Privacy policy
Last updated: 2026-11-12
This policy says what data the Toon app, the Toon dashboards for shops and this website collect, who receives it, how long it is kept and how you delete it. It is written in plain language on purpose.
Who is responsible
Toon is run by Core4, 5 Hovsep Emin street, 14, Yerevan, Republic of Armenia (“Toon”, “we”). For any question about your data, write to info@toon-ai.am.
The short version
- The app needs no sign-up. We do not ask for your name or your phone number.
- We keep your projects (photos, scans, plans, answers, designs) so that the app can work. You can delete one file, one project or the whole account at any time.
- To make designs, your room photos, plans and texts are sent to the AI companies OpenAI and Anthropic, and to Modal for photo measurements and 3D renders. The app asks for your permission first.
- The app has no advertising networks, no tracking and no analytics. Shops can pay for a “Sponsored” place in the results; it is always labelled. This website sets no cookies and runs no scripts.
What we collect
| Data | Where it comes from |
|---|---|
| A device account: an account number, an install number, your platform (iOS or Android) and the app version. Session keys and the device secret are stored only as hashes. The key of the account is kept on your phone; on an iPhone it is also saved in your iCloud Keychain, if you use it, so that your other iPhones can open the same account. | Made by the app at the first start |
| The phone’s model, its system version, whether it has LiDAR, and the app version | Sent with each room capture |
| A push token | Only if you allow notifications |
| An email address (optional) | Only if you type it in |
| Room photos. Position data (GPS) and other hidden data are removed from JPEG and PNG photos when they are uploaded. Other files, for example PDF files, are stored as they are. | Your camera or your photo library |
| Room scans (LiDAR), camera measurements, and where the phone stood when a photo was taken | The phone’s camera and sensors, while you scan or measure |
| Floor plans (a picture you upload, a plan you draw, sizes you type) and the corner marks you set on photos | You |
| Your answers: the name of the project, the region of the home (a region from a list, for example a province or a city district; not a street address), style, budget, the state of the home, wishes, and the things you want to keep (names and photos) | You |
| What Toon makes for you: designs, images, 3D renders, estimates, books, drawings and item sheets | Toon |
| Requests to shops, chat messages and files, visits, orders, reviews, reports and blocks | You |
| Purchases: the store, the product, the transaction number and the dates. We never get your card data. | The app store, when you buy tokens or a plan |
| The token history and the AI use of your account (cost, model, purpose) | Toon |
| Your consent choices with their version and time; your language and your time zone | You and your phone |
| Your network address (IP). We use it to limit abuse and to lock repeated wrong sign-in codes. It can appear in server logs. | Sent with every request |
Shops and tradespeople (the dashboards): the email address of each staff member; the organization’s name, kind, logo, description, website, regions and trades; price lists, products and photos; quotes, messages, invoices and payment proofs (bank papers).
What we do not collect: your name, your phone number, your street address, your contacts, the location of your phone and sound recordings. The app asks for no location, microphone or Face ID permission, and it has no advertising networks, no tracking and no analytics. If you write your address or your phone number in a chat with a shop, it is stored as a part of that message and the shop can read it.
Photos can show people, papers and screens. Please photograph empty rooms, and do not upload photos that show other people or documents.
Why we use it
- To make what you ask for: room models, designs, images, estimates, books and drawings.
- To pass your requests and messages to the shops and tradespeople you choose.
- To keep accounts safe and to limit abuse: limits per account and per network address, and sign-in locks.
- To count tokens and AI cost per account, and to keep purchase and billing records.
- To send the notifications you allowed and emails: sign-in and confirmation codes, notices about your account, alerts and digests, and your book as a PDF. Shops and tradespeople also get invoices, payment and plan notices, and decisions about their listing by email.
We do not sell your data, and we do not give it to advertisers. Shops can pay for a sponsored place: it is chosen by the product category or the trade and by the region of your project, and it is always labelled “Sponsored”.
“Help improve Toon”: older versions of the app asked this choice. The app does not ask it any more. An answer given before is still stored with your account until you delete the account. Nothing in Toon uses it, and no extra copies of your data were made for it.
Companies that receive data
We use the companies below to run Toon. Each gets only what its task needs.
