Composite
Privacy Policy
Last updated July 17, 2026
This Privacy Policy explains how Composite ("Composite," "we," "us," or "our") handles information when you use the Composite iOS app or visit this website. Composite lets you browse furniture, save favorites, revisit products, and preview furniture in your space using augmented reality.
Composite does not sell personal information, show third-party ads, or track you across other companies' apps or websites.
1. Information We Handle
Anonymous account
Composite uses Firebase Authentication to create an anonymous account identifier. You do not need to provide a name, email address, password, or social sign-in to use the app. The anonymous identifier lets Composite keep your saved activity separate from other users' activity and apply access controls to cloud data.
Favorites and recently viewed products
When you save or view a product, Composite may store the anonymous account identifier, product identifier, optional room label, view count, and related timestamps in Firebase. This allows the app to show your favorites and recently viewed products.
Analytics and technical information
Composite uses Google Analytics for Firebase to understand how the app is used and to improve reliability and design. Analytics may include screen views, product and feature interactions, app-instance or device identifiers, app version, device and operating system information, approximate location derived from a masked IP address, and related timestamps. The anonymous account identifier and analytics identifiers may be associated with app interaction data. We do not use this information for third-party advertising or cross-app tracking.
Catalog content
Composite downloads furniture images and catalog data, such as product names, brands, categories, dimensions, and retailer links, from Firebase. This catalog content is provided by us and is not personal information you upload.
Feedback and email
When you choose to share feedback, Composite opens your email app with our address and a subject line filled in. You decide whether to send the email and what to include. Your email provider handles delivery. If you send a message, we receive the email address, message, and attachments or other information you choose to provide.
Website technical information
We do not set advertising or analytics cookies on these legal pages. Our hosting and DNS providers may process standard request information, such as an IP address, browser user agent, requested URL, and request time, to deliver and secure the website.
2. Camera and Photos
Composite uses the camera and Apple's augmented-reality frameworks to place furniture in a live view of your space. Camera imagery and room-scanning data are processed on your device. Composite does not send those camera images or room designs to our servers or Firebase.
If you choose to save an AR snapshot, Composite requests permission to add that image to your photo library. The app does not browse, upload, or collect the other photos in your library.
3. How We Use Information
We use information to:
- provide the catalog, favorites, recently viewed products, and AR experience;
- authenticate anonymous accounts and keep each user's saved activity separate;
- understand feature usage and improve the app's design and reliability;
- protect Firebase resources, prevent misuse, and troubleshoot problems;
- respond to feedback, support, privacy, and legal requests; and
- comply with legal obligations.
5. Retention and Deletion
Favorites, recently viewed activity, and the anonymous account identifier are retained for as long as reasonably needed to provide the app, maintain security, resolve issues, or comply with legal obligations. Analytics information is retained according to our Firebase and Google Analytics settings. Support emails are retained as reasonably needed to respond and maintain support records.
You can remove individual favorites in the app. Deleting Composite removes local app data from your device, but it may not immediately delete cloud data associated with the anonymous account. You may request deletion of information associated with your account by emailing us. Because Composite does not collect a name or email for anonymous accounts, we may need additional information to locate and verify the relevant account. Limited information may remain temporarily in backups or when required for security, fraud prevention, or legal compliance.
6. Security and International Processing
We use reasonable technical and organizational safeguards designed to protect the information we handle. Composite uses Firebase security rules and Firebase App Check with Apple's App Attest to help protect backend resources from unauthorized clients. No storage or transmission system can be guaranteed to be completely secure.
Information may be processed in the United States and other countries where our service providers operate, subject to applicable safeguards.
7. Children's Privacy
Composite is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us so we can take appropriate action.
8. Your Choices and Rights
You can choose whether to grant camera or photo-library permission, save favorites, open retailer links, save AR snapshots, or send feedback. You can manage app permissions in iOS Settings.
Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or objection related to personal information we hold about you. California residents may also request information about the categories of personal information we collect, use, and disclose. We do not sell or share personal information for cross-context behavioral advertising. To make a request, contact us using the address below. We may need to verify your request before completing it.
9. Changes to This Policy
We may update this Privacy Policy as Composite, our service providers, or legal requirements change. We will update the date above and provide any additional notice required by law.
10. Contact
For privacy questions or requests, email hi@dstrat.io.