This Privacy Policy takes effect on 29 October 2026. Until that date, the previous version applies.
This Privacy Policy explains what personal data is collected when you use Interrio mobile application (the “App”), the website located at: www.interr.io (the “Website”), the related services and products (together with the App and Website, the “Service”), how such personal data will be processed.
BY USING THE SERVICE, YOU PROMISE US THAT (I) YOU HAVE READ, UNDERSTAND AND AGREE TO THIS PRIVACY POLICY, AND (II) YOU ARE OVER 18 YEARS OF AGE. If you do not agree, or are unable to make this promise, you must not use the Service. In such case, you must (a) contact us and request deletion of your data; (b) delete the App from your device or leave the Website and not access or use it; and (c) cancel any active subscriptions or trials.
Any translation from the English version is provided for your convenience only. In the event of any difference in meaning or interpretation between the English language version of this Privacy Policy available at https://www.interr.io/privacy-policy, and any translation, the English language version will prevail. The original English text shall be the sole legally binding version.
“GDPR” means the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
“EEA” includes all current member states to the European Union, the European Free Trade Association and the Central European Free Trade Agreement. For the purpose of this policy EEA shall include the United Kingdom of Great Britain and Northern Ireland.
Terms not defined in this policy shall have the meanings set out in the GDPR, unless stated otherwise.
We may collect your personal data from you directly, fully or partially automatically, or from third parties, through our website or mobile apps, forms, call center, e-mail, phone, mail/courier, social media, app stores, in-person or online interactions, push notifications, integrations with third-party services, in-app analytics, and any other channels we may use in the future.
For more details on how we collect data, the nature and purpose of its processing, and the legal basis for processing, see below.
| Type of personal data | Nature and Purpose of processing | Legal basis for processing |
|---|---|---|
| Data you give us | ||
| Name and email address | While registering on the Service, we will ask you to provide your email and name. We use this data to provide our Service to you and to provide you with customer support, i.e., to respond to your requests for technical support, Service information or to any other communication you initiate. For this purpose, we may send you, for example, notifications or emails about the performance of our Service, security, payment transactions, notices regarding our Terms and Conditions of Use or this Privacy Policy. We may also communicate with you regarding your use of our Service, for example, by push notifications or by emails. These may include reminders or other information about the Service. As a result, you will, for example, receive a notification that a new feature has been deployed in the Service. To opt out of receiving push notifications, you need to change the settings on your device. To opt-out of receiving emails, you should click the unsubscribe link in the footer of each email. We also may process your email for our marketing campaigns. As a result, you will receive information about our products, such as special offers or new features and products available on the Service. If you do not want to receive marketing emails from us, you can unsubscribe following instructions in the footer of the marketing emails. | To perform our contract with you. Without your name and email address we cannot provide our Service to you or provide you with customer support. Our legitimate interest to communicate with you regarding your use of our Service and to encourage you to use our Service more often. Our legitimate interest to promote our Service, including new products and special offers, in a measured and appropriate way – in case of marketing emails. |
| Onboarding data | When you register for the Service and/or go through the onboarding process, you may provide us with information such as your age and username. We process this data to adjust the content of the Service and provide content tailored to your personal preferences. | To perform our contract with you. Without this data we cannot customize your experience. |
| Photos and generated images | When you use the Service, you may upload photos (for example, photos of your rooms) and provide text prompts or other instructions. Your photos are processed on our servers and by third-party artificial intelligence providers acting on our behalf (currently OpenAI and Google) solely to generate the images you request. These providers process your photos under contractual data protection obligations and, under our current agreements, do not use them to train their models; they may, however, retain such data for a limited period to detect and prevent abuse of their services. We store your uploaded photos and generated images so that you can access them in your account. Please avoid uploading photos that show other people or contain documents with personal information. | To perform our contract with you. Without processing your photos we cannot generate the images you request. |
| Data we collect automatically | ||
