Privacy policy

1. Information we collect

Your account. Your email address, and your name if you give it, when you request an invite or create an account. Sign-in is handled by our sign-in provider, which also keeps a record of your sessions.

Your photos. When you open a photo in Kromo, it is sent to our servers so its surfaces can be traced and checked that it is a photo of a house or a room. The photo is processed and then discarded; we do not keep a copy. We keep the traced outlines, linked to the photo's contents rather than to you, so the same photo opens instantly next time.

Your changes. The colors and materials you try, and the last photo you opened, are saved in your own browser so they are there when you come back. They are not sent to us.

Usage and device data. Our hosting provider records basic request information (such as the time, the page requested and your IP address) to keep the service running and secure. We count how many new photos each account opens per day to enforce fair-use limits.

Analytics. We count page views with Plausible, a privacy-first analytics service hosted in the EU. It sets no cookies, collects no personal data and does not track you across sites; we only see totals.

Cookies. Only the cookies sign-in needs. See the cookie policy.

2. How we use it

• To provide Kromo: trace your photos, show your previews, and keep you signed in.
• To send your invite and, rarely, messages about your account or changes to these terms.
• To keep the service secure, prevent abuse and enforce limits.
• To understand which parts of Kromo work well, from aggregate counts.

We do not sell your personal information, and we do not use your photos to train general-purpose AI models.

3. Service providers

We use hosting, compute, sign-in, email and AI service providers to run Kromo. They are bound by contract to process data only on our instructions and to keep it secure. An AI service may receive your photo to check what it shows and which parts are which; it processes the photo for that purpose only.

4. How long we keep it

• Your account: until you delete it or ask us to.
• A waitlist email: until you are invited, or until you ask us to remove it.
• Your photos: not kept after they are processed.
• Traced outlines: until we change how photos are traced, when they are replaced.
• Request records kept by our hosting provider: for a short period, then deleted.

5. Your rights and choices

You can ask to see, correct, export or delete your personal information, and object to or restrict how we use it. Residents of the EU, the UK and California have these rights by law; we extend them to everyone. Email hello@elowinlabs.com and we will respond within 30 days.

You can clear the changes saved in your browser at any time by clearing this site's data.

6. Security

Data is encrypted in transit, access is limited to what is needed to run the service, and photos are processed on isolated servers. No method of transmission or storage is perfectly secure, but we work to protect your data.

7. International transfers

Kromo is operated from the United States and our providers may process data in other countries. Where the law requires it, transfers are covered by appropriate safeguards such as standard contractual clauses.

8. Children

Kromo is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

9. Changes

We will post any change to this policy here and update the date above. If a change is significant, we will tell you by email before it takes effect.

10. Contact

Kromo is a product name of, and is operated by, Elowin Labs LLC, which is the controller of your personal information. Questions or requests: hello@elowinlabs.com. If you are in the EU or the UK, you may also complain to your local data protection authority.