Privacy policy

Effective 22 October 2026

This page says what reno keeps about you, why, where it's kept, who else handles it, and how to have it deleted. It describes reno as it works today, during its private preview.

Who runs reno

The short version

• reno doesn't sell your information, show ads, or use advertising or analytics companies.
• Signing in with Google is optional. reno uses what Google gives it only to sign you in and keep your flats on every phone you sign in on.
• Your flats are kept on reno's server in Singapore and on your phone.
• A floor plan, quotation or screenshot you ask reno to read goes to Anthropic's Claude to be read.
• You can delete a flat at any time, or your account with every flat only you are on.

Signing in with Google

Signing in is optional, and reno works without it. When you tap Continue with Google, Google's own window signs you in, through Firebase Authentication, a Google service. reno never sees your Google password.

What Google gives reno

Google gives reno a sign-in token with your Firebase user ID, your email address, whether Google has verified it, your name and a link to your profile picture.

What reno keeps

reno's server keeps your Firebase user ID, your email address, whether it's verified, your name, when you first and last signed in, and a random reno account number. It doesn't keep your profile picture.

reno shows your email address only to you, on your own phone, so you know which account you're in. Your phone keeps your email address, name and reno account number for that. Firebase doesn't keep you signed in on your browser. It holds the sign-in in memory just long enough to give reno the token, then signs out.

Firebase itself keeps a record of your sign-in in reno's Firebase project, with your email address, name, profile picture link and sign-in times.

What reno uses it for

reno uses it to sign you in, to keep your flats in your account so they open on every phone you sign in on, and to check it's really you before your account is deleted.

What reno never does with it

reno doesn't sell Google user data or use it for advertising. It shares it only with the companies that run reno for it, Google's Firebase for the sign-in and Cloudflare, which carries reno's traffic, or where the law requires it. Your email address, name and Firebase user ID never go into reno's logs or usage counts. When someone pays for reno's pass, Stripe gets their reno account number, never their email address or name.

reno's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What you put in, and where it's kept

Your flats

When reno builds a flat from your floor plan, its server keeps the plan's picture, what it read from the plan, and the flat itself. That's the flat's name, its layout, the 3D and what you chose, including your answers about your household, such as who works from home or whether anyone at home is 65 or older.

Without an account, reno files your flats under a random key in a cookie on your browser, not under your name. Once you sign in, they're filed under your account. Your phone keeps a copy too.

Your flat's record

The record is everything you log for a flat: your firms and their quotes, what your group said (the firms you add or avoid, and a line of what was said, never who said it), the spec and the versions you sent, the renovation plan, Sign, the works, your budget, and the pieces you're buying, with their shops, the Taobao account that placed each order, order and tracking numbers, what you paid and your forwarder.

The record stays on your phone, in your browser's storage, until you keep a private copy on reno, add a partner's phone or sign in. From then on reno's server keeps a copy too, so the record comes back on a cleared phone and two phones stay in step.

Names

Each phone on a shared flat goes by a first name. The other phone sees it, and it goes into the messages reno drafts for firms. Family who vote through a look-and-vote link give a name and, if they like, a note, which the flat's phones see.

The pass

If a flat has reno's pass, its record stays with the flat: when, how much, which phone paid, by its first name, and Stripe's references for the payment. In the free beta it also keeps your answer to "Would you have paid S$149?" and your job's size, rounded to the nearest S$1,000.

The spec pack's PDF

reno's server prints the PDF from your choices when you ask for it, and doesn't keep a copy.

Where it's kept

reno's server is a computer in Singapore. In the app, only the phones on a flat can open it. Whoever runs reno's server could read what it keeps.

What reno reads with AI

Some steps send what you give them to Anthropic's Claude, an AI model, which reads it for reno. reno uses Claude on a Team plan. Under that plan Anthropic doesn't train on what reno sends, and deletes it within 30 days unless it's flagged for misuse or the law requires Anthropic to keep it. Claude runs in the US.

• To read a floor plan, reno sends its picture, which your phone shrinks first, its size in pixels, and the floor area if you typed it.
• For a redesign in your own words, it sends what you typed, your flat's rooms and walls, and its current design.
• To check a quotation, it sends the pages, as photos or a PDF, and your spec's numbered lines, without prices.
• To read a furniture listing, it sends up to three screenshots of it.
• To read a seller's reply, it sends the text you pasted or up to three screenshots of it, and your numbered questions.
• To read an order, it sends the one or two screenshots you add of the order's page in the Taobao, Tmall or Pinduoduo app. Your phone keeps only what it can match on the page: the order and tracking numbers, what you paid, the shop and the option you bought.

Whatever is on a page or a screenshot goes with it, such as a name or address printed on a quotation, or your delivery address on an order page. A long read's answer waits in the server's memory for up to 15 minutes, until your phone collects it. reno keeps what your record needs from the answer, such as a quote's lines, but not the quotations, screenshots or replies themselves.

Your floor plan's picture is kept with your flat, as above. reno also keeps what it read from each plan, without the picture or anything that links it to you, so the same plan reads at once next time. That includes the rooms, their sizes and any title printed on the plan.

Other companies that handle your data

reno uses these companies to run. Some of them handle data outside Singapore.

• Google. Firebase Authentication runs the sign-in, as described above.
• Cloudflare. It carries every request between your browser and reno, and serves this website. It sees your IP address and what passes through, to deliver it.
• Anthropic. Its Claude reads what you ask reno to read, as described above.
• Stripe. It takes payment for reno's pass when reno charges for it. You pay on Stripe's own page, by card or PayNow, so reno never sees your card number. reno tells Stripe which flat the payment is for, a reference for the phone that paid and your reno account number, never your name, email address or cookie. What you type on Stripe's page goes to Stripe, under Stripe's privacy policy.

reno uses no advertising or analytics companies. When you send a firm or your family a message, the spec pack or a picture, it goes from your own phone through the app you choose, such as WhatsApp. reno doesn't send messages or emails itself.

