Privacy policy

Updated September 27, 2026.

Curvinha measures a room with the LiDAR on your iPhone or iPad and suggests furniture that fits. This page says what leaves your device, where it goes and how to delete it. There is no sign-up: the app works without logging in and we never ask for your name, email or phone number.

Data controller: GABRIEL SOZZA TAVEIRA JOSE CONSULTORIA EM TECNOLOGIA DA INFORMACAO LTDA, Ribeirão Preto, SP, Brazil. Contact: contato@gabrieltaveira.dev.

What we collect and why

• Room measurements. The scan builds the floor plan: walls, doors, windows and furniture, with their sizes. We send it to our server to run the room analysis and the proposal and to keep your rooms. The camera is used only during the scan.
• Scan video and measurements. Every scan records a camera video (720p, no audio) and sends it to our cloud, together with the RoomPlan measurement files, the camera positions and a few still frames. They are used to build the analysis and to improve measuring accuracy (tuning detection and redoing scans that went wrong). The app tells you before the first scan. The files are kept in a private area, tied to the app's random identifier, with no name, email or location. Only the Curvinha team can access them. The video never goes to the AI service. We keep them for up to 12 months, or until you delete them.
• Reading the colors, only with your permission. 6 to 12 small still frames from the scan (512 px) go through our server to the partner AI service (Gemini Flash-Lite by Google, through OpenRouter) only to read the color, material and shape of the walls and furniture. Without permission, wall colors are read on the device.
• Your answers. Style, budget and, when you tell us, who lives in the home. They are used to pick furniture.
• Note for the analysis. If you write what the questions missed, the app asks for your permission before sending that text, through our server, to the partner AI service so it goes into the analysis. Without permission, the note stays on the device. If you record a voice note, it is transcribed on your device and the audio never leaves it; the transcribed text can also go into the analysis, with the same permission.
• Location, only if you turn it on. With the "Use the scan's location" switch on in Profile > Privacy and iOS permission granted, we use your exact location to know which way the windows face (morning or afternoon sun) and the city of the home. It goes only to our server, is stored encrypted and is not shared with third parties. With the switch off, nothing is read or sent.
• Purchases. Payment is handled by Apple. We receive Apple's signed confirmation of the purchase and check on our server that it is valid. We never see your card details. For a Cômodo (one room) purchase we also keep which room it unlocked.
• Account with Apple, only if you sign in. Cômodo is a purchase Apple does not give back if you delete the app or switch devices. If you tap Sign in with Apple, we receive from Apple only an identifier for your account (we do not ask for your name or email) and keep on our server, encrypted, the rooms you bought: measurements, pieces, your choices and the note. That way they come back when you sign in again. Without signing in, nothing beyond what is described above leaves your device.
• Usage data. We collect usage and interaction data from the app's screens, like taps and navigation, to fix bugs and improve the app. We use PostHog, with a random app identifier and only city and state, never your address or exact location. The camera image and the text you type are left out. Turn it off in Profile > Privacy, "Send anonymous usage data".
• Errors, crashes and performance. When the app crashes or something fails (network, preview, voice, purchase, scan), we send PostHog the error type, where in the code it happened, the screen, the app version, the device model, how long the steps took and the last actions in the app. To find what heats up the device or slows the app down, we also send the thermal state iOS reports, processor and memory use in each step and the performance reports iOS itself produces (MetricKit). Never the text of your note, photos, audio or contact details. The same Profile switch turns this off.
• Where the install came from. To know what it costs to bring each person, the app asks iOS whether the install came from an Apple ad (Apple Ads) and sends our server only the channel and the campaign number, with the random app identifier. The app also tells iOS, without it leaving the device, how far the person got (scan, proposal, purchase), so ad networks get an anonymous count from Apple. None of this uses the advertising identifier or tracks you across other apps. The same Profile switch turns this off.
• Apartment floor plan, only if you send one. If you pick a photo or PDF of your apartment's floor plan, the app asks for your permission and sends the image, through our server, to the partner AI service (Gemini by Google, through OpenRouter), only to read the walls, doors and windows of the room you tapped. Measurements are checked in our own code. We do not keep the floor plan image: it is used for that reading and then discarded.
• Reference images, only if you pick them. Reference images you pick are sent to a partner AI service only to read the style, colors and materials, and are discarded right after; we keep only the words extracted from them.
• Store links (Add by link). When you send the app a link to a piece of furniture you saw in another store, the address goes to our server, which reads the product's name, dimensions, price and photo from the page.
• Share links, only if you create one. When you share a room by link, our server keeps a copy of what the page shows: room name, pieces, prices and store links and, in the architect mode, also style, budget and the floor plan. Coordinates, address and postal code are never included. The scan video only goes into the architect link if you say yes when you ask to talk to her; each access to the video uses an address valid for 15 minutes. Anyone with the link can see the page; it is not indexed by search engines. You can revoke the link at any time, and it is deleted with Delete my data.
• Launch notice, only if you ask for it on the website. If you leave your email (and, if you like, your WhatsApp) under "Notify me at launch", we keep them in our database with the consent text you accepted, only to tell you when the app is out. We use them for nothing else and share them with no one. From your connection we keep only a code that changes every day, to prevent abuse. To leave the list, write to contato@gabrieltaveira.dev.