| Data about how you found us | We collect data about your referring app or URL (that is, the app or place on the Web where you were when you clicked on our ad). We use this data to measure the effectiveness of our ads. | Our legitimate interest to promote our Service in a reasonably targeted way. |
| Device and Location data | We collect data from your device. Examples of such data include: language settings, IP address, time zone, type and model of a device, device settings, operating system, Internet service provider, mobile carrier, hardware ID, and Facebook ID. We also record the ads in our Service with which you interact (and the Internet links to which those ads lead). We use this data to host and operate the Service, to enable you to use the Service in a seamless manner and to prevent or address Service errors or technical issues (for example, through performance monitoring tools), as well as to analyse how our users use the Service and interact with our ads. | To perform our contract with you. We cannot provide you access to the Service without collecting some device data. Our legitimate interest in improving our Service so that we understand users’ preferences and are able to provide you with a better experience, and our legitimate interest to promote our Service in a reasonably targeted way. |
| Usage data | We record how you interact with our Service. For example, we log what pages you have viewed, the features and content you interact with, how often you use the Service, how long you are on the Service, and your purchases. This helps us to better understand our business, analyze our operations, maintain, improve, innovate, plan, design, and develop the Service and our new products. We also use such data for statistical analysis purposes, to test and improve our offers (for example, by showing different versions of the Service to different users), and to better understand what categories of users use our Service. For these purposes we may use behavior analytics tools that provide, in particular, heatmaps, session recordings, and surveys. | Our legitimate interest in improving our Service so that we understand users’ preferences and are able to provide you with a better experience (for example, to make the use of the Service easier and more enjoyable, or to introduce and test new features). |
| Advertising IDs | We collect your Apple Identifier for Advertising ("IDFA"), Identifier for Vendor ("IDFV") or Google Advertising ID ("AAID") (depending on the operating system of your device) when you access our App or Website from a mobile device. You can typically reset these numbers through the settings of your device’s operating system (but we do not control this). We and our partners use this data to tailor ads and possibly show them to you at the relevant time. For example, we may create lists of users who have completed certain actions on the Service, so that you might see ads of our products in your social media feed. | Our legitimate interest to promote our Service in a reasonably targeted way. |
| Transaction data | When you make payments through the Service, you need to provide financial account data, such as your credit card number, to our third-party service providers. We do not collect or store full credit card number data, though we may receive credit card-related data, data about the transaction, including: date, time and amount of the transaction, the type of payment method used. As a result of this processing, you will be able to make a payment and we will be notified that the payment has been made. | To perform our contract with you. Without transaction data we cannot process your payments for the Service. |
| Cookies | A cookie is a small text file that is stored on a user’s computer for record-keeping purposes. Cookies can be either session cookies or persistent cookies. A session cookie expires when you close your browser and is used to make it easier for you to navigate our Service. A persistent cookie remains on your hard drive for an extended period of time. We also use tracking pixels that set cookies to assist with delivering online advertising. Cookies are used, in particular, to automatically recognize you the next time you visit our website. As a result, the information, which you have earlier entered in certain fields on the website may automatically appear the next time when you use our Service. Cookie data will be stored on your device and most of the times only for a limited time period. Cookies are also placed by the analytics tools we use to analyse how visitors use our Service and to measure the effectiveness of our ads. Please see detailed information regarding cookies in our Cookie Policy. | To perform our contract with you – in case of cookies that are necessary to recognize you and enable you to navigate the Service. |
| Data provided by third parties | ||
| Facebook and/or Google account personal data | When you decide to log in using Google, we receive personal data from your Google Account: name, email address, profile picture associated with your Google Account. You can revoke access provided to us on Apps Permissions page. To know more about how Google processes your data, visit its Privacy Policy. When you decide to log in using Facebook, we get personal data from your Facebook account. This includes your profile image, name, and Facebook ID. Unless you opt out on the Facebook Login screen, we will also collect other data, such as email address. For more information, please refer to the Facebook Permissions Reference (describes the categories of information, which Facebook may share with third parties and the set of requirements) and to the Facebook Data policy. In addition, Facebook lets you control the choices you made when connecting your Facebook profile to the Website on their Apps and Websites page. | To perform our contract with you. If you choose to log in using Facebook and/or Google account, we cannot provide our Service to you without processing your Facebook and/or Google account personal data. |
