliability; and
- comply with law and protect our users, rights, and Services.
We do not sell or rent personal data. We do not share room or product images with data brokers or use them for targeted advertising.
6. When We Disclose Data
We disclose only the data reasonably necessary for the relevant purpose to:
- Apple, which operates iOS, device permissions, the App Store, StoreKit, purchases, subscriptions, refunds, and related platform services;
- hosting, content-delivery, and security providers, including Vercel for the RoomFit website and any production infrastructure used to securely route online requests;
- AI inference providers, only when you deliberately use an AI feature and only for the content and context required to provide the result;
- professional advisers and authorities, where reasonably necessary to comply with law, respond to lawful process, protect rights and safety, or establish and defend legal claims; and
- a successor organization, in connection with a merger, acquisition, financing, reorganization, or sale of all or part of the RoomFit business, subject to appropriate confidentiality and notice requirements.
Service providers process data under their own legal obligations and, where they act as our processors, under contractual instructions and confidentiality, security, retention, and deletion requirements.
You may request the current identity and processing location of providers that handle RoomFit AI requests by contacting privacy@codeloop.ba.
7. International Transfers
We operate from Bosnia and Herzegovina and may use providers that process data in the European Economic Area, the United Kingdom, the United States, or other countries. Data-protection laws in those countries may differ from the laws where you live.
Where required, we use an applicable transfer mechanism, such as an adequacy decision, standard contractual clauses approved under applicable law, supplementary security measures, or another lawful safeguard. You may request information about the safeguards relevant to your data by contacting us.
8. Retention
We keep personal data only for as long as reasonably necessary for the purpose described below, subject to legal, security, backup, and dispute-resolution requirements.
| Data | General retention approach |
|---|---|
| Projects, measurements, and images stored only on your device | Until you delete them, clear app data, or uninstall RoomFit, subject to Apple/device backups |
| Camera and AR session data used only locally | For the active session or as needed to create the local result; not retained by us |
| AI request images and prompts | Transient processing and no longer than 30 days after completion, unless a shorter period is stated in-product or longer retention is required for a documented security incident or by law |
| AI result returned to and stored on your device | Until you delete it or the app, subject to Apple/device backups |
| Purchase and entitlement records | While needed to provide or restore access, then for the period required for accounting, fraud prevention, disputes, and legal compliance |
| Security and server logs | Normally up to 30 days, unless a longer period is necessary to investigate abuse, a security incident, or a legal claim |
| Support correspondence | Normally up to 24 months after the matter closes, unless a longer period is required for an unresolved dispute or by law |
9. Security
We use reasonable technical and organizational measures proportionate to the data and risk, including encrypted transport, access controls, data minimization, separation of local and cloud features, restricted provider access, and measures intended to prevent unauthorized or excessive use.
No device, transmission method, or storage system is completely secure. You are responsible for protecting access to your device and reviewing images before submission. If we become aware of a personal-data breach, we will investigate and provide notices to regulators and affected individuals where required by law.
10. Your Choices and Rights
Depending on where you live and subject to legal exceptions, you may have the right to:
- know whether we process your personal data and obtain access to it;
- correct inaccurate or incomplete personal data;
- request deletion;
- restrict or object to certain processing;
- receive certain data in a portable format;
- withdraw consent at any time for future processing;
- complain to a competent data-protection authority; and
- not be discriminated against for exercising applicable privacy rights.
To make a request, email privacy@codeloop.ba. We may request information reasonably necessary to verify the request. If data exists only on your device, we may not possess or be able to retrieve it; you can delete that data in RoomFit or by uninstalling the app, subject to backups.
You may complain to the Personal Data Protection Agency in Bosnia and Herzegovina at https://azlp.ba. EEA, UK, and other users may also complain to the authority in their country of residence, work, or where the alleged infringement occurred.
11. Children
RoomFit is not directed to children under 13, and we do not knowingly collect their personal data. If local law requires a higher age for a child to consent to online processing, a parent or legal guardian must authorize the use. Do not submit photographs of children to AI features.
If you believe a child submitted personal data improperly, contact us and we will take appropriate steps, including deletion where required.
12. Automated Processing and AI Transparency
AI output is probabilistic and may be incorrect, incomplete, biased, or unsuitable. AI Style Checks are informational design suggestions. They do not produce legal or similarly significant effects and are not used to profile you for advertising, credit, employment, insurance, housing, education, or access to essential services.
13. Third-Party Links and Platforms
RoomFit may link to Apple, retailers, product pages, or other independent services. Their processing is governed by their own privacy notices. This Policy does not cover independent third-party services that RoomFit does not control.
14. Changes to This Policy
We may update this Policy when our features, providers, or legal obligations change. We will update the date above and, where required, provide additional notice in the app or obtain consent before materially different processing begins.
15. Contact
Questions, requests, or complaints about RoomFit privacy can be sent to:
CodeLoop Studio
Bulevar Branioca Dobrinje 15
Sarajevo, Bosnia and Herzegovina
privacy@codeloop.ba
+387 64 40 44 273
You can also review the RoomFit Terms & Conditions and Cookie Policy.