| Company | What it gets | When | How long it keeps it |
|---|---|---|---|
| OpenAI (USA) | Room photos, our 3D renders, product pictures and the text of the request (the facts of the room, the style, your wishes); short texts for the product search. From shops: the search texts of their products, and a product photo to fill in a product form. | Each design image and each product search; when products are prepared for the search | OpenAI says that data sent to its API is not used to train its models, and that abuse-monitoring logs are kept for up to 30 days. OpenAI: your data |
| Anthropic (USA) | Room photos, plan pictures, design images (for a check), your answers and texts, the facts of the room and the texts of the book. From shops: price-list files and photos. | The photo check, the planning, the image check, the plan reading, estimate questions, the book’s story and the product choice | Anthropic says that it deletes API inputs and outputs within 30 days (with exceptions), and that by default it does not use them to train its models. Anthropic: data retention |
| Modal (USA) | (1) Room photos, the plan and the design images made from them, for our own measuring software that runs on Modal’s machines. (2) The 3D scene of the home, without photos, for our renders. | Rooms made from photos and the designs made for them; every 3D render | Modal says that the inputs and outputs of functions are deleted after up to 7 days. Modal: security |
| Expo, then the push service of Apple or Google | The push token, and the title and text of the notification | Each notification, if you allowed notifications | Expo says that it does not store the content of a notification longer than it takes to deliver it. Expo: push notifications |
| Google LLC (USA) (sends our emails) | Your email address and the email itself: sign-in and confirmation codes, notices about your account, alerts and digests, your book as a PDF. For shops and tradespeople also: invoices, payment and plan notices, and decisions about their listing | Each email | Under its own rules |
| Hetzner Online GmbH (Germany) (runs our server) | Everything Toon stores: our database and our files are on its machines | Always | As long as we keep the data |
| The App Store (Apple) or Google Play | They handle the payment and tell us about the purchase | When you buy tokens or a plan | Under the store’s own rules |
| RevenueCat (the purchase service between the stores and Toon) | When purchases are open: an account number and your purchases (the store, the product, the transaction number, the dates). No card data. | When you buy, renew, cancel or restore a purchase | Under its own rules |
| Shops and tradespeople in Toon | What you send them: your request (project facts, work lines, drawings, the item sheet, the files you attach) and your messages. They see a customer code, not your name. | When you send a request or a message | They keep their records after you delete your account, but without your own words (see “How to delete your data”). |
Two more companies are in our software for special tasks. fal.ai and Tripo make 3D models of products: when we make such a model, one of them gets a product photo of a shop, and no customer data. fal.ai also has image tools in our software. These tools are switched off, so fal.ai gets no customer data; we will update this policy before we switch them on.
OpenAI, Anthropic and Modal are companies in the United States, and the other companies in the table can also be outside your country. So this data leaves your country. We have no special agreement with them beyond their standard terms. The keeping times in the table are their own published rules.
Toon runs these parts itself, with no outside company: the picture-matching model, the PDF maker, the drawings service and the file storage.
AI processing and your permission
Before your first design, the app asks for your permission to send data to the AI companies. Without it you can look around the app, but the app cannot make designs. You can change your choice at any time in the app: Account, “Privacy choices”. The server reads your choice again before each AI step: if you switch it off while a job runs, the unfinished parts stop and nothing more is sent.
How long we keep it
| Data | Kept |
|---|---|
| Projects, photos, scans, designs and books | Until you delete the file, the project or the account. There is no automatic end date. |
| A deleted account | It is closed at once. A background job then deletes the files first and the records after. If a step fails, it is tried again until it is done. |
| The token history, AI-use records and the audit log | Kept. They hold only numbers, amounts, dates and reasons, so after the account is gone they lead to nobody. |
| Email codes: the sign-in codes of the dashboards, and the codes that check your email address in the app | A code works for 10 minutes. Its record is deleted after 48 hours. |
| Sessions of the app and of the dashboards | A dashboard session ends after 14 days without use, and 30 days after the sign-in at most. An app session ends after 90 days without use. The record of an ended session is deleted 30 days later. |
| An invitation of a staff member that nobody used | It is deleted, with its email address, when it has ended. |
| A request for a quote that gets no quote | It closes as expired after 30 days. |
| Billing papers of shops (invoices, payment proofs) | Kept after the shop’s account is deleted, because they are accounting records. A fixed end date is not set yet. |
| Database backups | One backup per weekday is kept on the server, so each backup is overwritten after 7 days. A deleted account can stay in a backup for that time. Backup copies kept outside the server have no fixed time limit yet. |
| Server logs | Kept to find faults and for safety. They can hold network addresses. A fixed time limit is not set yet. |
How to delete your data
- The whole account (app): Account, “Delete my account”. The screen lists what goes and what stays.
- One file or one project (app): Account, “Your files”; or “Delete this project” in the project. Deleting a file also deletes what was made only from it, for example the copies made for the AI.
- Stop AI processing (app): Account, “Privacy choices”.
- Shops and tradespeople (dashboard): Settings, “Delete my account”. The last owner of an organization that still has other members cannot delete the account before the organization has another owner.
- Without the app: see Delete my account.
What stays after a deletion: the token history, AI-use records and the audit log (only numbers, amounts, dates and reasons); the accounting rows of store purchases, without the user; and the records of the shops you worked with (threads, quotes, orders, visits and invoices), without your own words: the text and files of your messages, your notes and your reviews are removed, and the shops see “deleted customer”. Reports you made stay without your note and without a link to you.
Your rights
You can ask us what data we hold about your account, ask us to correct or delete it, or object to how we use it. Write to info@toon-ai.am. The app cannot give you a copy of your data by itself yet, so we answer such requests by email. Because the app needs no sign-up, we can find an account only by the email address that is saved in it.
Depending on where you live, you may also have the right to complain to the data-protection authority of your country.
Children
Toon is made for adults who plan a renovation. It is not directed at children. The app does not ask for your age.
This website
This website (toon-ai.am) sets no cookies, runs no scripts, has no forms and does not count visits. Like every website, the server that sends you the pages sees your network address and can write it to its log.
Changes
When we change this policy, we change the date at the top. When a change matters for your choices, the app asks you again.