How Edgestone App handles your personal information when you use EDGE.
Last updated: 11 September 2026
This Privacy Notice for Luke Richards (doing business as Edgestone App) (“we”, “us”, or “our”) describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you have any questions, please contact us at support@edgestone.app.
This summary provides the key points from our Privacy Notice. You can find more detail on any topic in the full sections below.
What information do we process? We process the information you provide when you create an account and use the app — such as your name and email, your company and team details, and the photos you upload to generate renders. We also process limited technical information to keep the app working.
Do we track you? Only in some countries. We enable analytics and advertising measurement only for users in the United States, Australia, and New Zealand. For everyone else — including the United Kingdom and the European Union — we use no analytics, no advertising measurement, and no tracking cookies at all.
Do we process sensitive information? We do not intentionally request sensitive information. Photos you upload may incidentally contain it.
Do we collect information from third parties? We receive your subscription details from Apple, and — if you sign in with Google or Apple — basic profile details (name and email) from that provider. We do not buy information about you from data brokers or public databases.
How do we share your information? With the named service providers who run the app for us, with people you choose to share galleries or proposals with, and in the limited legal situations described in this notice. We do not sell your personal information for money.
How long do we keep it? For as long as you have an account. Deleting your account starts a 30-day recovery window, after which permanent deletion begins. Limited fraud-prevention records are kept longer.
What are your rights? These depend on where you live — see “Your privacy rights” below. The easiest way to exercise any of them is to email support@edgestone.app.
Personal information you provide to us. We collect the personal information that you voluntarily provide when you register for the Services, use the app’s features, or contact us. This may include:
Sensitive information. We do not intentionally request sensitive information. Photos you upload may incidentally contain it — for example, people who are present in the space, or location metadata stored inside the image file. Please avoid uploading photos containing unnecessary sensitive content, and remove location metadata beforehand if you do not wish to share it.
Payment data. Subscriptions are purchased through the Apple App Store and processed entirely by Apple. We never receive your card, bank, or other payment credentials. We do receive subscription and transaction details from Apple — such as your subscription status, the product purchased, purchase and expiry dates, and transaction identifiers — so we can provide the features you have paid for. Apple’s privacy notice is at https://www.apple.com/legal/privacy/.
Sign-in data. You can register and sign in using your existing Google or Apple account. If you do, we receive certain profile details from that provider, as described in “How do we handle your social logins?” below.
Information collected automatically. When you use the app, we automatically process a limited amount of technical information needed to run and secure the Services — such as your device type, operating system, app version, and the IP address used to connect (from which an approximate country is derived). This information is used to operate the app, keep it secure, and — where analytics is enabled (see Section 6) — understand how the app is used so we can improve it.
What our analytics record — and what they do not. Where analytics is enabled, we record that an event happened — for example, that a render was generated or a photo was captured — together with basic technical context such as browser or device type. Our analytics do not capture the photos you upload or the render images themselves. Where analytics is enabled, we also collect crash and error diagnostics (with sensitive details such as emails and URLs scrubbed from the error text) to keep the app stable. We may also keep basic operational error logs needed to run and secure the service.
We do not collect your precise device location through a location API, your mobile carrier or internet service provider, your device name, your browsing or search history on other sites, or referral URLs.
Google API. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Information from other sources. We receive your subscription and payment status from Apple so we can manage your account and provide paid features. If you sign in with Google or Apple, we receive basic profile details (such as your name and email address) from that provider. We do not obtain information about you from public databases, data brokers, or joint marketing partners.
We process your personal information to:
We only process your information when we have a valid legal reason to do so. Depending on where you are located, we rely on one or more of the following: your consent (which you can withdraw at any time); the need to perform our contract with you (to provide the Services you have requested); our legitimate interests (such as improving the Services and preventing fraud, where these do not override your rights); and compliance with legal obligations.
Where you are in the United Kingdom or European Economic Area, these bases correspond to those set out in the UK GDPR and EU GDPR. Where you are in Canada, we rely on your express or implied consent, and on the limited exceptions permitted by applicable law.
Service providers. We share your information with third-party service providers who perform services for us and need access to do that work. The providers we use are:
Our core service providers process your information under agreements with us and on our instructions. Some of the parties above — including Apple, your sign-in provider (Google or Apple), and Meta — also act as independent controllers under their own privacy notices for their own purposes; we recommend reviewing theirs.
People you share with. When you share a gallery or proposal through a private link, anyone who has that link can view the content you have shared (see Section 5).
Legal and business transfers. We may share information where required by law, and in connection with a business transfer (such as a merger, financing, or acquisition of our business).
Customer photos. Representatives photograph a customer’s space (for example a kitchen or bathroom) and upload the photo to generate a realistic stone preview render. The generated render is stored in the representative’s account and used to provide the Service. Uploaded photos are used to generate the render and are not normally retained as account content (see Section 7). Photos may incidentally include people or personal belongings; representatives are responsible for having the customer’s permission to photograph their space.
