Privacy Policy

1. Data Controller and Scope

At Khora Design Lab (the "Company"), we share your concern for the safety of the personal data processed while you use the Dimens app. This policy governs your legal rights and how your data is processed. By using the app, you accept that your data will be processed as described in this policy.

2. Camera and LiDAR Data (TrueDepth API)

Dimens uses your device's camera and LiDAR sensors to scan your space.

Data Processing: Depth data obtained from the Apple TrueDepth API and LiDAR sensors is used only for real-time measurement and 3D model generation.

Storage and Sharing: This raw sensor data is NEVER SENT to Khora Design Lab servers and NEVER SHARED with third parties. The room measurements and 3D model created from this raw data, however, are uploaded to our servers (Supabase) to be stored in your account and to generate export files (DXF, etc.).

3. Analytics and Usage Data

To improve app performance and detect bugs, we may collect usage data that does not include your name or email address and is linked to a random user ID. This data may include:

• App crash logs,
• Frequency of features used,
• Device model and operating system version.

On our website, we use PostHog (US), Google Analytics (US), and our own Supabase infrastructure to measure page views and interactions. These tools use cookies and browser storage.

We use Google Firebase (Analytics and Crashlytics, US) for app analytics and crash reports. This data is collected only if you give permission on the consent screen in the app; permission is off by default and can be changed in Settings. The app no longer uses PostHog.

This data is processed under our legitimate interest in product development.

Subscriptions: Payments are handled by Apple; we do not see your card details. Your subscription status is processed through RevenueCat (US), linked to your account ID.

Project and report data: Your projects, scans, the photos you add to reports, and the PDF and export files you create are stored on our servers. Location information (EXIF) in photos is removed before upload.

Account deletion: You can delete your account in the app via Settings → Permanently Delete Account. This deletes your projects, scans, files, and profile. When your account is deleted, deletion of your records in Google Analytics and RevenueCat is also requested. If you deactivate your account, your data is deleted after 30 days. Content you have added to another user's or organization's project is not deleted; it is transferred to the project owner. When you use the app without signing in (as a guest), your data is kept until you delete it. If you sign in later, this data is transferred to your account. Reports for scans you delete are permanently deleted after 30 days.

4. Data Breach and Security Limitations

We take reasonable commercial measures (encryption, access restriction, etc.) to protect your data. However, we cannot guarantee that data transmission over the internet or electronic storage is 100% secure. The Company assumes no responsibility for unauthorized access, theft, or destruction of data beyond its legal obligations. Securing your device (passcode, Face ID, etc.) is your responsibility.

5. Changes and Contact

We reserve the right to update this policy. Important changes will be communicated in the app.

For privacy-related requests, contact: info@khora.tr