How EDGE collects, uses, and protects personal information.
Last updated: 23 July 2026
EDGE collects what it needs to run the app — your account details, the photos you upload, the renders made from them, and basic usage data. We also use limited advertising measurement to see whether our ads are working — you can turn this off, and we explain it fully below. Before you upload photos, the app asks for your permission to send them to our AI provider (Google) to make renders. Some providers are overseas (mainly the United States). We don’t sell your data, and we don’t use facial recognition. You can ask to see, correct, or delete your information, and you can delete your account from inside the app.
This policy explains how Luke Richards trading as Edgestone App (ABN 38 771 204 317) ("EDGE", "we", "us") handles personal information through the EDGE app and edgestone.app. Where the Privacy Act applies to us, we handle personal information in line with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). For New Zealand users, we also follow the NZ Privacy Act 2020 where it applies.
We only collect what we need to run the Service.
We collect information directly from you (when you sign up, upload photos, or contact us), automatically as you use the app (usage and device data), and from third parties — Apple (your subscription status) and our sign-in provider (your login). Some photos you upload are of a customer’s space — the customer is not an EDGE user, so we collect their information indirectly, through you. We take reasonable steps to make that customer aware of how their information is handled — including an in-app customer-notice prompt you give at capture — and we also remain responsible for our own privacy obligations; this is not something we leave entirely to you (see section 11).
We use your information to:
We use your information only for the purposes described in this policy. If we ever want to use it for something materially different, we’ll ask for your consent or rely on another basis the law allows.
To make renders, the photos you upload are sent to our third-party AI provider — currently Google (the Gemini API) — which processes them to detect surfaces and generate the image. This is how the render feature works.
We ask first. Before you upload photos for the first time, the app asks for your explicit permission to send them to our AI provider. We name the provider and explain why. If you don’t agree, you can’t use the render feature. You can withdraw your consent at any time by emailing us.
No facial recognition. We don’t use facial recognition or biometric analysis on your photos. If a photo happens to include a person, we don’t try to identify them — the photo is only used to create the render.
AI training. We do not use your uploaded photos to train EDGE’s own AI models. EDGE uses Google’s paid Gemini API, and under Google’s terms for the paid tier Google does not use your photos (or the renders) to train or improve its AI models. Google may log prompts and responses for a limited period to detect and prevent misuse and for required legal or security purposes; this is not the same as using your photos to train its models. We keep the paid tier active for exactly this reason. We review a provider’s terms before using it for customer photos, and we’ll update this policy if we add or change AI providers.
Don’t upload sensitive content. Please don’t upload photos showing people, children, mail, addresses, private documents, security systems, medical information, or valuables unless it’s necessary and you have clear permission.
We share information with the service providers who help us run EDGE, only as needed:
We may also disclose information where required by law, to protect our rights or safety, or as part of a business sale. We do not sell your personal information.
Analytics and usage data. We use PostHog, a product-analytics service, to understand how the app is used so we can improve it and fix problems. We run PostHog in a deliberately limited way: automatic tracking, heatmaps, and session recording are switched off. We collect only the type of screen you visit (for example a gallery or proposals screen — not the specific link or any name in it), an account identifier so we can see how the app performs for real users, general device and technical information, and a count of when a shareable link is created. We do not send your typed content, your customers’ names, your uploaded photos, customer images, or finished renders to PostHog. PostHog acts as our service provider and stores this information on servers in the European Union. We keep analytics data only as long as we need it to improve the app. If you would prefer not to be included in analytics, contact us at support@edgestone.app.
Advertising measurement. We use Meta’s (Facebook’s) advertising tools to measure how well our ads work. When you use the app, Meta may receive that EDGE was installed and that a subscription was started (including which plan and its price), along with basic device and app information. If you allow tracking (see the “Advertising and your tracking choice” section below), this may include your device’s advertising identifier. We never send Meta your photos, the images of your customers’ spaces, your finished renders, your customers’ names or contact details, anything you type into the app, or your gallery links. Meta handles the information it receives under its own privacy policy at facebook.com/privacy.
To run EDGE, we use providers located overseas, mainly in the United States, for core features like login, storage, app hosting, subscriptions, and AI renders. These include Google, Clerk, Supabase, Vercel, and Apple, and — for the advertising measurement described in section 6 — Meta Platforms (United States). The countries involved may also include other countries where these providers or their subcontractors operate.
