kitchform

Kitchform / Your information

Privacy policy

What we process, why we need it, and the choices you have.

Last updated 21 October 2026

1. Who is responsible

Kitchform operates this service. For privacy questions or requests about your information, contact support@kitchform.app. Paddle separately handles purchase and payment information under its Privacy policy.

2. Information you choose to provide

  • Local designs: manual projects are stored in your browser. They are uploaded to Kitchform when you choose cloud saving or create a share link.
  • Accounts: we store your username, password hash, recovery-code hash, account status and sign-in/session records. If you sign in by email or add an account email, we store the address, its verification status and the details needed to send and check sign-in and verification links (each link works once and expires after 20 minutes). A verified account email can be used to sign in with an emailed link. Account email is separate from newsletter signup. If you ask us to email you a kitchen, we keep that design with the link until it is used, and delete it within seven days if it is not. We do not store your password as readable text.
  • Cloud projects: saved project data can include layouts, dimensions, materials, project names, prices and any client details you enter. Only add information you are entitled to use.
  • Shared designs: anyone who receives a share link can view its shared content and may copy it. Share only information you intend to disclose.
  • Support: if you contact us, we receive the information you send so we can respond. The designer feedback form stores your message, optional reply email, current view, device category and app version. If you are signed in, the report links to your account. It does not attach your kitchen design. Feedback is removed during routine cleanup after 180 days. Reply emails are not added to the newsletter.

3. Photos and AI analysis

When you request Build from a photo, your browser prepares up to three images and sends them through our server to the photo-analysis provider shown on the upload screen. Our Modal configuration runs a vision model and SAM 3 detection on Modal. It does not send photos to OpenAI. Other configurations can use OpenAI for analysis or Hugging Face for detection. The upload screen identifies the providers before you submit. Prepared images have file metadata removed. Avoid photographs containing people, private documents or information you do not need to share.

Kitchform does not write the uploaded photos into its account database, browser storage or saved project files. We store the free-build allowance, purchased credit balance, credit use, analysis outcome and usage records needed to operate the feature. We also keep your successful analyses and the room dimensions you supplied with your account so you can resume the draft after closing the page. Review changes are saved in this browser for your account. These saved results contain component estimates and finishes, not the uploaded photos. Saved analyses remain available in your Photo Build draft history. The resulting editable design can be saved as a project. The providers shown on the upload screen process the images under their applicable terms and retention rules; this is separate from Kitchform’s storage.

4. Payments and service records

Paddle collects checkout details such as billing email, address and payment information. Kitchform stores order references, payment status, amount, currency, project association, credit purchases and use, and access expiry so we can deliver and support the purchase. Kitchform does not receive or store full payment-card numbers.

Our hosting services process connection and operational data, which can include IP addresses, request times and error information. Kitchform also records account, save, access and administrative events to keep the service reliable, investigate problems and prevent misuse. We count signed-in account activity by UTC day, first cloud saves and files generated by the server. Daily account activity and generated-file totals are retained for 90 UTC days. We retain the first observed activity day and first-cloud-save record with the account. These counts do not contain project names or design contents.

5. Cookies, browser storage and analytics

Essential cookies and browser storage keep you signed in, save local projects and remember your settings. Google Analytics starts only after you choose “Allow analytics”. You can change that choice with the “Privacy choices” button. We do not send kitchen contents, project names, client details or prices to Google Analytics. With analytics consent, Kitchform also counts a few anonymous steps on its own server as daily totals, with no account or IP address stored; these totals are deleted after 90 days. The updated analytics notice also asks permission for first-party activity timelines. These record approved button names, page categories, product actions and error types using a temporary browser-tab session token, separate from your account. We do not capture form values, kitchen contents, uploaded photos, names, full URLs or error messages. Timelines contain at most 200 events per session, are kept for up to 14 days, and are limited to 1,000 sessions. Sessions reset after 30 minutes without a recorded interaction or two hours overall. Withdrawing consent stops capture, clears the token and requests deletion of the current session; deletion requires the request to reach our server. Other retained sessions expire automatically.

Our pages load fonts from Google Fonts, which receives the connection information needed to serve those fonts. We use Resend to deliver email confirmations and requested newsletters, including one welcome email after a new subscription is confirmed. Marketing emails are a separate, optional choice. Creating an account or verifying an account email does not subscribe you. If you tick the product-updates box on the email sign-in form, opening the emailed link also confirms that subscription. When a new account verifies its email, we send three short getting-started emails over the following five days and then no more; each includes a one-click unsubscribe link that stops the rest, and we keep a record of which were sent. You can choose kitchen tips and product updates separately from My projects → Account email after verifying your address. Public newsletter signup requests both topics and requires email confirmation. We store your requested topics, consent version, confirmation and preference-change records. Resend receives the address and email content needed to deliver requested messages. Confirmation links expire after 48 hours. You can unsubscribe through account email preferences or an unsubscribe link. Changing or removing an account email does not move or cancel a separate subscription for the previous address.

6. Why we process information and who helps us

We process account, project and purchase information to provide the service you request. We process security and operational records to protect accounts and maintain the service. Optional analytics relies on your consent.

Service providers include Vercel for the website, DigitalOcean for the application server, Modal for requested photo analysis and detection (or OpenAI and Hugging Face when those providers are configured), Google for optional analytics and fonts, Paddle for checkout, and Resend for email delivery. These providers may process information outside your country under their applicable safeguards and terms. We do not sell your kitchen designs or personal information.

7. Retention and deletion

Local projects remain in your browser until you remove them or clear the relevant browser data. Cloud projects remain until you delete them or ask us for deletion. Shared copies have a separate lifecycle: deleting a project does not automatically remove an existing share link. Guest share links expire after 90 days without an update or view; signed-in shares remain until removed.

Account, payment and security records may remain where needed to provide access, investigate misuse, resolve disputes or meet legal obligations. Unconfirmed newsletter addresses are removed during signup processing after 30 days. Unsubscribing removes the address from the active newsletter table and retains a keyed suppression identifier to prevent further sends. Deleted data may remain in backups until those backups are replaced. We do not promise immediate removal from every backup or from another provider’s legally required records.

8. Your choices and requests

You can download a project backup, delete cloud projects, remove share links you manage and change analytics preferences. For account deletion, access, correction or other applicable privacy rights, contact support@kitchform.app. We may need to verify account ownership before acting. Depending on your location, you may also complain to your data protection authority. Do not send your password or recovery code by email.

9. Updates

We will update this page when our practices change. The date above identifies the latest version.