Deleting galleries and renders. Representatives can delete entire galleries from within their account, and can remove items from proposals where the app provides those controls. Deleting your account starts deletion of your account and its content (see “How long do we keep your information?”). If you are a customer whose space was photographed and you would like content removed, contact us at support@edgestone.app and we will action it as soon as reasonably practicable.
Shared links. Galleries and proposals can be shared with customers through private links. Anyone with the link can view the content, so it should only be shared with the intended recipient. Shared links normally expire 30 days after the most recent time they were shared, and re-sharing renews the same link. Designated sample or legacy links may not expire. Shared pages are marked so that search engines are instructed not to index them.
Team accounts. If a team member’s account is deleted, content they created — including renders that appear in shared galleries or proposals — is deleted with it. This may affect galleries or proposals that other team members have shared.
We enable analytics and advertising measurement only for users in the United States, Australia, and New Zealand. For users in every other country — including the United Kingdom and the European Union — we use no analytics, no advertising measurement, and no tracking cookies at all.
Where analytics is enabled, our provider is PostHog, which we use to understand how the app is used, maintain security, and fix problems. Our analytics do not set a persistent tracking cookie.
Where advertising measurement is enabled, we use Meta (Facebook) tools to measure the effectiveness of our own marketing campaigns. This is done in line with your device-level App Tracking Transparency choice, with Meta’s Limited Data Use setting applied and automatic event logging switched off; the only event we send is a subscription confirmation. We do not display third-party advertising inside the app, and we do not permit third parties to place tracking technologies in the app for their own advertising.
Necessary cookie. To apply the country rules described above, we set a single strictly-necessary cookie that stores only your approximate country (or is cleared). It is not used to track you.
To the extent our advertising measurement is considered a “sale” or “sharing” of personal information under US state laws, you can opt out — see “Your privacy rights” below.
As part of the Services, we offer image generation (stone preview renders) powered by artificial intelligence, provided through a third-party AI service provider, Google's Gemini API.
How your data is used. When you generate a render, your uploaded photo is transmitted to our AI provider (Google) to produce the render, and is not stored by us as an original file. The generated render is stored in your account for use in the app. Uploaded files may contain metadata, including location — remove it beforehand if you do not wish to share it. Your photos are not used to train our own models. (Where a diagnostic setting is deliberately enabled for troubleshooting, a copy of a source image may be kept in private storage and is removed when the account or workspace it belongs to is deleted; this setting is off in normal operation.)
Consent and how to withdraw it. By using the render feature you consent to your uploaded photos being processed by our AI service provider, including processing overseas (see Section 9). You can withdraw this consent at any time by deleting your account, which stops your access and any future render generation and begins the deletion process (see Section 10). If you wish to stop using the render feature without deleting your account, contact us at support@edgestone.app.
When you use Scan, we collect the photo you take or upload of a stone sample, offcut or slab. The complete image — including anything incidental in the background — is sent to Google's Gemini API, which generates a digital sample from it. This processing takes place overseas, including in the United States. Under our paid arrangement with Google, your images are not used to train Google's models; Google may retain content for a limited period for safety, security and legal reasons, and may review content its systems flag. We can't promise zero retention or zero human review on Google's side.
EDGE doesn't store your original photo. If you save a sample ("Add to my range"), it's kept as an item in your stone catalogue and stored like your other catalogue images. Those images are served from public web links: inside the app your catalogue is only listed to your workspace, but an individual image can be opened by anyone who has its link — for example when it appears in a gallery or proposal you share. Samples you don't save, and your original photo, aren't added to your catalogue and are cleared shortly afterwards. We keep some non-image records of each scan — such as your workspace and user identifiers, timestamps, and usage/cost accounting — which contain no photo.
You can delete a saved sample from your catalogue at any time; we remove it and schedule deletion of its image. As with the rest of your content, cleanup completes through our normal deletion process, and copies already shared or cached may remain until they expire. Deleting a sample doesn't automatically remove room visualisations already created from it. If a rights-holder raises a concern about a sample, contact support — we can remove the sample and disable the galleries and proposal items created from it.
If you register or log in using your Google or Apple account, we receive certain profile information from that provider — typically your name and email address, and anything else you have chosen to make available through that provider’s settings. We use this only for the purposes described in this notice. We do not control, and are not responsible for, other uses of your information by your sign-in provider; we recommend you review their privacy notice.
Your information may be stored and processed with providers in several locations:
Safeguards for international transfers. For personal information relating to users in the United Kingdom or European Economic Area, we engage our service providers under their applicable data processing terms, which are designed to incorporate appropriate safeguards for international transfers — such as the European Commission’s Standard Contractual Clauses and the UK Addendum. Because our analytics provider hosts EU data within the EU, no cross-border transfer of that analytics data occurs at collection. For users in Australia and New Zealand, we take reasonable steps consistent with Australian Privacy Principle 8 and New Zealand Information Privacy Principle 12 before disclosing information to overseas recipients.
We keep your personal information for as long as you have an account with us, unless a longer period is required or permitted by law.
Account deletion. When you request deletion, we deactivate your account immediately and begin a deletion process. Your account remains recoverable for 30 days (so an accidental deletion can be reversed — contact us within that window). Permanent deletion begins after the 30-day recovery period, and provider-side cleanup may complete shortly afterward through retryable deletion processes.