Before we send personal information overseas, we take reasonable steps to protect it. These steps include choosing reputable providers that publish privacy and security commitments, relying on their data-processing terms, limiting what we send to each provider, and using access controls and security settings.
Overseas privacy laws may differ from Australian and New Zealand laws, and overseas providers may be legally required to give your information to their local authorities.
Where we ask for your consent to overseas processing, we use that consent to confirm you understand how EDGE works — we don’t rely on consent alone to meet our privacy obligations. You can contact us at any time with questions, or to withdraw consent, though we may then be unable to provide the Service.
If you’re in New Zealand: your information (including photos) is sent to and stored in the United States and other countries, which may not have privacy protections comparable to New Zealand’s. By using EDGE, you authorise us to disclose your personal information to our overseas providers as described in this policy. You can withdraw this authorisation at any time by emailing support@edgestone.app. If you withdraw, we may no longer be able to provide the Service.
If you upload a photo involving a New Zealand customer, you must tell that customer about the collection and the overseas processing described in this policy, and get any permission required, before uploading. A customer who is not an EDGE user cannot "authorise" the overseas transfer by using EDGE; for those photos we rely on our processor arrangements with our providers and on the notice you (the rep) give at capture.
We store data with our hosting and storage providers and take reasonable steps — including encryption, access controls, and other standard security and organisational measures — to protect it from misuse, loss, and unauthorised access. No system is completely secure, so we can’t guarantee absolute security. If we suspect a data breach that is likely to cause serious harm, we’ll assess it promptly and, if required, notify the people affected and the relevant regulator (the OAIC in Australia, and the Privacy Commissioner in New Zealand) as soon as practicable.
Backups may take a little longer to fully clear, but we won’t actively use deleted data except for backup, security, legal, or recovery purposes. You can ask us to delete your data sooner by emailing support@edgestone.app.
EDGE is used by businesses who upload photos of their customers’ spaces. Because the customer is not an EDGE user, their information is collected indirectly through the rep. Both the rep and EDGE have a role here:
Please don’t upload photos showing people, children, mail, addresses, private documents, security systems, medical information, or valuables unless it’s necessary and you have clear permission.
If you think a photo of you, your home, your business, or your property has been uploaded without permission, email us at support@edgestone.app (or use the "report a concern" link on the shared viewer). We will:
If the user shows us they had permission, we may keep the photo unless the law requires us to delete it. We’ll act reasonably, but we can’t always guarantee removal — for example, if a gallery link has already been shared. We may limit access while we review the issue.
You can ask to access or correct the personal information we hold about you. To do so, or to make a privacy complaint, email support@edgestone.app. We’ll respond within a reasonable time. If you’re not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au). New Zealand users can contact the Office of the Privacy Commissioner (privacy.org.nz).
On our website we use basic cookies to keep you signed in (through our sign-in provider). We don’t use cookies for advertising or to track you across other websites. Our iOS app uses limited advertising measurement, which we explain in “Advertising and your tracking choice” below. We may use basic, privacy-respecting analytics to understand how people use EDGE and to improve it; if we introduce a third-party analytics provider, we’ll name it in section 6 and here. You can control cookies in your browser settings.
When you first open the EDGE app, Apple shows a prompt asking whether you’ll allow EDGE to track your activity across other companies’ apps and websites. This choice is yours, and the app works exactly the same whether you allow it or not.
If you allow tracking: we can use Meta’s advertising tools to measure our ads more accurately, including using your device’s advertising identifier.
If you don’t allow tracking: we do not use your advertising identifier and we do not link your activity across other apps or websites. Apple still provides us with its own private, anonymous measurement (Apple’s SKAdNetwork), which tells us in aggregate that our ads are working — but it does not identify you.
You can change your choice at any time in your iPhone’s Settings → Privacy & Security → Tracking.
EDGE is a business tool and is not intended for anyone under 18. We don’t knowingly collect information from children.
We may update this policy. We’ll post the updated version with a new "last updated" date, and take reasonable steps to notify you of material changes.
Privacy questions or requests: support@edgestone.app.