Koini Privacy Policy

Last updated: October 2026

What Koini does with your photos

When you scan a piece of furniture, the photos you choose are uploaded to our server and sent to Tripo3D (a third-party AI service) solely to build your 3D model. When you render a photo of a room, the app's own drawing of your room is sent to Replicate (a third-party AI service) solely to make that picture. Inputs are deleted from our server when the job finishes — whether it succeeds or fails. They are not used for anything else.

The one exception is the accounts we test Koini with ourselves: our admin and tester logins, which are provisioned by us and not open to the public. A scan made with one of those is kept whole, photos included, so we can check what the service made, until the piece or the account is deleted.

Your 3D models and pictures

Generated models, rendered pictures and your list of scanned pieces are stored under your account id so they can sync to other devices you sign in on, and they stay there until you delete them.

Rooms you share with a business

If you choose to share a room with a business (a shop's code or QR), that one room, as you laid it out, and the name you type are stored on our server so the business's representative can open it and send you proposals. Nothing else of yours is shared. Stop sharing (Settings → Shared with businesses) deletes the room from our server at once; proposals you already received stay with you until you delete your account.

Room-copy links you send to other users

When you create a room-copy link, the chosen room layout, finishes, lighting and any personal furniture models or scanned room geometry are copied to our server. Anyone with that link can save an independent copy. No scan photographs are uploaded by this feature. Links expire after 30 days; expired snapshots and assets are cleaned up when new links are created. Stop the link to remove its server copy earlier. Deleting your account removes your room-copy links and assets. A room that someone already saved remains on their device.

Your account

Sign in with Apple gives us only an anonymous account id — we never require your name or email. Tester logins are provisioned by the operator.

Crash diagnostics

Automatic crash reporting sends Apple's crash and performance diagnostics, app and operating-system versions, and recent room-loading steps to our server. A random installation identifier helps group reports. Room and asset identifiers are hashed; reports do not include room layouts, photos, compass readings, location or account details. Network addresses are reduced to a server-side keyed digest for abuse limits. Reports are kept for up to 90 days. You can disable reporting in Settings; this also clears diagnostics stored on your device. Reports help us fix crashes and are not used for advertising.

What we don't do

Deleting your data

Contact

Questions? Email christianwang39@gmail.com.