What we keep after deletion. We retain limited, identity-keyed records after deletion where necessary — for example, records used to prevent repeated free-trial claims, to maintain billing and entitlement integrity, to keep an audit trail of deletion requests, and to comply with legal requirements. These records are kept only as long as needed. Your photos and renders are not among the records retained.
We have implemented appropriate and reasonable technical and organisational security measures designed to protect your personal information. However, no method of transmission over the internet or electronic storage is 100% secure, so we cannot guarantee absolute security. You should only access the Services within a secure environment.
The Services are not intended for anyone under 18 (or the age of majority in your jurisdiction), and we do not knowingly allow anyone under that age to register. By using the Services you represent that you are at least 18. If we learn that an account belongs to someone under that age, we will deactivate it and take reasonable steps to delete the associated data.
Separately, photos of customer spaces may incidentally capture people who are present, which can include children. Representatives must only upload such photos where necessary to provide the Service and where they have the customer’s permission. If you believe we may have collected data from a child in breach of this section, contact us at support@edgestone.app.
Your rights depend on where you live. In all regions, the easiest way to exercise a right is to email support@edgestone.app. We will verify your identity before acting on a request, and we will respond in accordance with applicable law. You will not be discriminated against for exercising your rights.
United States. If you are in the United States, we enable analytics and advertising measurement for your account. Our advertising measurement respects your device’s App Tracking Transparency choice.
Depending on your state — including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia — you may have the right to: confirm whether we process your information; access, correct, or delete it; obtain a copy of it; and opt out of targeted advertising or any “sale” or “sharing” of your personal information. To exercise any of these rights, or to request that we stop using your information for advertising measurement, email support@edgestone.app. You may appeal a declined request by replying to our response; if your appeal is denied, you may contact your state attorney general.
Categories of information collected (past 12 months). Identifiers (such as name, email, IP address, account identifier); commercial information (subscription and transaction details from Apple); internet activity limited to your interactions with our app; audio/visual information limited to the photos and renders you create; approximate location as described below; and business/professional contact details. We do not collect biometric information, precise device location through a location API, browsing or search history on other sites, education records, or protected-classification characteristics.
Approximate location. We process an approximate country (derived from your IP address or App Store storefront) to apply regional rules and route features, and uploaded photos may contain location metadata. We do not collect precise device location through a location API.
“Sale”/“sharing.” Our advertising measurement (Section 6) may be considered “sharing” or a “sale” under some state laws. You can request to opt out by emailing us as described above. California residents may also make a “Shine the Light” request once per year.
Australia & New Zealand. If you are in Australia or New Zealand, we enable analytics and advertising measurement for your account. We handle your information under the Australian Privacy Act 1988 (and the Australian Privacy Principles) and the New Zealand Privacy Act 2020 (and the Information Privacy Principles).
You may request access to, or correction of, your personal information at any time by emailing support@edgestone.app. If you believe we have mishandled your information, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au) or the Office of the New Zealand Privacy Commissioner (privacy.org.nz).
United Kingdom & European Economic Area. If you are in the United Kingdom or the European Economic Area, we do not enable analytics, advertising measurement, or any tracking cookies for you — none of that applies to your use of EDGE. We do still store and process the account information needed to run the service (see Section 9 for where, and under what safeguards).
You have rights under the UK GDPR and EU GDPR, including the rights to access, rectification, erasure, restriction of processing, data portability, and to object to processing. Where we rely on your consent, you can withdraw it at any time. To exercise any of these rights, email support@edgestone.app. You also have the right to lodge a complaint with your local supervisory authority — in the UK, the Information Commissioner’s Office (ico.org.uk).
Canada & everywhere else. If you are in Canada, or in any other region where EDGE is available, we do not enable analytics, advertising measurement, or tracking cookies for you. We store and process the account information needed to run the service.
You may contact support@edgestone.app to access, correct, or delete your information. Canadian users may withdraw consent (express or implied) at any time, subject to legal or contractual restrictions. This notice governs any information we process; privacy frameworks not addressed above are not separately covered, as we do not operate tracking in those regions.
Most browsers and some operating systems offer a Do-Not-Track (“DNT”) or Global Privacy Control (“GPC”) setting. We do not currently respond to DNT or GPC signals. If we become subject to a legal requirement to honour such signals, we will update this notice and our practices accordingly.
We may update this notice from time to time, indicated by the “Last updated” date above. If we make material changes, we may notify you by posting a prominent notice or by contacting you directly, where permitted by law. We encourage you to review this notice periodically.
If you have questions or comments about this notice, email us at support@edgestone.app or write to: Luke Richards, 17 Wallaby Cl, Ewingsdale, New South Wales 2481, Australia.
You may have the right to request access to, correction of, or deletion of the personal information we hold about you, and to withdraw consent where we rely on it. To make a request, email support@edgestone.app. You can sign in with an email and password, or with your Google or Apple account. If you use an email and password, you can reset your password from the sign-in screen; the app does not provide an in-app settings page for changing your email address or password. To delete your account, use the deletion option in the app, which starts the process described in Section 10.