The short version
- We collect what we need to run your home project: your account details, what you add to your projects, the room photos you upload for AI previews, and records of what you buy.
- Room photos go to our AI providers only to create the previews you ask for, never with your name, phone number or email.
- People you invite to a project can see that project's shared information.
- We do not sell your personal data and we do not show ads.
- You can ask to see, correct or delete your data, or withdraw your consent, at any time by writing to ops@nirmand.com.
Who we are
Nirmand India Private Limited (“Nirmand”, “we”, “us”) makes the Nirmand app and runs nirmand.com. For the personal data described in this policy, we are the Data Fiduciary under India's Digital Personal Data Protection Act, 2023. Our registered office is at Gajanan Bhawan, EC 63, Scheme No. 94 C, Opposite Bombay Hospital, Indore, Madhya Pradesh 452010, India. CIN: U58202MP2026PTC087422.
This policy covers the Nirmand app on Android and iPhone, the website nirmand.com and our checkout pages. Our pages on social networks such as Instagram are also governed by those networks' own policies.
What we collect
Your account
- Your name, email address and profile photo from your Google account, when you sign up with Google.
- Your mobile number, which we verify with a one-time password (OTP) sent by SMS.
- Your city, or your location if you allow it, so we can show prices and shops for your area. The app asks for location only while you are using it.
What you add to your projects
- Project details: name, type, location, spaces and rooms.
- Shortlists, selections, notes, quotations, rates and decisions.
- Family Voice questions, answers and comments.
- Documents and photos: bills, delivery challans, receipts, quotations, drawings and site photos.
- Site records: materials, payments, expenses and work issues.
- People and shops you add: their names, phone numbers, email addresses, photos, roles and the payments you record with them. Please add someone only if they are happy for you to do so.
Room photos and AI images
- Photos of your rooms that you take or choose from your gallery for AI previews.
- The AI previews and Final Look images created from them.
Payments
- What you bought, for which project, the amount, the date, and the Razorpay order and payment IDs.
- Razorpay collects your payment details (card, UPI, net banking or wallet) directly. We never see your card number, CVV, UPI PIN or banking password.
Voice search
If you use voice search, your phone's own speech service (from Google on Android, from Apple on iPhone) turns your voice into text. Nirmand receives only the text.
Device and usage
- App version, device model, operating system, language and a push-notification token.
- Crash reports when the app stops working.
- Technical logs such as IP address, time of request and errors, kept by our servers and hosting providers.
When you contact us
Messages you send us by email, phone or WhatsApp, and the details you share in them.
On nirmand.com
The website does not use advertising or tracking cookies and does not run analytics. Our hosting provider keeps short-lived technical logs, such as IP addresses, to keep the site secure. The homepage stores a small marker in your browser for the session so that the opening animation plays only once. Our checkout pages use your browser's storage to keep you signed in, and Razorpay's payment window may set its own cookies.
Why we use it
| Purpose | Data we use |
|---|---|
| Create your account, sign you in, keep it secure, and prevent fraud and misuse | Account details, device data, logs |
| Run your projects and show them to the people you invite | Project content, people you add |
| Create AI previews and Final Look images | Room photos, the products you choose |
| Show products, prices and shops for your city | City or location |
| Take payments, add Bricks or Pro to the right project, fix failed payments, and keep accounts as the law requires | Payment records |
| Send messages you would expect: OTPs, “your preview is ready”, a family member's reply, payment confirmations | Mobile number, push-notification token, email |
| Send updates and city news on WhatsApp, only if you agree | Mobile number |
| Fix crashes and improve the app | Crash reports, device data |
| Answer your questions and complaints | Your messages |
| Follow the law and respond to lawful requests | Only what the request requires |
We do not use your personal data for advertising, and we do not sell it to anyone.
Our legal basis
We process your personal data with your consent, which you give when you sign up and when you choose to use features such as AI previews, location or WhatsApp updates. Where the law allows, we also process data for legitimate uses, such as data you give us voluntarily for a specific purpose, or to meet a legal duty such as keeping tax records.
You can withdraw your consent at any time (see Your rights). This does not affect what we did before you withdrew it, and some features may stop working.
Who can see your data
People in your project
When you invite family members, a contractor or an architect to a project, they can see that project's shared information: for example its spaces, shortlists, site records, documents, the AI previews you allow them to see, and the member list with contact details. Some records, such as the payments you record with your contractors, are visible only to you as the project owner. Invite only people you trust, and remove members you no longer work with.
