Privacy Policy

This policy explains how the operator of DIYai.app (“we”, “us”) handles personal data when you use the website and app. We are a sole trader in the United Kingdom.

Data controller: [Legal name], trading as DIYai.app. Postal address: [Postal address]. ICO registration: [ICO number if registered]. Contact: support@diyai.app.

What we collect

Depending on how you use DIYai.app, we may process:

• Profile and preferences you enter (display name, postcode, home type, skill level, merchant preference, accessibility settings). Until you sign in, these stay in your browser.
• Project, toolbox, snag, and Digital Home Passport data you create, including photos you upload of rooms, products, or receipts.
• Support, affiliate, sponsor, trade, and press form submissions (name, email, message, and any screenshot you attach).
• Technical data that our hosting provider (Vercel) may log, such as IP address, user agent, and request times, to operate and secure the service.

We do not currently run analytics or advertising cookies.

Lawful bases

We process personal data under UK GDPR on these bases:

• Legitimate interests — to provide the DIY coaching product, keep the service secure, and review partner or support requests.
• Contract — when you ask us to provide the service or when paid Pro features launch.
• Consent — where you opt in to email notifications, or if we later add non-essential cookies.
• Legal obligation — if we must keep records for tax, safety, or a lawful request.

Processors and transfers

We use service providers who may process data on our behalf:

• Vercel — hosting and application delivery.
• Google (Gemini) — AI coaching and design features you request.
• YouTube / Google — optional tutorial video search.
• Supabase — accounts (Google / Apple sign-in), project data when you are signed in, and public form submissions.
• Stripe — planned for Pro billing; not live yet.

Some providers are based outside the UK. Where that happens we rely on UK-approved transfer mechanisms (such as the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses) as offered by the provider.

Retention

Browser-stored projects and preferences remain until you clear site data, or until you sign in and we upload them to your account. Form submissions and signed-in homeowner data are kept in our UK/EU hosted database for as long as needed to operate the service (admin settings currently target around 24 months). We will shorten or extend this if the law requires it.

Your rights

Under UK GDPR you can ask us to:

• access the personal data we hold about you
• correct inaccurate data
• erase data in certain circumstances
• restrict or object to certain processing
• receive a copy of data you provided (data portability), where applicable

Export and account-deletion workflows will ship with signed-in Supabase accounts. Until then, email support@diyai.app and we will help manually. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Children

DIYai.app is intended for homeowners aged 18 or over. We do not knowingly collect data from children.

We do not sell your data

We do not sell personal data. Some product links may be affiliate links — see our Affiliate disclosure. That does not involve selling your personal information to retailers.

Changes

We will update this page when our practices change. The date at the top is the latest version.