Last updated: 13 October 2026
Testpot is a mobile app that shows you a paint colour on a photo of your own wall. This policy explains what the app collects, why, who else handles it, and how long it is kept.
Testpot is published by Samra Global LTD, trading as Dry Run Studio, 128 City Road, London, EC1V 2NX, United Kingdom ("we", "us"). We are the controller of the personal data described here. Contact us at support@dryrunstudio.com.
| Data | Why we need it | How long we keep it |
|---|---|---|
| Photos you choose to upload, and the outline of the wall we detect in them | To produce the colour previews you ask for | Deleted from our servers within 48 hours of upload |
| Result images (your photo with the new colour) | So you can view, save and share them | Deleted from our servers within 31 days |
| Install ID, a random identifier created when you first open the app | To link your uploads, free previews and subscription to this installation without an account | For as long as you use the app, and afterwards for as long as needed to honour a subscription and prevent abuse of free previews |
| Number of previews used (free previews, and realistic previews per week) and subscription status | To apply your allowances and unlock paid features | As above |
| Purchase information (product, dates, store, country, and a store transaction identifier) | To confirm your subscription. Payment itself is handled by Apple or Google; we never see your card details | For as long as required by tax and accounting law |
| Usage events (for example "photo uploaded", "preview finished", "paywall shown"), with the install ID | To understand how the app is used and fix what doesn't work | For our analytics provider's standard retention period |
| Technical logs (IP address, time, the request made, errors) | To keep the service secure and working | A limited period set by our hosting provider |
Photos can show the inside of your home and may contain location data stored in the file. We strip that embedded information when we process an upload, and we ask you not to upload photos that show other people.
History on your device. The before and after images in the app's history are stored only on your phone. They are removed when you delete them in the app or uninstall it.
Permissions. The app asks for camera access to take a photo and photo library access to pick one. Both are optional and can be withdrawn in your phone's settings. We only receive the photos you select.
We use the following service providers, who process data on our behalf and under contract:
| Provider | What they do | What they receive |
|---|---|---|
| fal.ai (Features & Labels Inc., USA) | Detects the wall in your photo, and passes realistic previews to the image model below | The photo, and the repainted photo when you ask for a realistic preview |
| OpenAI (USA), reached through fal.ai | Runs the image model that draws realistic previews | The repainted photo, only when you ask for a realistic preview |
| Fly.io (USA) | Runs our servers | Everything sent to our servers |
| Neon (USA) | Database | Install ID, preview counts, subscription status |
| Cloudflare (USA) | Image storage | Uploaded photos and result images |
| RevenueCat (USA) | Manages subscriptions | Install ID and purchase information |
| PostHog (USA, with data hosted in the EU) | Product analytics | Usage events with the install ID |
| Apple or Google | App store, payment and subscription billing | Your purchase, under their own privacy policies |
We may also disclose data if the law requires it, or to a successor if the app is sold or merged, in which case this policy continues to apply to data already collected.
Some of these providers process data in the United States and other countries outside the one you live in. Where data from the EEA, the UK or Switzerland is transferred to a country without an adequacy decision, we rely on the European Commission's standard contractual clauses or an equivalent safeguard.
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your data, and to restrict or object to our use of it, including for analytics. You also have the right to complain to your local data protection authority.
To use these rights, email support@dryrunstudio.com. Because we don't know who you are, we may need the install ID from your app to find your data. Photos and result images are deleted automatically on the schedule above, and uninstalling the app removes the install ID and the history from your device.
California residents: we do not sell or share personal information as those terms are defined in the CCPA, and we will not discriminate against you for using your rights.
Testpot is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has used the app, contact us and we will delete the data.
Data is encrypted in transit. Image links are signed and expire. No system is perfectly secure, so please don't upload photos you would not want stored on a server, even briefly.
If we change this policy we will publish the new version at this address and update the date at the top.
Samra Global LTD, trading as Dry Run Studio
128 City Road, London, EC1V 2NX, United Kingdom
Registered in England and Wales, company number 16152900
support@dryrunstudio.com