Reglo · Effective September 22, 2026

Your space is personal.

This policy explains how Soco App LLC (“we”) handles information when you use Reglo. Contact us at support@so-co.app with privacy questions or requests.

What Reglo handles

• Account information: your email address, account identifier and profile name, which may be derived from your email if you do not enter one. If you choose Google or Facebook sign-in, we receive the account information needed to authenticate you, including provider identifiers and available name/profile-picture information; we do not receive your social account password.
• Your room content: photos you select, frames captured with the camera, panoramas, design instructions, generated images, saved room names and design history. Images may reveal details about your home and belongings.
• Service records: request identifiers, feature use, processing status, timestamps, model usage, costs and errors. Our hosting and authentication providers also process connection and security information, such as IP addresses, browser/device information and request logs. Infrastructure providers may derive an approximate city or country from your IP address; Reglo does not request GPS access.

Why we use it

We use this information to sign you in, capture and assemble room views, generate changes you request, save and restore your designs, handle exports and sharing, maintain security, troubleshoot problems and respond to support or deletion requests. Reglo does not use your room images to train its own AI models. We do not sell your personal information or use it for targeted advertising.

Cloud storage and AI processing

Selected room images are uploaded to private Supabase storage when you save a room or request cloud processing. Vercel hosts our backend. When you request an AI result, the images and instructions needed for that request are sent through OpenRouter to the model provider serving it. The provider depends on the operation and available model routing. These services may process data outside your country.

AI providers have their own retention, safety-review and data-use practices. Reglo does not promise that every provider has zero retention. Read OpenRouter’s privacy policy and provider data-collection information, as well as Supabase’s privacy policy and Vercel’s privacy policy. Avoid submitting sensitive documents, people or information unnecessary for your design.

Camera, photos and sharing

Camera access is used for captures you start. The photo picker gives Reglo access to images you select, not your entire photo library. Reglo does not request your contacts or precise location. We re-encode uploaded image pixels rather than intentionally uploading photo location metadata. Exporting or sharing creates a separate image copy on your device or sends it to an app you choose. Those copies and recipients are outside Reglo’s account-deletion controls.

Account emails and provider records

Supabase uses Resend to deliver account emails, such as email confirmation and password recovery. Resend processes the recipient address, message content and delivery records for this purpose. We do not include room images or design prompts in these account emails. See Resend’s privacy policy.

In addition to handling content for us, hosting and email providers may process their own usage, delivery and security records to operate and protect their services under their policies. These records can include network identifiers, approximate location, service interactions and diagnostic information. We do not treat all provider records as temporary or promise that deleting a Reglo room immediately erases every provider’s security or legally required record.

Storage and retention

• Saved rooms, their original images and restorable versions remain until you delete the room or your account. Earlier prototype uploads are preserved for migration; contact us to recover or remove them.
• Temporary generation inputs become eligible for cleanup after 24 hours, once no active job needs them. Unreferenced room outputs become eligible after seven days. Scheduled cleanup may take additional time during an outage.
• In-app account deletion immediately blocks further app work. Active-service account records and private room files are normally removed within 24 hours after processing has safely stopped. If deletion is delayed, contact us.
• Restricted recovery copies may remain for up to seven days. We do not use these copies to reactivate deleted accounts. We may retain limited deletion, security or support records where needed to prevent accidental restoration, resolve requests or comply with legal obligations.
• AI and infrastructure providers may retain their own security, billing or legally required records under their policies. Contact us for assistance with a deletion request that also concerns a provider.

Your choices and rights

You can export designs, remove individual rooms, restore earlier versions, sign out, or request account deletion. You can revoke camera access in Android settings. Depending on where you live, you may have rights to access, correct, receive a copy of, restrict or delete personal information, object to processing, or complain to your local data-protection authority. Email support@so-co.app; we may need to verify ownership before acting.

Security and children

We use encrypted connections, private image storage, account access controls and protected server-side credentials. No service can guarantee absolute security. Reglo is intended for adults, not children under 18. Contact us if you believe a child has provided personal information.

Content reports

If you report a result inside Reglo, we store your account identifier, the saved room/image reference, selected reason, optional note, timestamps and review status. Authorized staff may review that saved image and its associated generation records to investigate safety concerns and improve safeguards. Reports are not public and are removed when the associated room or account is deleted. Please do not put unnecessary sensitive information in a report.

Credits and purchases

Where credit purchases are enabled, Google Play handles payment details. Reglo receives purchase identifiers and status, the purchased pack, account-binding information and test/refund indicators to verify purchases, maintain your credit balance and prevent duplicate grants. We do not receive your full card or bank details. After account deletion, limited de-identified purchase and ledger records may remain for refund reconciliation, fraud prevention and applicable recordkeeping obligations. Contact us with purchase-data questions.

Changes to this policy

We will update this page when our practices change and provide additional notice when required. The effective date above identifies this version.