Declutter It

Legal

Privacy Policy

Last updated: September 11, 2026

Declutter It ("Declutter It", "we", "us") is operated from Norway and provides an AI decluttering coach: you upload a photo of a room, and we generate a tidied-up preview image and a step-by-step decluttering checklist. This policy explains what personal data we collect, why, how it's used and protected, and the choices and rights you have over it.

As a Norway-based business, we apply the General Data Protection Regulation (GDPR) — which applies in Norway as part of the EEA Agreement — to all of our users by default, regardless of where you're located, and this policy is additionally written to meet the requirements of the California Consumer Privacy Act (CCPA/CPRA) for users in the US — see Your rights below for details specific to your region.

1. Information we collect

Account information

When you create an account, we collect your name, email address, and a securely hashed password — or, if you sign in with Google, your name, email address, and profile photo as shared by Google. Authentication is handled by Firebase Authentication (Google); we never see or store your Google password.

Photos and generated content

The room photos you upload, the AI-generated tidied-up preview images we create from them, and the decluttering checklists generated for your space are all stored in your account so you can return to them later. Please only upload photos of spaces you have the right to share, and avoid uploading photos that identify other people without their consent.

Usage and account data

We keep track of how many room plans you've generated against your plan's limits, your selected subscription plan, and basic technical data (such as IP address and browser type) that is automatically logged by our hosting provider for security and reliability purposes.

2. How we use your information

  • To provide the core service — generating your preview images and checklists, and saving them to your account.
  • To authenticate you and keep your account secure.
  • To enforce plan limits and, where applicable, process billing for paid plans.
  • To respond to support requests sent to us.
  • To detect, prevent, and address technical issues, fraud, or abuse of the service.
  • To send you service-related emails (e.g. password resets). We do not send marketing email without your consent.

We do not sell your personal information, and we do not use your uploaded photos to train AI models.

3. Legal basis for processing (GDPR)

We process your data under the following legal bases: performance of a contract (providing the service you signed up for), legitimate interests (keeping the service secure and improving it), and consent (for optional communications). Where we rely on consent, you may withdraw it at any time.

4. Who we share data with

We use a small number of trusted service providers ("subprocessors") to run Declutter It. We don't sell your data to anyone, and we only share what each provider needs to do its job:

  • Google Firebase (Google Cloud) — account authentication, database storage for your projects, and file storage for your photos and generated images.
  • Replicate — a third-party AI infrastructure provider we send your uploaded photo to in order to generate the tidied-up preview image and the step-by-step checklist. Replicate processes this data solely to fulfil that request.
  • Vercel — hosts the Declutter It website and logs basic technical request data for security and performance.
  • A payment processor (e.g. Stripe) — if and when you subscribe to a paid plan, your payment details are collected and processed directly by our payment processor. We do not receive or store your full card number.

We may also disclose information if required to by law, or to protect the rights, property, or safety of Declutter It, our users, or others.

5. International data transfers

We're based in Norway (EEA), and our service providers may process and store data outside the EEA, including in the United States. Where this involves transferring personal data out of the EEA, we rely on appropriate safeguards offered by our providers, such as Standard Contractual Clauses.

6. Data retention

We keep your account data, photos, and generated content for as long as your account is active. If you delete a room plan, its photos and images are removed from our storage. If you delete your account (or ask us to), we will delete your personal data and content within a reasonable time, except where we're required to retain certain records (e.g. billing records) for legal reasons.

7. Your rights

If you're in the EEA/UK (GDPR)

You have the right to access, correct, delete, or export a copy of your personal data, to restrict or object to certain processing, and to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority — as we're based in Norway, that's Datatilsynet (the Norwegian Data Protection Authority), or your own country's authority if you prefer.

If you're in California (CCPA/CPRA)

You have the right to know what personal information we collect about you, to request its deletion, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information — though we do not sell or share your personal information as those terms are defined by California law. We will not discriminate against you for exercising these rights.

Wherever you're located, you can exercise most of these rights directly from your account settings (editing your profile, deleting a room plan, or deleting your account), or by emailing us at hello@declutter-it.com.

8. Cookies

We use only the strictly necessary cookies/local storage needed to keep you signed in and remember your session. We do not currently use advertising or third-party tracking cookies.

9. Children's privacy

Declutter It is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), access-controlled cloud storage, and authentication handled by Firebase. No method of transmission or storage is 100% secure, but we work to protect your information appropriately.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll notify you by email or via a notice on the site before the changes take effect.

12. Contact us

For any questions about this policy or your data, contact us at hello@declutter-it.com.