Privacy, in plain sight.

The website example

The example on this website uses a supplied illustrative photo and fixed suggestions. It does not access your camera, upload your files, or create an account. Example lists exist only in the page’s memory and reset when you reload or close it. This site has no advertising trackers or analytics scripts. Its hosting provider may process ordinary request information, such as IP addresses and security logs, to deliver and protect the site.

Room photos and AI analysis

You choose a photo and confirm that it may be sent for analysis. The app sends the selected image to the NeedLens AI service over HTTPS. The service resizes and re-encodes the image, removing embedded image metadata such as GPS information, before sending it with an analysis prompt to Google Cloud’s Gemini Enterprise Agent Platform, formerly Vertex AI.

NeedLens AI processes images in server memory and does not save photo files or ordinary scan findings in its server database. Avoid including people, private documents, screens, or other sensitive details. Metadata removal does not remove private information visible inside a photo.

The app uses paid Google Cloud Gemini processing under the Google Cloud service terms. Google does not use customer data to train or fine-tune AI models without permission or instruction. NeedLens has disabled implicit caching and optional request/response logging for its configured Cloud model. Google’s separate automated safety checks may flag suspicious activity; Google may then log the relevant prompts for up to 90 days and authorized employees may review them to investigate abuse. See Google Cloud’s abuse-monitoring policy. Provider controls and abuse monitoring are separate from NeedLens AI’s own storage; see Google Cloud’s retention controls. This notice does not promise zero provider retention.

Accounts and subscription information

Firebase Authentication processes your email address, account identifier, sign-in credentials, and email-verification state. Your password is sent to Firebase Authentication; NeedLens AI does not store it in its own service database. NeedLens AI stores your account identifier, scan usage, subscription state and expiry, and purchase-verification records so it can provide free scans, validate access, prevent purchase sharing, and enforce usage limits.

Firebase Authentication also processes IP addresses and technical sign-in information for security and service operation. Firebase App Check and Google Play Integrity process app, licensing, and device-attestation information to help verify legitimate access. These services have their own retention practices; they are not limited to the room-scan request.

Subscription purchases are handled by Google Play. NeedLens AI receives the purchase token needed to verify your subscription, but does not receive your payment-card details. The app sends Google Play a hashed account identifier to associate the purchase with your NeedLens account. A server-side purchase token and a separate token ownership record are retained for subscription verification until account deletion. Google’s privacy policy also applies to its services.

Tasks, shopping items, and reports

Your approved tasks and shopping items are stored locally on your device. They are not synced to a NeedLens AI cloud task database. You can clear the app’s local data. Signing out clears local lists to keep accounts separate.

If you choose to report a suggestion, the report includes the finding text, report reason, any details you submit, your account identifier, and a receipt identifier. Photos are not included. Reports are used to review problematic output and support safety. They become eligible for automatic deletion after 90 days, or are removed with your account.

Service providers

NeedLens AI uses Netlify for website and service hosting, Firebase and Google Cloud for accounts and service records, Google Cloud’s Gemini Enterprise Agent Platform for photo analysis, and Google Play for purchases and app integrity. Information is transmitted to these providers as needed to run the features described above. Their processing terms and privacy policies also apply. Cloud Gemini prompt and response processing is covered by the Cloud Data Processing Addendum; Google separately handles service and account data under its applicable policies. The global model endpoint can process data in any Google Cloud serving region; this service does not promise that scans stay in your country. This notice does not mean that no data leaves your device or that providers retain no data.

Security and retention

Account and purchase records are restricted to the service. Data travels over HTTPS. The service uses app verification, purchase verification, and usage limits to help protect access. No system can guarantee absolute security.

Aggregate daily usage counters contain no account identifier and become eligible for deletion after 7 days. Limited application error logs may include a random request identifier, error code, and status. The application code excludes room photos, raw AI output, account identifiers, and purchase tokens from those logs. Hosting and Google infrastructure may retain their own access or security information under their respective policies.

Account deletion removes the active Firebase sign-in account and associated NeedLens service profile, purchase-verification records, and reports. A minimal deletion marker keyed by the old account identifier is normally scheduled to become eligible for deletion after 24 hours, preventing requests already in progress from recreating the account. Automatic cleanup can occur later. If scheduling or cleanup is interrupted, the minimal marker can remain until cleanup finishes.

Provider deletion is not immediate in every system. Firebase’s retention policy says authentication IP logs are kept for a few weeks, and other authentication information is removed from live and backup systems within 180 days after account deletion is initiated. Google Play transaction records, Google Cloud Gemini’s retention of flagged prompts for up to 90 days, and providers’ security or legally required records are governed separately. Deleting a NeedLens account does not promise immediate erasure from all provider systems.

Your choices

You can decline cloud analysis, avoid uploading sensitive content, remove local items, clear local app data, and request account deletion. Deleting data does not cancel a Google Play subscription. Read the data deletion instructions and support information.

Age, changes, and contact

NeedLens AI’s cloud AI service is intended for adults aged 18 and over. We may update this notice when the app or its providers change. The date below identifies this version. NeedLens AI is operated by AeroFrohne. For privacy questions or to exercise your data choices, email info@needlensai.com. See the support page and deletion instructions for help.