We share information with third parties that help us operate, provide, improve, integrate, customize, support, and market our Service. We may share some sets of personal data, in particular, for purposes indicated in Section 1 of this Privacy Policy. The types of third parties we share information with include, in particular:
We share personal data with third parties that we hire to provide services or perform business functions on our behalf, based on our instructions. We may share your personal information with the following types of service providers:
| Categories of Third Party recipient | Nature of Third Party Recipient | Categories of personal information shared |
|---|---|---|
| Cloud storage service providers | Providers of cloud infrastructure and storage solutions used to securely host, store, and manage data (e.g. Amazon Web Services). | All categories of personal data mentioned in Section 1 |
| Gateway service providers and payment processors | Providers enabling payment processing, transaction authorization, and secure handling of payment-related data (e.g. Solidgate, PayPal and Stripe). | Identifiers Onboarding and product usage data Commercial information Device and geolocation data |
| Data analytics providers | Providers of analytics tools and services used to analyze usage patterns, measure performance, and improve services (e.g. Amplitude, Microsoft Clarity). | All categories of personal data mentioned in Section 1 |
| Communication service providers | Providers enabling delivery of communications such as emails, notifications, messages, and customer support interactions (e.g. Zendesk, Firebase). | Identifiers Onboarding and product data Online activity Commercial information Device and Geolocation data Conversation with us Purchases data |
| Marketing partners | Third-party partners assisting with marketing activities, including campaign distribution, targeting, and performance measurement (e.g. Google Ads, Facebook Ads). | Identifiers Advertising IDs Onboarding and product data Online activity Commercial information Purchases data |
| AI service providers | Providers of artificial intelligence technologies used to generate AI content within the Service based on the content you provide (OpenAI, Google). | Identifiers Onboarding and product data Photos and generated images |
We use Meta pixel on the Service. Meta pixel is a code placed on the Service collecting data that helps us track conversions from Facebook ads, build targeted audience and remarket to people who have taken some action on the Service (for example, made a purchase).
We may use and disclose personal data to enforce our Terms and Conditions of Use, to protect our rights, privacy, safety, or property, and/or that of our affiliates, you or others, and to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, or in other cases provided for by law.
As we develop our business, we may buy or sell assets or business offerings. Customers’ information is generally one of the transferred business assets in these types of transactions. We may also share such information with any affiliated entity (e.g. parent company or subsidiary) and may transfer such information in the course of a corporate transaction, such as the sale of our business, a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.
We may share your personal information with our partner organizations that are part of our corporate group – these are companies that are owned by, own, or are jointly-owned with us. These partner organizations will use the information in ways that align with this Privacy Policy, ensuring that your privacy is respected and protected across all our affiliated services.
To be in control of your personal data, you have the following rights:
To exercise your rights, please provide a request that includes sufficient detail to verify your identity and clearly describe the right you wish to exercise at support@interr.io. We will only use the personal data provided in a request to verify your identity and respond to it.
Responses will be provided within the time limits required by applicable law. We may refuse requests that are manifestly unfounded, repetitive, or excessive, in which case we will explain our decision.
If you are based in the EEA, you have the following rights:
To exercise any of your privacy rights, please send a request at support@interr.io. Where available, you may also exercise certain rights through tools or settings provided directly within the Service.
Depending on the state in which you reside (including but not limited to California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, and other states to the extent they enact privacy laws), you may be entitled to specific privacy rights under state law. These rights apply only to the extent that the relevant state privacy law is applicable to you and to our processing of your personal data. The scope of these rights can vary, and they may be subject to legal conditions or exceptions. If you are uncertain whether these rights apply to you or would like further clarification, you may reach out to us at support@interr.io.
