Privacy Policy — VastuCanvas AI

Last updated: 07-08-2026

This policy covers the VastuCanvas AI mobile app, published by
Mayur ("we", "us"), which also operates dbrush.in.

In short

• You do not create an account. We never ask for your email or password.
• Your wall photo is never stored. It is sent for analysis, the result comes
  back, and the photo is discarded.
• We collect your name and phone number only when you choose to send an
  enquiry — not before.
• We do not sell your data, and we run no advertising or third-party tracking.
• The app does not use your location.

1. What we collect, and when

1.1 Nothing, until you act

Browsing the catalogue, reading the Vastu guide and setting a wall direction
require no personal information. You can use most of the app without giving us
anything.

1.2 Photographs of your wall

When you photograph a wall (or pick an existing photo), the image is sent to our
servers and on to Google's Gemini API. It is used for two things: measuring the
usable wall area and lighting, and — if you switch on the photoreal preview —
producing a picture of the artwork hanging on that wall.

The photograph is not saved. It is not written to our database or our file
storage. It exists only for the moments the request takes, then it is gone.
Google processes it as our service provider; see section 4.

If you save or share a preview image yourself, that copy is on your device and
in whatever app you shared it to, and is outside our control.

1.3 Compass and orientation

The app reads your device's compass to work out which way a wall faces. These
readings are used on your device only. They are never transmitted to us.

1.4 Enquiry details

When you send an enquiry, we collect and store:

• Your name and phone number (required)
• Your city and PIN code, and any note you write (optional)
• The items you selected: artwork, size, frame finish, border, quantity, and
  the wall direction and room you chose

These are stored so we can prepare your quote and fulfil your order. They are
also carried into the WhatsApp message you send us — see section 4.

1.5 AI-designed artwork

If your enquiry includes a piece designed by the AI, the artwork file is
uploaded to our storage so our studio can print it. Stored alongside it are the
order reference, the piece's title, and the text description used to create it.

The uploaded file is the painting itself. It does not contain your wall photo
or any image of your home.

Separately, pieces designed in the app may be added to a shared collection and
offered to other customers with a similar wall. This keeps the feature
affordable — the first person to want a particular subject pays for it and
everyone afterwards gets it instantly. These pieces are created from the Vastu
subject, wall direction and room type only. Your photograph is never sent to
the image model as source material and never forms part of any artwork.

1.6 A device identifier

On first launch the app signs in anonymously to Firebase. This creates a random
identifier for your installation. It is not linked to your name, phone, email or
any Google account, and it tells us nothing about who you are.

It exists for one reason: the AI design features cost us money per use, so each
device gets a small daily allowance. Counting that allowance requires being able
to tell one installation from another. The counters expire automatically after
about a day.

The identifier is reset if you reinstall the app or clear its data.

1.7 Technical information

Our servers record standard request information, including IP address, in
operational logs — as any web service does — for security and to diagnose
faults. If the anonymous sign-in above fails, your IP address is used as the
fallback for counting the daily allowance.

1.8 What we do not collect

• No account, email address or password
• No location data. The app requests no location permission and contains no
  location code.
• No contacts, calendar, microphone or call data
• No advertising identifiers, ad networks or third-party trackers
• No purchase or payment information — the app takes no payments

2. Why we use it

We do not use any of it for advertising or profiling, and we do not sell or rent
it to anyone.

3. Legal basis and your consent

We process your enquiry details to take steps at your request and to perform the
resulting order. Camera, photo library and compass access are requested at the
point of use, and you may refuse — the app is built to keep working without
them, with reduced features.

(For users in India: we process personal data in accordance with the Digital
Personal Data Protection Act, 2023. You may withdraw consent at any time using
the contact details below.)

4. Who else is involved

Google (Firebase and Gemini API). Our servers, database, file storage and
anonymous sign-in run on Google Firebase. Wall photographs and artwork
descriptions are processed by Google's Gemini API on our behalf. Google acts as
our processor and does not use this content to train its models under our
service terms. Data is processed in the asia-south1 (Mumbai) region where
configurable. See Google's privacy policy at policies.google.com/privacy.

WhatsApp (Meta). Enquiries are sent by opening WhatsApp with a prepared
message. Once you send it, the message and your phone number are handled by
WhatsApp under Meta's own privacy policy, which we do not control. If you would
rather not use WhatsApp, contact us by email instead — see section 9.

dbrush.in. Product listings are fetched from our own store. No personal
information is sent when the catalogue is loaded.

We use no analytics, advertising or attribution services.
(Update this line if you later add crash reporting or analytics.)

5. How long we keep things

• Wall photographs — not retained at all
• Enquiries — kept as a business and tax record for as long as required by
  law, then deleted
• AI artwork files — kept while needed to fulfil and support your order
• Daily-allowance counters — expire automatically after roughly 24 hours
• Server logs — retained for a short operational period under Google
  Firebase's standard retention

6. Security

Data travels over encrypted connections (HTTPS/TLS). Our database rules are
written so the app can submit an enquiry but can never read anyone else's:
enquiry records are not readable from any app installation, by design. Access to
stored enquiries and artwork is restricted to authorised staff.

Uploaded artwork files are reachable only by their exact, unguessable link — the
one placed in your WhatsApp message. They cannot be listed or browsed. Please
treat that link as private.

No system is perfectly secure, and we cannot guarantee absolute security.

7. Your rights

You may ask us to:

• Tell you what personal data we hold about you
• Correct anything inaccurate
• Delete your enquiry and any artwork we hold for it
• Withdraw consent for future processing

Write to us at the address in section 9 with the phone number you used, and we
will respond within a reasonable period. Deleting your app data locally is
immediate: uninstalling the app, or clearing its storage, removes the cached
catalogue, your onboarding state and the anonymous identifier.

8. Children

VastuCanvas AI is intended for adults furnishing a home. It is not directed at
children under 18, and we do not knowingly collect their personal data. If you
believe a child has sent us an enquiry, contact us and we will remove it.

9. Contact

Email: support@dbrush.in

10. Changes

If this policy changes materially, we will update the date at the top and, where
the change is significant, note it in the app. Continuing to use the app after a
change means you accept the updated policy.