Privacy Policy
Kronicler is an independent product. This page explains what happens to your data, in plain language. If anything here is unclear, email hello@kronicler.app and we'll answer.
Last updated: October 16, 2026
The short version
Your manuscript is yours. It is never sent to an AI, never read by us or anyone else, and never used to train anything. You can export everything you've written at any time, on any plan, and delete your account whenever you want.
Everything below is the detail behind that.
What we collect
Your account. Your email address, and — if you sign in with Google — the name and profile image Google shares. Nothing else. There is no phone number, no address, no date of birth.
What you write. Your chapters, characters, places, relationships, notes and everything you mark. This is stored so the product can work. It is treated as private by default and is never shared, sold, published, or used for any purpose other than showing it back to you.
How the product is used. The app uses Umami, a privacy-friendly, cookieless analytics tool, to count anonymous usage — which screens are visited and a small set of product events (for example, that a project was created, and which structure and genre were picked), and, when you arrive from our site or an ad, a short label for the one that sent you (for example “reddit” or “beta”). It records counts and short fixed labels only: never your prose, names, notes, titles, or the specific project you're in, and no cross-site tracking or advertising profile (the one exception is Reddit ad measurement, below, and only if you allow it). The rest of what we can see is the feedback you give inside the app, the button-press notes described below, and the operational logs our infrastructure keeps to run and secure the service.
Feedback you give. If you answer a question inside the app or fill in a feedback form, your answer is stored along with an identifier so we can connect it to your account and follow up if you asked us to. Feedback you start yourself from the feedback button also carries a short technical note, so a report can be fixed: the page you were on (its address, which contains internal ids for the project and item but never their titles or your search terms), the app version and the version of the feedback tool, your window size and browser, the time, and the first line of up to five recent app errors. It never includes your writing or anything you typed elsewhere in the app.
Where the app gets in the way. When a key button (for example Save or Record moment) is pressed three times within a second, the app notes which button it was, the page address, and the number of presses, with your account identifier. Nothing is shown to you and no text is recorded. It's used only to find controls that aren't responding the way people expect.
Website visits. The marketing site at kronicler.app carries no analytics; the only record of a visit there is the standard server log the host keeps. If you arrive from a Reddit ad, it asks whether Reddit may measure that ad, and loads Reddit’s pixel only if you say yes (see Reddit ad measurement, below). Its links into the app carry that short label for the page or ad you came from. The app at app.kronicler.app uses the cookieless analytics described above.
If we ever add anything beyond what's listed on this page, we'll add it here and tell you — we won't rely on a broad clause written in advance.
What we don't do
- Your writing is never sent to an AI model. Not for checking, not for suggestions, not in the background. The engine works from what you explicitly marked, so it has no reason to send your prose anywhere.
- Nobody reads your manuscript. Not us, not a contractor, not a partner. There are exactly two exceptions, both of which require you to act first: you attach a chapter to a bug report, or you explicitly ask us to look at something while helping with a support issue.
- Nothing is used to train anything. Not an AI model, not a recommendation system, not anything.
- Nothing is sold or rented, and there are no advertisers in the product. The only thing an ad platform ever hears from us is the Reddit ad measurement described below, and only if you allow it. Never anything you write.
Where it's stored, and who else touches it
Kronicler runs on infrastructure provided by other companies. They process data on our instructions and cannot use it for their own purposes.
| Who | What they handle | Where |
|---|---|---|
| Vercel | Hosting for the site and app; server logs | United States / global edge |
| Supabase | Database, authentication, file storage, sign-in emails | West EU (Ireland) |
| Sign-in, only if you choose "Continue with Google" | Global | |
| Cloudflare | DNS and inbound email routing for kronicler.app | Global |
| Tally | Feedback forms, when you choose to fill one in | Belgium (EU) |
| Umami | Cookieless, anonymous usage analytics for the app | EU |
| Ad measurement, only if you arrive from a Reddit ad and allow it | United States |
If this list changes, this page changes with it.
Reddit ad measurement
If you arrive at kronicler.app from a Reddit ad, we ask whether Reddit may measure that ad. Only if you allow it:
- Reddit’s pixel loads on kronicler.app, never inside the app, and sets Reddit’s cookies so Reddit can tell the visit came from its ad.
- Two moments are reported to Reddit by the app’s server: when you start as a guest, and when you add an email to keep your work. Each report carries Reddit’s id for your ad click, a scrambled (hashed) copy of your IP address and your browser’s name. Never your email, your name, or anything you write.
Reddit uses this to report how its ads perform and to show them to people more likely to find them useful. What Reddit does with it is covered by Reddit’s privacy policy. If you don’t allow it, or don’t answer, none of this happens. Your answer is kept in this browser; on another browser or device you’d be asked again.
Reddit ad measurement isn’t switched on yet, so there’s nothing to choose.
Guest sessions
You can use Kronicler without an account. A guest session is an anonymous account: your work is stored on the same infrastructure as any account, but with no email address or personal detail attached to it.
You keep access only while that session lasts in your browser — if it ends, the guest work can't be reached again, and inactive guest projects are periodically deleted. If you add an email to the guest session, it becomes your account and the work stays with it. Signing up separately starts a new, empty account: guest work is not moved into it.
Why we're allowed to hold this
If you're in the EU or UK, the legal bases are:
- Contract — we need your email and your content to provide the product you asked for.
- Legitimate interest — basic operational logs, to keep the service running and secure; and the technical notes and button-press notes described above, to find and fix problems in the product.
- Consent — feedback you volunteer, and Reddit ad measurement if you allow it. You can withdraw either at any time.
If you're in India, this is processed under the Digital Personal Data Protection Act, 2023, on the basis of consent you gave when you created an account.
Where we're based
Kronicler is built and operated from India. Your data is stored with the providers listed above, in the regions shown; for visitors in the EU or UK this means your data is transferred internationally, handled under those providers' standard safeguards.
How long it's kept
Your content is kept until you delete it or delete your account. When you delete your account, your projects and everything in them are permanently removed within 30 days, including from backups on their normal rotation.
Feedback responses and button-press notes are kept for as long as they're useful for fixing and improving the product, and are deleted when you delete your account. Sign-in email logs are kept by the mail provider for a short period for delivery troubleshooting.
What you can do
- Export everything. Built into the product, always available, on any plan. You do not need to ask us.
- Correct anything. Edit it in the app, or email us.
- Delete your account. Available in settings. This is permanent.
- Ask what we hold about you. Email hello@kronicler.app and we'll answer within 30 days.
- Object or withdraw consent. Email us. If you withdraw consent for essential processing, the account can no longer function and will be closed.
- Complain. If you're in the EU or UK you can complain to your local data protection authority. If you're in India you can complain to the Data Protection Board.
Security
Data is encrypted in transit and at rest by the infrastructure providers listed above. Access to production data is strictly limited. The app runs on a separate origin from the marketing site specifically so that marketing scripts cannot reach your session.
No system is perfectly secure. If a breach occurs that affects you, we will tell you directly and promptly.
Children
Kronicler is not intended for anyone under 16. We don't knowingly collect data from children. If you believe a child has created an account, email us and we'll remove it.
Changes
If this policy changes in a way that materially affects you, we'll email you before it takes effect. Smaller changes will be noted by the date at the top.