Privacy policy

VastuLab app for Android · effective 10 November 2026

In short: the photo of your plan stays on your phone. Only two things go to our server in Kazakhstan: the cropped plan, to find the rooms, and the markup, to compute the findings. The server processes them in memory and does not store them. The app has no accounts, ads or analytics. Purchases go through Google Play.

1. The photo of the plan

You pick a photo of the plan from the gallery or files, or take one with the camera app. The full photo never leaves the phone.

• A photo taken with the camera from the app is kept temporarily in the app's folder on the phone. The app deletes it at the next start or after 10 minutes.
• Before the room search you set a frame and keep only the plan inside it. The app reminds you to leave the stamp with your address and the neighbouring flats out of the frame.
• The cropped photo of the current markup is kept on the phone until you start a new plan.

2. Room search on the server

To find rooms automatically, the app sends only the image inside the frame to our server (vastulab.kz). Nothing else is sent with it: not the full photo, not the file name, not your name or contacts.

• The request joins a queue. The image is kept in the server's memory while it waits and while it is processed, and is deleted as soon as processing ends.
• The server returns the outlines of rooms, walls, windows and doors. This answer is kept in memory until the app fetches it, and no longer than 10 minutes after processing ends.
• Neither the image nor the answer is written to disk or to logs.
• The search is done by our own program on our server. It has no internet access; the image is not passed to other companies or services.

You do not have to use the room search: you can trace the rooms with your finger, and then the photo is not sent anywhere.

3. Computing the findings on the server

The findings — issues and advice — are computed by our rules server. For this the app sends the markup to the server:

• room outlines and their types (kitchen, bedroom and so on), and the walls and columns found by the room search;
• marks of the entrance door, interior and balcony doors, windows, stove, water and lift;
• the direction of north;
• your answers: flat or house, whether there is a lift;
• the size of the photo and the position of the frame, in pixels.

The photo of the plan and its file name are not sent (the app writes “plan” instead of the file name), and neither are your name or contacts. The server computes the findings in memory, returns them and stores nothing. The markup is sent each time the app shows a result, including when you open a saved analysis. Without the internet the findings cannot be computed, and the app says so.

4. What the server learns about the connection and what it logs

• Like any server on the internet, the server receives your device's IP address and the standard request headers (they include, for example, the Android version and the phone model). The IP address is used only in the server's memory to limit how often requests come from one address; the IP address and the headers are not written to the request logs.
• For room search requests the web server logs only the time, the request type, the response code, the request and response sizes and the duration. Requests for computing the findings are not written to the web server log at all.
• The room search and findings programs log the time, the request type, the response code and the duration; the room search program also logs the size of the received image. The logs contain no images, no markup and no IP addresses.
• If the web server itself has a critical failure, a line with an IP address may get into its error log.
• Web server logs are kept for 14 days. The programs' log is deleted automatically as it fills up.

5. Where the server is

The server is in Kazakhstan. We rent it from the hosting provider hoster.kz: it provides the hardware and the network; we run the programs on the server and process the data. The app connects to the server only over a secure connection (HTTPS).

6. Markup and saved analyses on the phone

The markup of the current plan is kept on the phone until you start a new plan. It goes to the server only to compute the findings (section 3) and does not stay there.

Saved analyses (“My analyses”, available with VastuLab Premium) are kept only on the phone. An analysis keeps the markup; the photo of the plan is not stored in it. The app has no export of an analysis to a file (PDF or any other).

Android backup is turned off for the app: its data is not copied to Google's cloud and not transferred to a new phone. Uninstalling the app deletes everything it kept.

7. Purchases and subscription

VastuLab Premium is bought and paid for through Google Play. Payment details (card, address) are handled by Google; the app does not receive them. The subscription needs your Google Play account; the app does not learn its address or name.

At the moment the app sends no purchase details to our server: Google Play confirms the subscription on the phone. If we turn on purchase checks on our server, we will describe here in advance what data they receive.

Purchases work through the Google Play Billing Library. It includes a Google component that sends Google technical data about how the library works. Google processes this data under its privacy policy.

8. What the app does not have

• Accounts or sign-up.
• Ads, analytics, counters or trackers.
• Third-party services for the room search and the findings: these are our own programs on our own server.
• Access to contacts, location or microphone. The app does not request camera permission: the photo is taken by the phone's camera app.
• Selling or passing data to other companies.

9. Android permissions

10. How to delete data

Your data is kept on your phone. Delete an analysis in “My analyses”, start the markup over on the start screen, or delete everything at once by uninstalling the app. Our server holds no data about you: photos and markup are not stored there, and the logs hold only technical details of requests without IP addresses.

You can cancel the subscription in Google Play — see the subscription terms.

11. The vastulab.kz website

The website uses no cookies, counters or analytics and loads nothing from third-party servers. Its web server receives technical details of each request (IP address, page address, time), like any website, but keeps no visit log. If an error occurs while a request is handled, a line with the IP address may get into the error log; it is kept for 14 days.

12. Children

The app is made for owners of flats and houses. It does not ask for age, name or contacts.

13. Changes

If the way we handle data changes, we will update this page and the date at the top before releasing the app version with the change.