Your data is yours.

This privacy notice describes how MADURA (UK) LIMITED, a company registered in England & Wales under company number 14063740, with its registered office at 9 Plumpton Road, Bicester, Oxfordshire, OX26 1AQ, United Kingdom (“MADURA”, “we”, “us”), collects, uses and protects personal data when you interact with our website at maduira.com and any related services. MADURA is a global product; this notice applies to users worldwide.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the controller of your personal data is MADURA (UK) LIMITED. We also honour the EU GDPR, the California Consumer Privacy Act (CCPA/CPRA), and equivalent data-protection rights in other jurisdictions where they apply to you. You can reach our privacy team at support@maduira.com.

We collect only what we need to run the service. Specifically:

• Account data. Your email, a display name, and a hashed password when you create an account.
• Uploaded photos. Images you upload to Redesign are processed on our infrastructure only for the duration of generation and the 30 days you can see them in your history. You can delete any image at any time.
• Chat messages. The messages you exchange with MADURA Chat, so we can show you the history and improve the assistant’s quality.
• Generated outputs. Redesigns, style boards, and chat replies are stored with your account so you can return to them.
• Credit and purchase records. Your credit balance, top-ups and usage log. When paid checkout opens we will collect billing details via a regulated payment processor; we do not store card numbers.
• Support correspondence. When you email us we keep a copy to reply and track the matter.
• Log and technical data. IP address, device type, browser, pages viewed and referring URL. We use privacy-respecting analytics where possible.

We do not collect special category data (health, religion, political opinions, etc.) and you should not share it with us through the product. We do not sell your data, and we do not use your uploaded photos or chats to train public AI models.

MADURA is an application layer over third-party AI models. When you click generate, your prompt (and, for Redesign, your uploaded image) is sent to one of our infrastructure providers (for example, OpenAI-compatible gateways such as Yunwu AI; image providers such as Flux, Imagen or xAI Grok) strictly to produce your result.

Those providers are contractually bound, where possible, to not retain or train on your content beyond the time needed to return a response. Because these providers may be based outside the UK, see section 6 on international transfers.

AI outputs are not professional advice. See our terms of service for the full disclaimer.

We only process your personal data where we have a lawful basis under UK GDPR:

• Legitimate interests — to run and improve the service, respond to enquiries, keep the site secure, and communicate about early access you explicitly asked for.
• Consent — for optional marketing emails (you can withdraw at any time by clicking unsubscribe or emailing us).
• Contract — when you become a paying or cohort user, to deliver the service you signed up for.
• Legal obligation — where we must retain certain records (e.g. for tax or fraud prevention).

We never sell your data. We share it only with:

• Our hosting, email and analytics providers, under contract and only to the extent needed to run the site.
• Professional advisers (accountants, lawyers) where strictly necessary.
• Public authorities where we are legally required to.

We do not share your space notes, budget direction, style choices or questions with builders, merchants, designers or advertising networks.

Some of our providers are based outside the UK. Where data leaves the UK, we rely on adequacy decisions or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. You can ask us which providers are involved by emailing support@maduira.com.

We keep personal data only for as long as we need it:

• Uploaded photos and generated images: 30 days by default, or until you delete them, whichever is sooner. You can ask us to purge them immediately.
• Chat history: kept until you delete it or delete your account.
• Account records (email, display name): until you delete the account.
• Credit-usage logs: retained for 24 months for fraud and reconciliation.
• Support correspondence: up to 36 months after the matter is closed.
• Financial records: at least 6 years, as required by HMRC.

You have the right to:

• Be informed about how your data is used (this notice).
• Access a copy of your personal data.
• Have inaccurate data corrected.
• Ask for your data to be erased.
• Restrict or object to processing based on legitimate interests.
• Ask for a portable copy of your data.
• Withdraw consent at any time where we rely on consent.

Residents of the EU have the same rights under the EU GDPR. California residents have the additional CCPA/CPRA rights of (i) knowing what personal information we collect and sell or share, (ii) opting out of any sale or sharing (we do not sell), and (iii) non-discrimination for exercising these rights. Residents of other jurisdictions have rights granted by their local law.

Exercise any of these by writing to support@maduira.com. We’ll reply within one calendar month (45 days for CCPA). If you’re not satisfied, UK/EU residents can complain to the UK Information Commissioner’s Office (ico.org.uk) or their local supervisory authority.

We use a small number of essential cookies to keep the site running. We also use privacy-respecting analytics that do not use cookies to track you across sites. Where we use any non-essential cookies we will ask your consent first through a banner on the page.

We encrypt personal data in transit (HTTPS) and at rest where our providers support it. We limit access to personal data to the people in our team who need it, and we review our suppliers on a regular basis.

We may update this notice from time to time. If we make material changes we will update the date at the bottom and, where appropriate, email anyone on our list.

Last updated: 23 April 2026.

Write to us at support@maduira.com, or by post to:
MADURA (UK) LIMITED
9 Plumpton Road
Bicester, Oxfordshire
OX26 1AQ, United Kingdom