Privacy Policy

Who we are

KROMO ("KROMO", "we", "us") operates the website at kromoapp.com and the forthcoming KROMO mobile app. This policy covers the website and its waitlist only. For any privacy question, or to exercise your rights, contact us at Admin@kromoapp.com. This address reaches the person responsible for privacy at KROMO.

What we collect

When you join the waitlist, we collect:

• Your first name — so we can address you.
• Your email address — so we can send you launch updates.
• Consent records — the date and time you signed up, your IP address at sign-up, and the exact consent wording you agreed to. We are required by Canadian anti-spam law to keep this proof.

That is all. We do not collect payment information, government IDs, precise location, or any "sensitive" personal information through this website.

Why we collect it, and our legal basis

We use your information for a single purpose: to operate the waitlist and email you about KROMO's launch and early access. We do this with your express, opt-in consent, which you give by checking the consent box on the sign-up form and confirming your email. We will not use your information for any other purpose without asking you first.

We do not sell or share your information

We do not sell your personal information, and we do not share it with third parties for their own marketing. We do not "share" it for cross-context behavioural advertising. The only parties that process your data are the service providers below, acting on our instructions.

Service providers

We use a small number of providers to run the waitlist. They process your data only to provide their service to us:

• Supabase — stores the waitlist database securely.
• Resend — sends the confirmation and update emails.
• Vercel — hosts this website.
• Cloudflare (Turnstile) — protects the sign-up form from bots and abuse; it processes your IP address and browser information for that security purpose only.

Some of these providers operate servers in the United States, so your information may be processed there. We use providers that commit to appropriate safeguards for personal information.

How long we keep it

We keep your waitlist information until KROMO launches and you have either created an account or told us you are no longer interested, or until you ask us to delete it — whichever comes first. We keep the consent records described above for up to three years after our relationship ends, because anti-spam law requires it. After that, we delete the data.

Your choices and rights

You can, at any time:

• Unsubscribe — every email has a one-click unsubscribe link, and we honour it promptly.
• Access the personal information we hold about you.
• Correct or update it.
• Withdraw consent and have your information deleted.

To make any of these requests, email Admin@kromoapp.com and we will respond within the time required by law (generally 30 days). We will not discriminate against you for exercising these rights.

Canada

If you are in Canada, we handle your information in accordance with PIPEDA and Canada's Anti-Spam Legislation (CASL). We rely on your express consent before sending you any commercial email. If you are in Quebec, we comply with Law 25; our contact above also serves as the person in charge of protecting personal information. You may also contact the Office of the Privacy Commissioner of Canada, or the Commission d'accès à l'information du Québec, if you have a concern.

United States

We provide the access, correction, and deletion rights above to all users, including U.S. residents, regardless of whether a specific state law applies to us yet. California residents may also have rights under the CCPA; the "Your choices and rights" section explains how to exercise them, and we do not sell or share personal information as those terms are defined.

Children

KROMO is for adults. This website and waitlist are not directed to anyone under 21, and you must confirm you are 21 or older to join. We do not knowingly collect information from children. If you believe a child has given us their information, email us and we will delete it.

Cookies and analytics

This website uses only the cookies strictly necessary to function. We do not load advertising or non-essential analytics trackers without your consent. If we add analytics in the future, we will ask for your consent first where the law requires it, and update this policy. Our bot-protection provider (Cloudflare Turnstile) may set a strictly-necessary security cookie on the sign-up page to tell humans from automated abuse; it is not used for advertising or analytics.

Security

We protect your information with access controls and encryption in transit and at rest through our providers. No system is perfectly secure, but we limit what we collect specifically to reduce risk.

Changes to this policy

If we make a material change, we will update the date above and, where appropriate, email you. The current version always lives at this page.