DEHDI LLC
EstatePhotoAI privacy
Last updated October 18, 2026
This notice explains what the EstatePhotoAI app for iPhone and iPad stores, what leaves your device, and the choices you have. It is separate from the DEHDI LLC website privacy notice, which covers this website.
The short version
Your work is stored on your device, and the app has no account. Two features send data off the device: AI features send the photos and text you choose to Google's Gemini through Firebase AI Logic, and address autocomplete sends the address text you enter to Google Places. A third, optional feature sends the address you search to our property-records service. We run no ads, no analytics or tracking SDKs, and we do not sell your data.
What is stored on your device
The app keeps its database on your iPhone or iPad: properties, rooms, photos and their edits, generated listing copy, your agent profile (name, brokerage, phone, email, notes) and your settings. Photos are stored in the app's own storage. There is no account and no cross-device sync. A ZIP backup you export contains your database and photos, with API keys and auth tokens removed.
What is sent off your device, and to whom
- AI features (optional, only when you tap the action). When you run room analysis or generate listing copy, the photos you selected (downscaled and JPEG-compressed) and the text of the request — property details, room notes and the features you confirmed — are sent to Google's Gemini Developer API via Firebase AI Logic so the model can produce the result. The app's export “address privacy” toggle applies to exports only: it hides the street address from exported files and messages and strips photo GPS, but it does not remove the property address from this AI request.
- Address autocomplete (only when you type or select). Address text is sent to the Google Places API to return suggestions and a formatted address.
- App Check (automatic). Firebase App Check sends a device attestation (Apple App Attest) to Google and uses a Firebase installation identifier to confirm requests come from a genuine copy of the app. It is an anti-abuse check; the identifier is not used to track you across apps or websites.
- Property-records lookup (optional; off until you configure it). If you enter a lookup endpoint in Settings, the address fields you search are sent to that endpoint. For the pilot this is our service on Google Cloud Functions / Cloud Run, which queries the Alameda County Assessor / Open Data Hub (Esri ArcGIS) for the parcel record. Only Alameda County, California is covered. To enforce a daily rate limit, the service stores a counter keyed by the requesting IP address and the date in Google Cloud Firestore.
What we do not do
- No advertising, and no advertising SDKs.
- No third-party analytics or crash-reporting SDKs.
- No tracking across other apps or websites, and no use of the advertising identifier (IDFA).
- We do not sell or rent your data.
Location
If you tap "use my location", iOS resolves your position to a street address using Apple's system geocoder so the property form can be filled in. The app does not keep a location history. That address becomes the property's address; if you later run AI analysis or the optional lookup, the property address is included in that request (the export “address privacy” toggle does not change this).
Voice notes
Voice notes are recorded and kept on your device. Transcription uses on-device speech recognition when your device supports it; otherwise iOS speech recognition may process the audio using Apple's service. The app itself never uploads your recording.
Retention and deletion
On-device data lives only on your device; deleting an item, or deleting the app, removes it. Backups are yours to keep or delete. AI requests are processed by Google under Google's terms and retention practices. The lookup service keeps a daily rate-limit counter keyed by the requesting IP address and the date; it is used only to enforce the daily cap and is not linked to any account. The service does not save the addresses you search in its database — a searched address is held in memory for up to 15 minutes to answer repeat lookups. The hosting platform's request logs record the request — including the address you searched and the requesting IP address — and are retained for 30 days.
Children
EstatePhotoAI is a professional tool and is not directed to children.
Contact
Questions about privacy: contact DEHDI LLC at contact@dehdi.com.