bartosz@idct:~/software/chromis$ cat privacy.md
privacy
How the Chromis app and these pages handle information.
Last updated: 17 October 2026. What changed on 17 October 2026: the Chromis website moved to idct.tech/software/chromis, where analytics loads only if you accept it and the contact form is the site's own - see 3. Data collected by this website. Nothing about the App or what it collects has changed.
This Privacy Policy explains how the Chromis Android app (the “App”) and the Chromis pages of idct.tech (the “Site”) handle information. Both are operated by IDCT · Bartosz Pachołek (“we”, “us”). We built Chromis to be private by design.
The short version: Your photos are edited entirely on your device and are never uploaded to us or anyone else. We don’t require an account and we don’t collect your photos. The only data collection comes from Google’s advertising and billing services inside the App and, on this website, the server logs and the messages you choose to send us through the contact form.
1. Your photos & edits
Background removal, object removal, adjustments, layers, text and every other edit run locally on your device. The AI models are Google ML Kit’s subject segmentation plus three bundled inside the app - U²-Netp (background cut-out), MobileSAM (turning a tap into a selection) and MI-GAN (rebuilding the background where a removed object was). All four run on your device; none of them uploads anything. Specifically:
- When you open a photo, the App reads it from your device only to display and edit it.
- Your images, and the edits you make, are never transmitted to us or to any third party.
- A photo leaves your device only if you choose to save it to your gallery or share/export it to another app.
- We do not collect, store, or have any access to your photos or media.
2. Data collected by the App
The App itself does not maintain user accounts or a server. It is distributed through the Google Play Store and uses Google Play services together with Google’s SDKs - Google AdMob (ads) and Google Play Billing (purchases). Through these, limited data is processed as described below.
2.1 Advertising (Google AdMob)
The App is free and supported by ads served through the Google Mobile Ads (AdMob) SDK. To show and measure ads, the SDK may collect and share:
| Data type | Purpose |
|---|---|
| Advertising ID & device identifiers | Serving and measuring ads, frequency capping, fraud prevention |
| App activity (ad interactions) | Advertising and analytics |
| Diagnostics (crash & performance data) | App functionality and reliability |
| Approximate/coarse location (derived from IP) | Ad relevance and legal compliance |
This data is handled by Google, not by us, and is sent over encrypted (HTTPS) connections. For users in the EEA, UK and Switzerland, the App shows Google’s consent (UMP) form on first launch so you can accept or decline personalized ads.
Changing or withdrawing your consent
You can change that choice at any time, in the App, under Menu → Privacy & Cookies → “Ad privacy choices”. That reopens the same consent form and your new answer replaces the old one; withdrawing consent takes effect for ad requests made from then on. The row appears wherever consent applies (the EEA, UK and Switzerland). Independently of the App, you can also reset or delete your Advertising ID under Settings → Google → Ads on your device. See Google’s advertising policies and AdMob & privacy.
Removing ads: A one-time in-app purchase (“Go Pro”) removes all ads. Once it is active, the App does not start the AdMob SDK at all on later launches - no ad request is made, the consent prompt is not shown, and the advertising ID is not used by the App.
2.2 Google Play Store & purchases
The App is distributed through the Google Play Store. When you download or update the App, or make a purchase, Google Play processes data (such as your Google account, device information and purchase history) under Google’s Privacy Policy and the Google Play Terms of Service.
If you buy the ad-removal upgrade, the transaction is processed by Google Play Billing. We receive only a purchase token that tells the App whether the upgrade is active; we do not receive your name, card, or payment details.
2.3 Google Play services (Google Services)
The App uses Google Play services - Google’s system framework on Android - to deliver Google ML Kit’s on-device subject-segmentation model and to run the AdMob, Play Billing and consent (UMP) components described here. The ML Kit segmentation runs on your device and does not send your images to Google. Google Play services may collect standard device and diagnostic data under Google’s own policies.
2.4 Permissions
- Photos / media - the App requests no permission to read your photos. You choose an image through the Android system photo picker, which hands the App that one picture and nothing else, so the App never has access to your photo library. Saving a finished image to your gallery asks for the storage permission on Android 9 and below only, because those versions have no permissionless way to write to the shared Pictures folder; it is requested at the moment of your first save, never at launch, and on Android 10 and newer nothing is asked at all.
- Internet & advertising ID - used by AdMob and Play Billing as described above. No other network use.
3. Data collected by this website
The Chromis pages are part of idct.tech. The site shows no advertising, and serves its fonts and images from its own domain. What it does process - the server logs any website keeps, the name, email address and message you send if you use the contact form, which is protected by Cloudflare Turnstile, and, only if you accept it in the cookie banner, anonymous visit statistics through Google Analytics - is described in the site’s privacy policy, and the cookie list names every cookie. Nothing is loaded from Google before you accept, and you can change your answer at any time under cookie settings at the bottom of every page.
4. Third-party services
We rely on these providers, each with its own privacy policy:
- Google - the Google Play Store (app distribution & updates), Google Play services and Google Play Billing (purchases), Google AdMob (ads + UMP consent), and on-device Google ML Kit (no image data leaves your device). Policy.
- Cloudflare - Turnstile, the spam check on this website’s contact form. Policy.
- Google (website) - Google Analytics on this website, only if you accept it in the cookie banner. Policy.
5. Data retention & your rights
We do not keep a database of users, photos, or edits. The only personal data we directly receive is what you send us through the contact form, kept only as long as needed to reply. Data handled by Google and Cloudflare is retained under their respective policies.
Depending on where you live (e.g. the EEA/UK under GDPR, or California under CCPA/CPRA), you may have rights to access, correct, or delete personal data, and to object to certain processing. How to exercise them depends on who holds the data, so to be precise about what we can and cannot do:
- Data you send us directly (the contact form): we hold it, and we will correct or delete it on request - just contact us.
- Data collected in the App (advertising ID, ad interactions, diagnostics, purchase history): we never receive it and cannot delete it. It is collected by Google’s SDKs and held by Google, so requests have to go to Google. In practice you control it on your device: change or withdraw your consent at any time under Privacy & Cookies → “Ad privacy choices” in the App, and reset or delete your Advertising ID under Settings → Google → Ads. Buying Go Pro stops the App using it altogether.
We keep no account, so there is nothing for us to delete on the App side - which is why our Google Play “Data safety” entry does not claim to offer an in-app data-deletion request.
“Do Not Sell or Share My Personal Information” (California): showing personalized ads through AdMob may count as “sharing” for cross-context behavioral advertising. To opt out, decline personalized ads in the App’s consent prompt - or change your answer later under Privacy & Cookies → “Ad privacy choices” - and reset or delete your Advertising ID in your device’s Google settings. We do not sell your personal information for money.
6. Children
Chromis is not directed to children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal data from children. Ads are configured for a general audience.
7. Changes to this policy
We may update this policy as the App and Site evolve. Material changes will be reflected here with a new “Last updated” date.
8. Contact
Questions about privacy? Use the contact form, or write to IDCT Bartosz Pachołek, ul. Kaszubska 12/8C, 70-403 Szczecin, Poland. See also the Terms of Use.