Privacy policy

Last updated October 16, 2026

This policy explains what personal data Kuvio collects when you use the website at kuvio.art and the Kuvio Android app, why, who else handles it, and what rights you have. Kuvio is a small service, so the short version is: we collect what we need to run your account and keep your drawings, we use analytics to see how Kuvio is used, and we don't sell your data or show ads.

Who is responsible

Kuvio is run by Michal Brutvan, a private person in Finland, who is the controller of your personal data. Write to support@kuvio.art with any question about this policy or your data.

What we collect

Your account

  • Your email address and, if you give one, your name.
  • If you sign up with an email and password, your password, stored only as a one-way hash we can't read.
  • If you sign in with Google, your Google account id, name, email address and profile picture, which Google shares with us when you sign in.
  • When your account was created and last changed.

Your drawings

The drawings you save to your account, with when they were created and last changed. Drawings you don't save stay on your device: the editor keeps your current drawing in your browser's or the app's local storage so it survives a reload, and it never leaves your device unless you save or share it.

A share link contains the drawing itself, encoded in the link. We don't store shared drawings, but anyone with the link can see the drawing, and the link passes through our hosting provider's logs when someone opens it.

Your plan and payments

  • Whether you're on the free or the paid plan, and how many drawings you have saved.
  • If you pay on the website: references to your customer and subscription records at Stripe, our payment provider. Stripe collects your payment details; we never see your card number.
  • If you pay in the Android app: the Google Play purchase token for your subscription, which we use to check its status with Google Play. Google Play handles the payment.

How you use Kuvio

  • Analytics, only if you allow it. We use PostHog to see which pages and features are used, so we can fix problems and decide what to improve. It records the pages you view and the actions you take, your device and browser type, and an approximate location derived from your IP address. When you're signed in, it's linked to your account id, name and email address.
  • Session replay, on the website only and only if you allow analytics. PostHog also records how the website responds to you (clicks, scrolling, what's on screen, including your drawing), so we can see where people get stuck. Password fields are never recorded. The Android app doesn't record sessions.
  • Server logs. Like any website, our hosting provider logs requests, with IP address, browser details and the address requested, to keep the service running and secure.

When you contact us

Your email address and what you write, if you email us.

Why we use it, and on what legal basis

  • To provide Kuvio (your account, saving your drawings, the paid plan, sign-in on the app): necessary to perform our agreement with you, the terms of service (GDPR Article 6(1)(b)).
  • To keep accounting records of payments: a legal obligation (Article 6(1)(c)).
  • Analytics and session replay: your consent (Article 6(1)(a)), which Kuvio asks for the first time you visit. You can withdraw it at any time under Cookies and storage; that doesn't affect what was collected before.
  • Server logs: our legitimate interest in keeping Kuvio running and secure (Article 6(1)(f)).
  • Answering your messages: our legitimate interest in helping you (Article 6(1)(f)).

We don't sell your data, use it for advertising, or make automated decisions about you.

Who else handles your data

We use a few companies to run Kuvio, which process data only on our instructions: hosting, the database, analytics and payments. They're listed, with what each one handles and where, on the data processors page.

If you sign in with Google or buy the paid plan through Google Play, Google handles that under its own privacy policy. Stripe also processes payment data under its own policy, for example to prevent fraud.

Some of these companies are in the United States. Data sent there is protected by the EU–US Data Privacy Framework where the company is certified under it, and otherwise by the European Commission's standard contractual clauses.

We may also disclose data when the law requires it, for example to a court or the police.

How long we keep it

  • Your account and drawings: until you close your account. Closing it (Usage & billing → Close account) deletes your account and all your saved drawings right away. Database backups that may still contain them expire within 30 days.
  • Payment records: as long as accounting law requires, which in Finland is up to six years after the end of the financial year. Stripe and Google keep their own records under their policies.
  • Analytics and session recordings: for PostHog's standard retention periods, which are shorter for session recordings than for analytics events. We delete them earlier on request.
  • Server logs: for a short time, usually a few days.
  • Emails: as long as needed to handle your question, and at most two years after.

Cookies and storage on your device

  • Sign-in cookies keep you signed in on the website and protect sign-in forms. They're needed for Kuvio to work. The Android app keeps a sign-in token in its own storage instead.
  • Local storage holds the drawing you're working on and your saved colors, on your device only.
  • Your analytics choice is kept in local storage, so we don't ask again.
  • Analytics cookies and storage from PostHog recognize your browser or app between visits. They are only set if you allow analytics. PostHog isn't loaded at all until you do.

Your choice applies to this browser or device. You can change it here at any time; turning analytics off stops them and removes PostHog's cookies and storage from this device.

Your rights

Under the GDPR you have the right to:

  • get a copy of your personal data, and have it in a portable format;
  • have incorrect data corrected;
  • have your data deleted (you can close your account yourself at any time);
  • restrict how we use your data, or object to uses based on our legitimate interests;
  • withdraw your consent to analytics at any time;
  • complain to a data protection authority. In Finland that's the Data Protection Ombudsman (tietosuoja.fi); you can also complain where you live or work.

Email support@kuvio.art to use any of these rights. We answer within a month.

Security

Everything between your device and Kuvio is encrypted (HTTPS). Passwords are stored as hashes, access to the database is limited to what running Kuvio needs, and payment details stay with Stripe and Google.

Children

Kuvio isn't meant for children under 13, and they shouldn't create an account.

Changes to this policy

When this policy changes, we update the date at the top. If a change affects how we use data you've already given us, we tell you by email or in Kuvio before it takes effect.