Privacy, in plain English

SQUIRCLE / 方圆 · Last updated 14 October 2026

This notice explains what Squircle 方圆 uses to provide one room reading and keep the service safe.

Who is responsible?

The data controller is [legal name / EI — set before launch], trading as Squircle 方圆, [business address — set before launch]. Contact: [business email — set before launch] · [business phone — set before launch].

What we use

We process your room photo, selected room type and goal, payment/reference status, generated reading, and any feedback you choose to send. A keyed network-address hash is used for upload rate limiting; we do not store the raw address in these counters. If you ask us to email a result, the address is used for that delivery and is not added to a marketing list.

Why and for how long

We use this information to provide the paid service, prevent abuse, send a requested email, and meet accounting or legal obligations. Room photos are private. We attempt deletion from our storage immediately after analysis, including unsuitable photos. A daily cleanup retries delayed deletions and removes abandoned uploads that are at least 24 hours old, including files without a reading record. Because cleanup runs once a day, eligible uploads may wait until the next scheduled run. Scheduling delays, active processing, or service failures can extend retention; 24 hours is the cleanup eligibility threshold, not a guaranteed deletion deadline. Abuse-prevention counters and older delivery-event hashes are removed after 24 hours at the next cleanup. Reports and payment records are kept only as long as needed to provide the report and meet legal/accounting obligations.

Service providers

Mollie handles payments; OpenAI analyses the submitted image; Vercel hosts the app and private Blob storage; Neon stores reading state; Brevo sends an email only when requested. Providers may process data outside the EU under their published safeguards. The room photo is never attached to an email or share card. We request that OpenAI not save response application state. Its default abuse-monitoring logs may still retain submitted content for up to 30 days, or longer where required by law or needed to prevent harm; deleting our copy does not delete those logs. Different provider retention requires separately approved account settings. See OpenAI’s data controls.

Your choices

You may request access, correction, deletion, restriction, portability, or object to processing where applicable. Email [business email — set before launch]; we may need enough information to verify the request. You can also complain to the CNIL.

Links and privacy

No account is required. Your long, unguessable report link is the key to the result, so keep it private. A reopened link contains structured findings but not the original room photo. Social sharing includes only your score, first shift, and our homepage. Saving or emailing the private report link gives its recipient access to the full report and report controls. Analytics runs only on the homepage and public legal pages, with query strings removed; private reading pages are excluded.