Privacy Policy

Last updated: 6 August 2026

This Privacy Policy explains how the Chromis Android app (the “App”) and the website at this domain (the “Site”) handle information. Both are operated by IDCT · Bartosz Pachołek (“we”, “us”). We built Chromis to be private by design.

1. Your photos & edits

Background removal, object removal, adjustments, layers, text and every other edit run locally on your device. The AI models are Google ML Kit’s subject segmentation plus three bundled inside the app - U²-Netp (background cut-out), MobileSAM (turning a tap into a selection) and MI-GAN (rebuilding the background where a removed object was). All four run on your device; none of them uploads anything. Specifically:

• When you open a photo, the App reads it from your device only to display and edit it.
• Your images, and the edits you make, are never transmitted to us or to any third party.
• A photo leaves your device only if you choose to save it to your gallery or share/export it to another app.
• We do not collect, store, or have any access to your photos or media.

2. Data collected by the App

The App itself does not maintain user accounts or a server. It is distributed through the Google Play Store and uses Google Play services together with Google’s SDKs - Google AdMob (ads) and Google Play Billing (purchases). Through these, limited data is processed as described below.

2.1 Advertising (Google AdMob)

The App is free and supported by ads served through the Google Mobile Ads (AdMob) SDK. To show and measure ads, the SDK may collect and share:

This data is handled by Google, not by us, and is sent over encrypted (HTTPS) connections. For users in the EEA, UK and Switzerland, the App shows Google’s consent (UMP) form on first launch so you can accept or decline personalized ads.

Changing or withdrawing your consent: you can change that choice at any time, in the App, under Menu → Privacy & Cookies → “Ad privacy choices”. That reopens the same consent form and your new answer replaces the old one; withdrawing consent takes effect for ad requests made from then on. The row appears wherever consent applies (the EEA, UK and Switzerland). Independently of the App, you can also reset or delete your Advertising ID under Settings → Google → Ads on your device. See Google’s advertising policies and AdMob & privacy.

Removing ads: A one-time in-app purchase (“Go Pro”) removes all ads. Once it is active, the App does not start the AdMob SDK at all on later launches - no ad request is made, the consent prompt is not shown, and the advertising ID is not used by the App.

2.2 Google Play Store & purchases

The App is distributed through the Google Play Store. When you download or update the App, or make a purchase, Google Play processes data (such as your Google account, device information and purchase history) under Google’s Privacy Policy and the Google Play Terms of Service.

If you buy the ad-removal upgrade, the transaction is processed by Google Play Billing. We receive only a purchase token that tells the App whether the upgrade is active; we do not receive your name, card, or payment details.

2.3 Google Play services (Google Services)

The App uses Google Play services - Google’s system framework on Android - to deliver Google ML Kit’s on-device subject-segmentation model and to run the AdMob, Play Billing and consent (UMP) components described here. The ML Kit segmentation runs on your device and does not send your images to Google. Google Play services may collect standard device and diagnostic data under Google’s own policies.

2.4 Permissions

• Photos / media - the App requests no permission to read your photos. You choose an image through the Android system photo picker, which hands the App that one picture and nothing else, so the App never has access to your photo library. Saving a finished image to your gallery asks for the storage permission on Android 9 and below only, because those versions have no permissionless way to write to the shared Pictures folder; it is requested at the moment of your first save, never at launch, and on Android 10 and newer nothing is asked at all.
• Internet & advertising ID - used by AdMob and Play Billing as described above. No other network use.

3. Data collected by this website

3.1 Analytics

The Site uses Google Analytics 4 to understand aggregate traffic (pages viewed, approximate region, device type, referrer). Analytics uses cookies and a persistent identifier, IP addresses are handled by Google Analytics per its configuration, and data is shared with Google - so it is not fully anonymous.

Analytics is off by default. We ask for your consent with a cookie banner and only load Google Analytics after you click Accept; for visitors in the EEA, UK and Switzerland this opt-in happens before any analytics cookie is set. You can change your choice at any time by clearing this site’s cookies / local storage, and you can also install the Google Analytics opt-out add-on. See Google’s Privacy Policy.

3.2 Contact form

If you use the contact form, it is delivered through Web3Forms, which forwards the name, email address and message you enter to our inbox. We use this only to respond to you; we don’t use it for marketing or sell it. Web3Forms processes the submission on our behalf - see the Web3Forms Privacy Policy.

4. Third-party services

We rely on these providers, each with its own privacy policy:

• Google - the Google Play Store (app distribution & updates), Google Play services and Google Play Billing (purchases), Google AdMob (ads + UMP consent), Google Analytics (website), and on-device Google ML Kit (no image data leaves your device). Policy.
• Web3Forms - contact-form delivery. Policy.

5. Data retention & your rights

We do not keep a database of users, photos, or edits. The only personal data we directly receive is what you send us through the contact form, kept only as long as needed to reply. Data handled by Google and Web3Forms is retained under their respective policies.

Depending on where you live (e.g. the EEA/UK under GDPR, or California under CCPA/CPRA), you may have rights to access, correct, or delete personal data, and to object to certain processing. How to exercise them depends on who holds the data, so to be precise about what we can and cannot do:

• Data you send us directly (the website contact form): we hold it, and we will correct or delete it on request - just contact us.
• Data collected in the App (advertising ID, ad interactions, diagnostics, purchase history): we never receive it and cannot delete it. It is collected by Google’s SDKs and held by Google, so requests have to go to Google. In practice you control it on your device: change or withdraw your consent at any time under Privacy & Cookies → “Ad privacy choices” in the App, and reset or delete your Advertising ID under Settings → Google → Ads. Buying Go Pro stops the App using it altogether.

We keep no account, so there is nothing for us to delete on the App side - which is why our Google Play “Data safety” entry does not claim to offer an in-app data-deletion request.

“Do Not Sell or Share My Personal Information” (California): showing personalized ads through AdMob may count as “sharing” for cross-context behavioral advertising. To opt out, decline personalized ads in the App’s consent prompt - or change your answer later under Privacy & Cookies → “Ad privacy choices” - and reset or delete your Advertising ID in your device’s Google settings; on this website, decline analytics in the cookie banner. We do not sell your personal information for money.

6. Children

Chromis is not directed to children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal data from children. Ads are configured for a general audience.

7. Changes to this policy

We may update this policy as the App and Site evolve. Material changes will be reflected here with a new “Last updated” date.

8. Contact

Questions about privacy? Use the contact form or email [email protected].
IDCT · Bartosz Pachołek · idct.tech