Privacy Policy

1. Who is responsible (controller)

The data controller is Bjole AB (Sweden). For any privacy matter, contact privacy@bjole.dev. Our lead supervisory authority is the Swedish Authority for Privacy Protection (IMY); if you are in another EU/EEA country you may also contact your local data protection authority.

2. What we collect

• Email address — used to sign you in (a one-time code) and to send service messages.
• Prompts you submit — the text you type to generate a coloring page. We store these to run the service and to detect misuse (see §4).
• Generated images — the coloring pages produced from your prompts.
• A crayon balance — how many pages you have left to generate.
• Report submissions — if you use the in-app “Rapportera” button to report a problem, we receive your message, an optional screenshot, your account id/email, and the page you were on. Used only for support and quality assurance, and retained only as long as needed to resolve the report.
• Anonymous visit statistics — we use our own self-hosted, cookieless analytics (Umami) to see how many people visit the site and which pages are popular. This data is not tied to your account and involves no advertising or cross-site tracking.
• Minimal server logs (IP address, timestamps) for security and abuse prevention, and essential cookies (see /cookies).

3. Legal basis

We do not sell your personal data, and we do not use it for advertising or behavioural profiling.

• Contract (Art. 6(1)(b)) — to create your account and generate the pages you request.
• Legitimate interests (Art. 6(1)(f)) — to secure the service and prevent misuse, including automated and manual review of prompts and images for prohibited content.
• Legal obligation (Art. 6(1)(c)) — to retain records where required by Swedish law, and to report illegal content to authorities.

4. AI processing & content safety

Coloring pages, storybook illustrations, character portraits and Photo → Drawing outputs are generated by AI. Renders normally run on our own GPU server in Sweden (EU), including Photo → Drawing. When our own server is unavailable, the same render is processed by fal.ai, a processor in the United States (see §6). Storybook pages that use an uploaded photo or a character portrait as reference, and the pencil style, are always processed by fal.ai. Your prompt text — and, where you upload one, the photo itself — is also sent to our LLM gateway (llm.bjole.dev) for an automated safety classification before generation. We do not send your email or account identifiers to any AI model.

Because Kludda is intended for children, we actively filter prompts, log them, and may automatically scan or manually review submitted prompts and generated images to enforce our content policy (see /terms). We will report suspected child sexual abuse material (CSAM) or other illegal content to the relevant authorities.

5. Sub-processors

We use a small set of vetted processors. The current list, including where each one is located and what data it receives, is on our /sub-processors page.

6. Where your data is stored & international transfers

Our application database, storage of your generated images, authentication (self-hosted email one-time-code login), and our cookieless analytics run on our own infrastructure in Sweden (EU), as do the renders that use our own GPU server.

Cloud renders (fal.ai). Some renders are processed by fal.ai (Features & Labels, Inc., United States): any render where our own server is unavailable, storybook pages that use an uploaded photo or a character portrait as reference, and the pencil style. fal.ai receives the prompt text and, for those features, the image involved (an uploaded photo or a character portrait) — not your email address or account identifiers. We use fal.ai’s standard data processing agreement, which includes the EU Standard Contractual Clauses (Module 2, controller to processor); the transfer to the United States relies on them. Under its terms fal.ai may use anonymised usage data to develop and improve its models. Prompt text can contain names you typed yourself, such as a character’s name.

Before generation, an uploaded photo is also sent to our LLM gateway (llm.bjole.dev) for an automated child-safety check, and that check may be carried out by AI providers outside the EU/EEA.

Other processors are also located in the United States: our website host (Vercel), the upstream providers used by our LLM gateway (including OpenRouter), and our email delivery provider (Resend). Transfers to Vercel are covered by the EU–US Data Privacy Framework; transfers to OpenRouter and Resend are covered by the Standard Contractual Clauses in their data processing terms.

7. How long we keep it

• Account data (your email) and crayon balance: for as long as your account is active.
• Prompts and generated images: while your account is active, or until you delete them; flagged content may be retained longer where needed for safety, legal, or law-enforcement purposes.
• Security logs: typically deleted within 30 days.

8. Security

• All traffic is encrypted in transit via HTTPS/TLS.
• Stored data is encrypted at rest, with least-privilege, scoped access.
• We do not collect special-category data (Art. 9).

9. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction, data portability, and to object to processing, as well as to withdraw consent where processing is based on it. To exercise any of these, email privacy@bjole.dev. We respond within one month.

Deleting your account. You can delete your account at any time by emailing us. Deletion permanently removes your email, your crayon balance, your prompts and your generated images. Your email address is held in a protected, non-public way; deleting your account removes it.

10. Cookies

We use only an essential authentication session cookie (to keep you signed in) and a language-preference cookie. We do not use advertising or cross-site tracking cookies; our self-hosted analytics (Umami) sets no cookies at all. See /cookies.

11. Data breaches

If we become aware of a personal-data breach that risks your rights and freedoms, we will notify IMY within 72 hours (Art. 33) and affected users without undue delay where the risk is high (Art. 34). Suspect an incident? Email privacy@bjole.dev.

12. Changes & contact

We may update this policy; material changes are reflected by the “last updated” date above. Questions go to privacy@bjole.dev. You also have the right to lodge a complaint with IMY (imy.se) or your local EU/EEA supervisory authority.