Privacy Policy

This policy explains how VRCFORGE STUDIOS LTD (company number 15117291), whose registered office is 18 Central Park Avenue, Dagenham, England, RM10 7DA, collects and uses personal information when you use the Desio website, the HabiVue iOS app, accounts, memberships, checkout, cancellation service, and customer support. For UK data-protection law, VRCFORGE STUDIOS LTD is the controller of that information.

You can verify our company details on Companies House.

1. Information we collect

• Account information: name, email address, login and account status.
• Content: room photos, prompts, design preferences, generated concepts, saved comparisons, and related metadata.
• Purchase information: plan, amount, currency, subscription and transaction references, payment status, card brand and last four digits. Payment providers process full card details; Desio does not ask for or store the full card number, security code, or card expiry in its support or cancellation forms.
• Support and cancellation information: messages, checkout email, approximate transaction date, last four card digits, and the steps taken to resolve a request.
• Technical and usage information: IP address, approximate country, device and browser details, pages and features used, timestamps, security events, error logs, cookie choices, referral information, and campaign attribution supplied by your browser.

2. Where information comes from

We receive information directly from you, from your use of Desio, from payment and app-store providers, and from service providers that help us operate, secure, diagnose, and support the service.

3. Why we use it and our legal bases

• Contract: to create and manage accounts, generate and save concepts, provide paid access, process purchases, cancel subscriptions, and provide support.
• Legitimate interests: to secure the service, prevent fraud and abuse, diagnose failures, improve performance, understand how features are used, protect legal claims, and operate an effective business. We balance these interests against your rights.
• Legal obligations: to keep required financial records, respond to lawful requests, and comply with consumer, tax, accounting, and data-protection law.
• Consent: where required for optional analytics, advertising technologies, or similar non-essential processing. You can withdraw consent through the available privacy controls without affecting earlier lawful processing.

4. Who receives information

We disclose only what is reasonably necessary to providers supporting hosting, cloud infrastructure, payments, email, customer support, authentication, security, analytics, error monitoring, and product operations. We may also disclose information to professional advisers, authorities where legally required, or a successor in a genuine corporate transaction subject to appropriate safeguards.

Apple independently controls App Store purchases and related account information under its own privacy terms. Payment providers independently process payment credentials under their own terms. We do not sell personal information.

5. International transfers

Some providers may process information outside the United Kingdom or your home country. Where data-protection law requires it, we use recognised safeguards such as adequacy regulations or approved contractual protections and assess supplementary measures where appropriate.

6. Retention

We keep personal information only for as long as reasonably necessary for the purpose collected. Account and design content is generally retained while the account or service relationship remains active and for a reasonable period afterwards for recovery, security, or dispute handling. Purchase and accounting records may be kept for legally required periods. Support, cancellation, security, and diagnostic records are retained according to the nature of the issue and applicable obligations. Backups are overwritten on their normal cycle.

7. Cookies and similar technologies

Essential cookies support sessions, authentication, security, checkout, language, and privacy choices. Optional analytics or advertising technologies are used only when configured and permitted by the consent rules that apply to you. Browser or device settings may also let you control these technologies.

8. Your rights

Depending on the law that applies, you may ask for access to, correction of, deletion of, restriction of, or portability of your personal information, and you may object to certain processing or withdraw consent. You may also complain to the UK Information Commissioner's Office or your local supervisory authority. We may verify your identity and may retain information where the law permits or requires it.

Submit a request through the Help Centre or email support@desioapp.com. Desio is not intended to make decisions that produce legal or similarly significant effects solely by automated means.

9. Children

Desio is a general-audience design service and is not directed to children below the minimum age at which they can lawfully use an online service without parental authorisation where they live. If you believe a child supplied information improperly, contact us.

10. Security

We use proportionate organisational and technical safeguards, including access controls, encrypted transport, protected integration secrets, hashed authentication tokens, and security logging. No online system can guarantee absolute security, so please use a unique password and notify us if you suspect misuse.

11. Changes and contact

We may update this policy when the service or law changes. We will update the date above and provide additional notice where required. Privacy questions may be sent to support@desioapp.com or through the Help Centre.