For California residents, this also serves as our California Notice at Collection.
The definition of “Personal Information” may vary by state law. Generally, it refers to “information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household”. Terms mentioned in this Section shall have the meanings set out in the respective state privacy laws.
The table below outlines the categories of Personal Information we collect and the third parties with whom such data may be shared. For more details, refer to Section 1. Please note that certain categories of such personal information may qualify as sensitive personal information as defined under applicable U.S. privacy laws.
| Categories of Third Party recipient | Categories of personal information shared |
|---|---|
| Cloud storage service providers | All categories of personal data mentioned in Section 1 |
| Gateway service providers and payment processors | Identifiers Onboarding and product usage data Commercial information Device and geolocation data |
| Data analytics providers | All categories of personal data mentioned in Section 1 |
| Communication service providers | Identifiers Onboarding and product data Online activity Commercial information Device and Geolocation data Conversation with us Purchases data |
| Marketing partners | Identifiers Advertising IDs Onboarding and product data Online activity Commercial information Purchases data |
| AI service providers | Identifiers Onboarding and product data Photos and generated images |
We process Personal Information for the following purposes:
For additional details, refer to our Section 1.
In addition to the table above, our Privacy Policy provides further details regarding the categories of third parties with whom we share Personal Information (see Section 2).
Certain state privacy laws, such as those in California require us to disclose the categories of Personal Information that we have shared with third parties for business purposes over the past 12 months. During this period, we have disclosed all categories of Personal Information outlined in the "Categories of Personal Information We Collect" section for business purposes. For example, we may share IP addresses and device identifiers with service providers that assist us with crash monitoring and reporting.
Some U.S. states grant residents the right to opt out of sharing their Personal Information with third parties in exchange for valuable consideration (which may be classified as a "sale" or "share" under state privacy laws, even if no monetary transaction occurs). If you reside in one of these states and would like to limit the disclosure of your Personal Information to third parties for advertising or marketing purposes, please refer to the “Your Rights” section below.
Privacy laws in some U.S. states broadly define the term "sale" and “share” to include sharing of information via cookies, pixels, and similar tracking technologies for certain targeted advertising activities. We do not sell Personal Information for monetary compensation. However, when you visit our websites, we and our advertising partners may collect device data and behavioral insights through tracking technologies, which could be interpreted as a “sale” or “sharing” under state laws, even if no money is exchanged. We do not knowingly engage in sales, sharing, or targeted advertising using the personal information of individuals under 18.
Certain U.S. state privacy laws grant residents specific rights regarding their personal information. If you reside in a state with such laws, your rights may include:
Right to Data Portability/Access – you may have the right to request access to the specific pieces of personal information we have collected about you in the 12 months preceding your request. Where applicable, we may provide this data in an electronic, portable, and readily usable format.
Right to Know – you may be entitled to receive information regarding the categories of Personal Information we collected, the sources from which we collected Personal Information, the purposes for which we collected and shared Personal Information, the categories of Personal Information that we sold and the categories of third parties to whom the Personal Information was sold, and the categories of Personal Information that we disclosed for a business purpose in the 12 months preceding your request.
Right to Deletion – you may have the right to request that we delete the personal information we have collected from you. We will use commercially reasonable efforts to fulfill your request, subject to applicable laws. However, we may be required to retain certain information for legitimate business purposes or as required by law.
Right to Correction/Rectification – you may have the right to request correction of inaccurate personal data.
Right to Limit the Use of Sensitive Personal Information – certain states provide the right to restrict how businesses use sensitive personal information.
Right to Withdraw Consent – where applicable, you have the right to withdraw your consent for data collection and sharing.
