Privacy Policy

Upholstr is operated by Kleopatra AS ("we", "us", "our"), a company registered in Norway. If you have questions about this policy, contact us at hello@upholstr.app.

We collect only what we need to provide the service:

• Account information — email address, name, and authentication credentials (via email/password or Google Sign-In)
• Work order data — furniture items, customer names, descriptions, status updates, and photos you add to work orders
• Fabric inventory data — fabric names, quantities, labels, and AI-scanned label information
• Device information — device model, operating system version, and app version, used for diagnostics
• Push notification tokens — issued by Apple or Google when you enable notifications, used only to deliver app notifications about your work orders
• Usage data — basic interaction data to help us improve the app

• To provide and improve the Upholstr service
• To authenticate you securely via Firebase Authentication
• To send transactional emails (invitations, notifications) via Resend
• To send push notifications about work order updates
• To scan and identify fabric labels using AI

We do not sell your personal data to third parties, ever.

We use a limited number of trusted third-party services:

• Firebase (Google) — authentication and database, hosted in the EU (europe-north1, Finland). See Google's Privacy Policy
• Google Sign-In — optional authentication method. See Google's Privacy Policy
• Resend — transactional email delivery. See Resend's Privacy Policy
• Apple Push Notification service (APNs) — push notifications on iOS devices. See Apple's Privacy Policy

Your data is stored securely in Google Firebase Firestore, hosted in the EU (europe-north1 — Finland). All data is encrypted in transit (TLS) and at rest.

We process your data on the following bases:

• Contract — to provide the Upholstr service you signed up for
• Legitimate interest — to improve the app, fix bugs, and prevent misuse
• Consent — where required, such as for push notifications

Under EU/EEA data protection law (GDPR), you have the right to:

• Access a copy of your personal data
• Rectify inaccurate data
• Erase your data (right to be forgotten)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, email us at privacy@upholstr.app.

We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting privacy@upholstr.app. Deletion is permanent and irreversible.

Upholstr is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has provided us with data, please contact us and we will delete it promptly.

We use industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest. However, no method of electronic transmission or storage is 100% secure.

We may update this policy from time to time. If we make material changes, we will notify you via the app or by email. Continued use of Upholstr after changes constitutes acceptance of the updated policy.

privacy@upholstr.app