Our service providers
We use trusted companies to run Nirmand. They process data only on our instructions and only to provide their service to us.
| Provider | What they do for us | Data involved |
|---|---|---|
| Supabase | Database, sign-in and file storage | Account and project data, photos, documents |
| Cloudflare | Storing and delivering images and files | Photos, documents, product images |
| Google sign-in, Gemini AI for previews and room understanding, company email | Your Google account details, room photos and product images, emails you send us | |
| OpenAI | AI image generation for previews | Room photos and product images |
| Razorpay | Payments | Order and payment details |
| SMS and messaging providers | Sending OTPs and messages | Mobile number, message content |
| Sentry | Crash reports | Device data, crash details |
| Expo | App updates and push notifications | Push-notification token, device data |
| Vercel | Hosting nirmand.com | Technical logs |
Professionals and shops
When you tap Call or WhatsApp for a shop, contractor or architect, the app opens your phone's dialer or WhatsApp; we do not send them your data.
The business details of professionals and shops that users add, such as their name, business name, phone number and city, may be used by Nirmand to invite them to Nirmand and to build our network of professionals and shops. We never share your project, budget, payments or documents with them unless you invite them to your project. A professional or shop that does not want to hear from us can write to ops@nirmand.com and we will stop.
When the law requires it
We may share personal data with government authorities, courts or law enforcement when the law requires it, or to protect the rights, safety and property of our users and Nirmand.
If our business changes hands
If Nirmand is merged, acquired or sells its business, personal data may move to the new owner, who must keep protecting it as this policy describes.
AI previews and your photos
- To create an AI preview, we send your room photo and the product you chose to Google's Gemini API or OpenAI's API. We send what is needed to make the image, never your name, phone number or email.
- AI images are illustrations made by a computer. Colours, textures, sizes and fitting can look different in real life. Read our AI content policy.
- Please avoid photos that show people's faces, documents or anything private.
- Previews belong to the project they were made in, and only members you allow can see them.
Where your data is stored
Your data is kept on secure cloud servers run by the service providers listed above. Some of our service providers store or process data outside India. Wherever it is processed, we protect it as this policy describes and as Indian law requires.
How long we keep it
| Data | How long |
|---|---|
| Your account and project data | While your account is active. If you delete your account, we delete it within 30 days. |
| Room photos and AI images | Until you delete them, the project or your account. |
| Inactive free accounts | If a free account has no activity for 24 months, we tell you first and then delete it. |
| Payment and invoice records | 8 years, as Indian tax and company law requires. |
| Technical logs | Up to 90 days. |
| Backups | Replaced automatically within 90 days. |
| Your messages to support | As long as needed to resolve your request and keep a record of how we handled it. |
Your rights
Under the Digital Personal Data Protection Act, 2023, you can:
- ask for a summary of the personal data we hold about you and how we use it;
- have it corrected, completed or updated;
- have it deleted, including your whole account (see Delete account & data);
- withdraw any consent you gave us;
- nominate a person to use these rights for you if you die or are unable to;
- raise a grievance with us and, if you are not satisfied, with the Data Protection Board of India.
To use any of these rights, write to ops@nirmand.com with the subject “Privacy”, from the email address on your account, or mention the mobile number on your account. We may ask you to confirm it is you. We acknowledge every request within 24 hours and resolve it within 7 days where we can; deleting a whole account can take up to 30 days.
You can also withdraw consent yourself: turn off location or notifications in your phone's settings, reply STOP to our WhatsApp messages, or delete photos and projects in the app.
Children
Nirmand is meant for adults aged 18 and above, and we do not knowingly collect personal data of children. Please do not add anyone under 18 as a project member. If you believe a child's data is on Nirmand, write to us and we will delete it.
How we protect your data
We protect your data with encryption in transit (HTTPS), access controls so that only the right people and systems can reach it, and regular security reviews. No system is perfectly secure. If a personal data breach affects you, we will tell you and the authorities as the law requires.
Messages we send
- SMS: one-time passwords when you sign in.
- Push notifications: about your projects, such as a ready preview or a reply from your family. You can turn them off in your phone's settings.
- WhatsApp: updates and city news, only if you agree. Reply STOP at any time to stop them.
- Email: about payments and important changes to your account.
Changes to this policy
When we change this policy, we update this page and the “Last updated” date. If a change is significant, we will tell you in the app or by email before it applies to you.
Contact us
Write to us
Nirmand India Private Limited
Gajanan Bhawan, EC 63, Scheme No. 94 C, Opposite Bombay Hospital, Indore, Madhya Pradesh 452010, India
More on how complaints are handled: Grievance redressal.