Opt-out of Data Sharing – you may have the right to opt out of certain uses of your personal information, including:
To opt out, you can submit a request via our support team at support@interr.io.
You have the right to exercise your privacy rights without fear of discrimination or retaliation. However, we may provide different levels of service or pricing based on the value of your personal information, as permitted by applicable law.
To exercise any of the available privacy rights, please send a request to support@interr.io or use the privacy features available in our products.
Verification. To ensure that we properly process your requests regarding your rights, we are required to verify your identity. The verification process may vary depending on the type of request and the Service you use. It may include confirming details such as your name, age, email address, date of subscription purchase, date of last activity, date of account creation, or other relevant Service usage data that reasonably identify you as the account owner. We may also request additional proof of identity if necessary, but we strive to minimize the information required. For certain requests, we may send a verification code or link to authenticate your identity.
Authorized Agent. You may designate an authorized agent to exercise your rights on your behalf. If you have provided the authorized agent with a valid power of attorney, we will work directly with them to process your request. If a power of attorney or similar authorization has not been provided, we will contact you directly to confirm the agent’s authority and collect the necessary verification information. The authorized agent must verify both their own identity and that of the consumer they are representing.
Responses will be provided within the time limits required by applicable law. We may refuse requests that are manifestly unfounded, repetitive, or excessive, in which case we will explain our decision.
In certain states, if your request is denied, you have the right to appeal. An appeal must provide enough information to identify the original request and state the grounds for the appeal. We will review and respond within the timeframe set out in applicable laws. If the appeal is again denied, you may escalate the matter to your state’s Attorney General.
We retain the categories of personal information listed above as reasonably necessary to fulfill the purposes outlined in this notice, unless a longer retention period is required or permitted by law. In many situations, we must retain all, or a portion, of your personal information to comply with legal obligations, resolve disputes, enforce our agreements, protect against fraudulent, deceptive, or illegal activity, or for another one of our business purposes.
In accordance with Article 18 of the General Personal Data Protection Law (“LGPD”) the following rights are stipulated for individuals in Brazil:
You can submit a request to exercise these rights at support@interr.io. Please note that in certain circumstances, full compliance with a request may not be possible (for example, if the request is manifestly unfounded, impractical, affects the rights of others, or is not required by law). In such cases, a response will still be provided to inform the requester of the decision.
We do not knowingly process personal data from persons under 18 years of age. If you learn that anyone younger than 18 has provided us with personal data, please contact us at support@interr.io.
We may transfer personal data to countries other than the country in which the data was originally collected in order to provide the Service set forth in the Terms and Conditions of Use and for purposes indicated in this Privacy Policy. If these countries do not have the same data protection laws as the country in which you initially provided the information, we deploy special safeguards.
In particular, if we transfer personal data originating from the EEA to countries with not adequate level of data protection, we use one of the following legal bases: (i) Standard Contractual Clauses approved by the European Commission (details available here), or (ii) the European Commission adequacy decisions about certain countries (details available here).
We will store your personal data for as long as it is reasonably necessary for achieving the purposes set forth in this Privacy Policy (including providing the Service to you). We will also retain and use your personal data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Uploaded photos and generated images are stored for as long as your account is active or until you delete them, and are deleted upon deletion of your account, unless we are required by law to retain them for a longer period.
We may modify this Privacy Policy from time to time. If we decide to make material changes to this Privacy Policy, you will be notified by available means such as email and will have an opportunity to review the revised Privacy Policy. By continuing to access or use the Service after those changes become effective, you agree to be bound by the revised Privacy Policy.
ONLYGPT Limited, a company registered under the laws of the Republic of Cyprus, having its registered office at 1 Ayias Theklas, Sun City, House 3004, 5391 Ayias Theklas, Famagusta, Cyprus, will be the controller of your personal data.
You may contact us at any time for details regarding this Privacy Policy and its previous versions. For any questions concerning your account or your personal data please contact us at support@interr.io.
Effective as of: 29 October 2026