Privacy and cookies

This page covers the Spike Labz HD app and this website (hd.spikelabz.com). It says what we store about you, why, where it is kept and what you can ask of us.

Who is responsible

Spike Labz Home Design is run by Hampus Ekedahl, in Sweden, who is responsible for your data. Write to [email protected] with any question about it.

What we store

• Your account: name, email address and password (stored as a hash), and whether your account has been approved.
• Your projects: the name, address and type of each home you add.
• What you upload: room scans (the shape of rooms, doors, windows and furniture), photos and video. Video includes sound. Photos and video may show people and personal belongings.
• What you make in the studio: designs, notes and the pictures you attach to them, and share links.
• AI chat use: for each request to the design assistant we keep who made it, in which project, how much text was processed and what it cost us. We do not keep the messages or the answers.
• Technical records: our servers and network provider record requests (time, address requested, IP address) to keep the service running and safe.

Why we use it

• To give you the service you signed up for: storing your scans, showing them, letting you design and share. The legal basis is our agreement with you.
• To keep the service secure, find faults and know what the AI chat costs. The legal basis is our legitimate interest in running a safe and sustainable service.
• To meet legal duties, for example bookkeeping when you pay us.

We do not sell your data and we do not use it for advertising.

When someone else scanned your home

A landlord, letting agent or estate agent may scan a home and share the result. They decide what is scanned and who gets the link; we store and show it for them. If your home or belongings appear in a scan and you want it changed or removed, ask them, or write to us and we will pass it on.

Shared links

The owner of a scan can make a link that lets anyone who has it view that scan or design without logging in. A shared view shows the room model, the notes placed in it and the pictures attached to those notes. It does not show the address, email addresses or the project's other photos. The owner can turn a link off at any time.

The AI design assistant

When you use the chat in the studio, your message, the measurements of the room, the design, and a picture of the current 3D view are sent to Anthropic, the company that runs the AI model, to produce the answer. If you ask it to use your notes, the notes and their pictures are sent too. Anthropic is in the United States. Do not put information in the chat that you do not want processed there.

Where it is kept and who helps us

• Hetzner (Germany): our server, database and file storage, in Nuremberg.
• Cloudflare: carries the traffic between you and our server and protects it against attacks.
• Anthropic (United States): the AI design assistant, only when you use it.
• Apple: distributes the app. Apple's own privacy policy covers what Apple collects.

Login is handled by our own login server, not by a third party. We keep backup copies of the database ourselves.

How long we keep it

We keep your account and what you have uploaded until you delete it or ask us to. When you delete a project in the app, its files are removed from our storage. To delete your account and everything in it, write to us. Deleted data can remain in backups for up to 90 days. Records of AI chat cost are kept without the project's content.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to limit how we use it, or to hand it over in a common format, and you can object to use that rests on our legitimate interest. Write to [email protected]; we answer within one month. If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.

Cookies

We only use cookies that the service cannot work without, so we do not ask for consent. There are no advertising or tracking cookies, and we use no outside analytics.

• astro-session (hd.spikelabz.com): keeps you logged in to this website. It ends when you log out or close the browser.
• Login cookies (auth.spikelabz.com): set by our login server so you stay signed in between visits to the login page.
• Security cookie: Cloudflare may set a short-lived cookie to tell people from automated attacks.

The studio also keeps one item in your browser's session storage for a moment: a chat message waiting for a new design to open. It never leaves your browser and is removed at once.

Changes

When we change how we handle data, we update this page and its date. If the change matters to you, we tell you by email or in the app.