DRAFT, not yet in effect. This policy is written for review by Kroven’s owner and legal counsel. It describes how the beta works today, but it is not final and is not legal advice.
Privacy Policy
The short version
- We never sell your data or share it with anyone for their own use.
- No other user can see your home, your devices or your usage, and there is no “view all homes” mode for anyone, including us.
- You can delete your account and everything in it at any time, from inside Kroven.
What we collect
- Account: your email address and a password (we store only a secure hash, held by our authentication provider).
- Your home, if you add it: the address you enter and the map coordinates it resolves to. Both are encrypted before they are stored.
- Your floor plan, if you draw one: the rooms and where you placed each device. Also encrypted before it is stored.
- Devices you connect: the names you give them, how to reach them, and the access key you provide so Kroven can read and switch them.
- Energy readings: power and usage readings from your devices and any usage files you upload.
- Actions: a record of every request to switch a device, who or what asked for it, and what happened.
- Messages to the assistant: what you ask Kroven, used to answer you.
We do not use advertising trackers or third-party analytics.
How we use it
Only to run Kroven for you: showing your devices and usage, answering your questions, switching devices when you confirm, and keeping a record of those actions. We do not use your data to advertise to you or to build profiles for anyone else.
Who processes it for us
Kroven runs on a small number of service providers. They process data only to provide their service to us:
- Supabase: database and sign-in
- Railway: the Kroven server
- Netlify: the Kroven website
- Anthropic: generates the assistant’s answers from your message and the relevant usage context
- U.S. Census Bureau geocoder: turns an address you enter into coordinates
- Mapbox: map imagery, once the map view is enabled
- The cloud service of any device you connect: needed to read and switch that device
How we protect it
- Every request is tied to your signed-in account, and the server checks that you own any device or record before it is read or changed.
- Database access rules restrict each row to its owner.
- Your address, coordinates and floor plan are encrypted with a key that is kept separate from the database.
- Kroven never switches a device without your confirmation, unless you have explicitly turned on automatic control for that device.
Your choices and rights
- Delete everything: “Delete my account” in the menu, under Account, permanently removes your home, floor plan, devices, readings and history, and then your login.
- Remove your home: you can remove your saved location at any time.
- California residents: you have the right to know what we hold about you, to have it deleted or corrected, and not to be discriminated against for using these rights. We do not sell or share personal information as those terms are defined in California law.
How long we keep it
For as long as your account exists. When you delete your account, your data is deleted from Kroven’s database at that moment. Copies held in encrypted backups by our providers expire on their normal schedule.
Children
Kroven is not intended for anyone under 18.
Changes
If this policy changes in a way that matters, we will tell you in Kroven before the change takes effect.
Contact
[Contact email to be added before publication.]