Privacy Policy

Last updated: October 2026

Summary: Wallora has no accounts and uses a random device ID instead. Your description, and a reference photo if you add one, are sent to our server and to Google's Gemini API to create the painting. Neither uploaded nor generated images are stored there, and your paintings are kept on your device. The app also sends anonymous product analytics to PostHog on its EU servers. Nothing is linked to you, and nothing is used for tracking.

Our Privacy Commitment

Wallora collects what it needs to generate paintings, keep your credit balance fair and see which features get used. There is no account, no email and no advertising, and nothing it collects is linked to your identity. Your creative ideas remain your own.

Data We Collect

Data Type Purpose Where
Anonymous Device ID Credit balance, purchases and anonymous analytics iOS Keychain (local) + server
Credit Balance and Usage Count Credit management, and the monthly limit for legacy subscribers Server
Purchase History Credit packs, and legacy subscriptions from before version 2.0 RevenueCat (third-party) + server
Product Interaction Anonymous analytics on which features are used PostHog (third-party, EU servers)
Your Description, Instructions and Reference Photo Generating, refining, previewing and extracting paintings Sent to our server and Google's Gemini API, images not stored

These match the App Store privacy labels: Device ID, Product Interaction, Purchase History, Photos or Videos and Other User Content, all marked as not linked to you and not used for tracking.

Data We Do NOT Collect

  • Personal Information: No names, emails, phone numbers or accounts
  • Location Data: We don't track where you use the app
  • Tracking: No advertising identifiers, and nothing is used to track you across other apps or websites
  • Your Paintings: Generated images are not kept on our server after they are delivered
  • Your Photo Library: Wallora never reads your library. It only sees a photo you pick yourself, and it asks for permission only to save paintings to Photos

How AI Generation Works

When you generate a painting:

  • Your description, and a reference photo if you add one, are sent to the Wallora server
  • The server passes them to Google's Gemini API, which creates the image
  • The image is sent back to your device
  • The server does not store uploaded images or generated images

The text of your description may appear in our server logs, which we use only for troubleshooting. Google processes the request under its own Gemini API terms. We do not use your descriptions, photos or paintings for anything other than delivering the result to you.

Reference Photos

You can add a photo to guide a painting. You pick it with the iOS photo picker, so Wallora only receives that one photo. Before it is sent, the app scales it down to at most 1024 pixels on its longest side. It goes to our server and Google's Gemini API with your description for that request and is not stored there. A small thumbnail is kept on your device with the painting, so you can see what it was based on.

Room Preview, Refine and Extract

Placing a painting in a room, refining it with a described change, or extracting the artwork from a room preview sends that image and your instruction to our server and Google's Gemini API for that one request. As with a new painting, the result is returned to your device and not kept on our server. Your room choices are not stored on our server.

Local Device Storage

Your paintings are stored on your device only. This includes:

  • Saved paintings and room previews, with the thumbnail of any reference photo
  • Generation history and favorites
  • Your preferences

This data stays on your device, is included in your own device backups if you use them, and is deleted when you uninstall the app.

Anonymous Identification

Instead of requiring an account, Wallora uses a device ID stored in your iOS Keychain. This ID:

  • Is randomly generated and contains no personal information
  • Persists across app reinstalls, so free paintings, credits and the intro offer cannot be claimed twice
  • Is not linked to your name, email or Apple ID
  • Is used for your credit balance, your purchases and anonymous analytics

Like any web service, our server sees the IP address your device connects from. It is used only to limit how many requests can be made in a short time, and it is not saved with your device ID.

Third-Party Services

RevenueCat processes in-app purchases of credit packs, which are one-time and do not renew, and still handles subscriptions bought before version 2.0 for existing subscribers. Payment goes through Apple's App Store, and RevenueCat does not see your payment details. See RevenueCat's Privacy Policy.

Google Gemini API generates, refines, places and extracts the images from your description, instructions and reference photo, as described above.

PostHog, on its EU servers, receives anonymous product analytics, such as which features are used, tied to the random device ID. It is not linked to your identity and is not used for tracking. See PostHog's Privacy Policy.

Data Retention

  • Device ID, Credit Balance and Usage Count: Kept while you use the service
  • Reference Photos and Generated Images: Not stored on our server
  • Description Text: May remain in server logs used for troubleshooting
  • Purchase Data: Managed by RevenueCat under its retention policy
  • Analytics: Managed by PostHog under its retention policy

Your Rights

Wallora has no accounts, and nothing it collects is linked to your name or email. If you have a question about the data tied to your device, contact us below. If you uninstall the app and reinstall it, your device ID in the Keychain may persist, which is by design so free paintings and credits cannot be claimed twice.

Children's Privacy

Wallora is not intended for children under 13. We do not knowingly collect data from children.

Contact Us

If you have any questions about this privacy policy, please contact us at click to reveal email.