Artificial intelligence

The room analysis, the realistic preview, reading the colors of your scan, reading a floor plan and reading reference images use third party AI models (GPT by OpenAI and Gemini by Google) through OpenRouter. We send them the room measurements and your answers; with your permission, also the note you wrote, the 3D image of the room made by the app (for the realistic preview), the scan frames, the floor plan image you sent and the reference images you pick. The app asks for your permission before sending any of these; if you decline, the app keeps to what it does on the device. You can withdraw it in Profile, Privacy. We never send them your name, email or exact location.

Realistic previews are AI generated illustrations built on the real measurements of your scan, and the app labels them that way.

Where data is kept

• Server: Vercel, São Paulo region (gru1).
• Database: Neon Postgres, São Paulo region (gru1).
• Scan video and files: private Vercel Blob, São Paulo region (gru1).
• AI: OpenRouter, which forwards the request to OpenAI or Google. These providers may process data outside Brazil.
• Metrics, errors, crashes and performance data: PostHog.

We do not sell your data, do not use it for advertising and do not track you across other apps or websites.

How long

• Images sent and generated for the realistic preview: deleted within 30 days.
• Scan video, measurements and frames: up to 12 months after upload, or until you delete them.
• Rooms, answers and proposals: while you use the app, until you delete them.
• Account with Apple and the bought rooms kept in it: until you delete them.
• Share links: until you revoke them; architect mode links expire after 30 days.
• Purchase records: for as long as tax law requires.

How to delete

In the app, open Profile > Privacy and tap Delete my data. It deletes the data on your device and on our server, previews, share links, scan videos and files, the account and the rooms kept in it included. If you signed in with Apple, we also revoke Curvinha's access to your Apple Account. A deleted Cômodo does not come back; Home and Lifetime stay with your Apple Account and come back with Restore purchases. You can also write to contato@gabrieltaveira.dev.

Your rights

Under Brazil's LGPD you can ask for access, correction, portability or deletion of your data, learn who we share it with and withdraw consent at any time. The legal bases are performing the service you asked for (including keeping the scan video and measurements to build the analysis), our legitimate interest in improving measuring accuracy with those same files, your consent (location, AI for the note, the realistic preview and reading the colors, metrics) and legal obligations (purchases). Write to the email above; you can also contact Brazil's data protection authority (ANPD).

Children

The app is not made for children under 13 and does not knowingly collect their data.

Changes

If this policy changes in a meaningful way, we will tell you in the app before the change takes effect.