Switched off for now

reno's code can do three more things that are switched off today and send nothing. reno will update this page before switching any of them on.

• A Telegram bot that checks quotations forwarded to it. It would receive them through Telegram, have Claude read them, and keep your Telegram ID, first name and waitlist answers.
• Looking up a pasted Taobao link from reno's server. It would send the link, not who you are, to Taobao or a licensed listing service, and keep the answer for up to two days.
• Reading screenshots of a group chat, which would send them whole to Anthropic's Claude once you confirm.

Who else sees your flat

• A partner's phone you add. It joins with a link that works once, for 15 minutes, and the four digits shown on it. It sees and changes everything on the flat's record. A flat has two phones at most. Either phone can leave or remove the other, though a newly added phone must wait a day before removing anyone else.
• A look-and-vote link you send. Anyone with it sees the flat's name and layout, the design options with reno's estimate for each, and the pieces placed in the 3D. The link also carries the answers that shape the options, such as whether anyone at home is 65 or older, though the page doesn't show them. It never carries the plan's picture, your firms, quotes, budget or orders, or the links and prices of your pieces. Turn the link off and it stops working at once.
• Pictures and files you send. They go only where you send them. The picture of a checked quote pixelates whatever names the firm or you. The comparison picture shows each firm's all-in price, with its name if you choose. The spec pack carries the first names on its cover.
• Your invitation. During the private preview your invitation carries the name reno gave it, and reno notes that name with the steps you reach. See Usage counts.

Cookies and your phone's storage

reno sets two cookies. Scripts can't read them, your browser sends them only over HTTPS, and reno's server keeps only a scrambled form of each value, never the value itself.

• __Host-reno_owner is a random key that makes the flats your browser made yours, without an account. Each visit renews it for a year.
• __Host-reno_session is your signed-in session, set only when you sign in. It ends when you sign out, after 90 days unused, or a year after you signed in.

While reno is in private preview, the invitation check in front of it sets two cookies of its own. reno_invite remembers your invitation for 90 days, and reno_pass remembers a link someone sent you for 30 days.

reno uses no advertising, analytics or tracking cookies, and this website sets none. Google's sign-in window is Google's own page, with Google's cookies and privacy policy.

reno also keeps your work in your browser's storage on your phone. It stays there unless one of the steps above sends a copy. Clearing the site's data removes it, and an iPhone clears it after 7 days away, which is why reno offers to keep a copy.

Usage counts

reno counts which steps people reach, to learn where it helps and where people get stuck. Each count holds the step's name, such as "opened the spec pack" or "signed in", the time, and a short code made from your browser's random key. During the private preview it also holds the name on your invitation. Counts never hold your plans, quotes, prices, messages, email address or anything you typed. They stay on reno's server, aren't shared, and are deleted after 90 days.

How long reno keeps things

• Your account stays until you delete it.
• Flats and their records stay until you delete them, or your account.
• When a value in your record is replaced on reno's server, the old one is kept for 90 days, so a mistake can be undone, then deleted.
• The name and time of the phone that last changed something, and notes of removed phones, go after 90 days.
• Usage counts go after 90 days.
• Plan pictures stay with your flats. Deleting a flat leaves its plan's picture on reno's server. Deleting your account removes your plan pictures, except one that a flat you share still shows. You can also ask reno to remove one.
• What reno read from a plan stays, without the picture or anything linking it to you.
• A pass's record stays with its flat. Stripe keeps its own records of payments, as payment companies must.
• reno's server log notes what happened, such as that a plan was read and how long it took. It never holds your name, email address or what you sent.

Deleting, and your rights

• A flat. In the flat's menu, tap Delete this flat. reno's server then deletes the flat, its record, the record's earlier versions and its links. On a flat you share, the button is Remove this phone from the record. You leave, and your partner keeps the flat. The plan's picture stays, as above. Without an account, you can also tap Delete the copy to delete reno's copy of a flat's record and keep the record on your phone only, while one phone is on it.
• Your account. On reno's home, tap Account, then Delete my account. Google confirms it's you. reno then deletes your account, every flat only you are on with its record and plan pictures, your sessions, and your sign-in record at Firebase. On a flat you share, you leave and your partner keeps it. If Firebase can't be reached, reno removes that record by hand. To keep a copy, tap Export everything first. It saves one file with your account and every flat.
• Seeing or correcting what reno keeps. Singapore's Personal Data Protection Act lets you ask what personal data reno has about you and how it has been used, and ask reno to correct it. You can also withdraw your consent by deleting what you made, or by asking reno to delete it. Email reno. Without an account reno doesn't know who you are, so say which flat you mean and roughly when you made it.

Security

Your browser talks to reno over HTTPS. reno's server can't be reached straight from the internet. Requests reach it through Cloudflare and, during the preview, the invitation check. reno's cookies are out of reach of scripts and travel only over HTTPS. Partner links are long random codes that work once, and reno stores only a scrambled form of them. reno refuses requests made from other websites and limits how often sign-ins, links, codes and uploads can be tried. Earlier versions of your record are kept for 90 days, so a lost change can be put back.

No system is perfectly safe, and whoever runs reno's server could read what it keeps. Keep your invitation link to yourself, and email reno if you think something is wrong.

Children

reno is for adults renovating their home, or helping their parents with theirs. It isn't meant for anyone under 18. If a child has given reno their details, email reno and they'll be deleted.

Changes to this policy

When reno changes what it does with your information, it updates this page and the date at the top. Before reno uses your information for anything new, the app will tell you and ask first.