Privacy Policy

Effective Date: June 30, 2026

1. Introduction

Voxel Marketing LLC ("Company," "we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Kilona application and related services (collectively, the "Service").

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. Your use of the Service is also governed by our Terms of Service. If you do not agree, please discontinue use of the Service.

You can use much of the Service as a guest, without an account. Signing in is optional and unlocks additional features such as cloud backup and paid subscription tiers.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly, including:

  • Account information: The email address associated with your sign-in and, where applicable, an account identifier from your sign-in provider.
  • Profile information: A display name and an optional profile picture (avatar) that you choose to upload.
  • Your content: Content you create, upload, or back up through the Service, such as rigs, scenes, and renders, along with related project data, names, and thumbnails.
  • Device labels: Names and icons you assign to your devices for cloud backup.
  • Communications: Information you provide when you contact us for support or submit feedback.

2.2 Information Collected Automatically

When you use the Service, we may automatically collect:

  • Device Information: Device type, operating system, app version, and a per-installation device identifier used to organize your backups and settings.
  • Usage and Analytics Data: Features used, actions taken, session identifiers, and interaction patterns, which help us understand and improve the Service.
  • Log Data: IP address, access times, diagnostic information, and app crash reports.
  • Location Data: General location inferred from your IP address. We do not collect precise GPS location.

2.3 Information from Third Parties

When you sign in with a third-party provider, or purchase a subscription, we receive limited information from those providers, such as your email address, a provider account identifier, and your subscription or entitlement status. We do not receive or store your full payment card details.

3. Authentication, Cloud Storage, and Purchases

3.1 Sign-In and Authentication

Account sign-in is provided through Google Firebase Authentication and supports a passwordless email link, Google, and Apple. When you sign in, the provider verifies your identity and shares limited information with us, such as your email address and a provider account identifier. We use this to create and secure your account and to issue a session token to your device.

3.2 Cloud Storage and Backup

If you sign in and use cloud backup, your content is stored in cloud infrastructure operated by our hosting and storage providers (including Amazon Web Services). Backups are organized per device and per account. Your stored content is kept private to your account and is served to your devices through temporary, expiring links. We do not make your content available to other users, and we do not use the content of your rigs, scenes, or renders for advertising.

3.3 Subscriptions and Purchases

Paid subscriptions are processed by Apple through the App Store, and subscription entitlements may be managed on our behalf by our subscriptions provider (RevenueCat). We receive your subscription and entitlement status so we can enable the features of your tier. Apple processes your payment, and we do not receive your full payment card information.

4. How We Use Your Information

We use collected information for the following purposes:

  • Provide and Maintain the Service: To operate the Service, authenticate you, store and sync your cloud backups, and manage your account and subscription.
  • Personalization: To remember your preferences and customize your experience.
  • Communication: To send service-related notices and updates, and, with your consent where required, promotional materials.
  • Analytics and Improvement: To understand how the Service is used, diagnose problems, and develop new features, including through feature management and experimentation.
  • Security: To detect, prevent, and address technical issues, fraud, and abuse.
  • Legal Compliance: To comply with applicable laws and enforce our Terms of Service.

5. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data based on the following legal grounds:

  • Contract: Processing necessary to perform our contract with you, such as providing sign-in and cloud backup.
  • Legitimate Interests: Processing necessary for our legitimate business interests, such as improving and securing the Service.
  • Consent: Where you have given explicit consent.
  • Legal Obligation: Processing necessary to comply with legal requirements.

6. How We Share Information

We do not sell your personal information. We may share your information in the following circumstances:

  • Service Providers: Third-party vendors who process data on our behalf to operate the Service, under contracts that limit their use of the data.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.
  • Legal Requirements: When required by law, subpoena, or to protect our rights, users, and safety.
  • With Your Consent: When you have given explicit permission.

Our service providers include, for example:

  • Google and Firebase: Authentication and analytics.
  • Apple: Sign in with Apple, App Store purchases, and notifications.
  • Amazon Web Services: Cloud storage and hosting.
  • RevenueCat: Subscription and entitlement management.
  • Statsig: Feature management and experimentation.

These providers process data under their own privacy policies and on our behalf as described above.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Content you store through cloud backup is retained until you delete it, until you delete your account, or as otherwise required to operate the Service. When determining retention periods, we consider the nature and sensitivity of the data, the purposes for which we process it, and applicable legal requirements. Residual copies may persist briefly in routine backups after deletion.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption of data in transit, token-based authentication, access controls, and private storage served through temporary, expiring links. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security. The cloud backup feature is a convenience and is not a substitute for maintaining your own backups of content that is important to you.

9. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data and account.
  • Portability: Request a copy of your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests.
  • Restriction: Request restriction of processing in certain circumstances.
  • Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, or to request deletion of your account and associated cloud content, please contact us using the information provided below. You can also stop cloud backup at any time from within the app and manage or cancel subscriptions in your Apple ID account settings.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected, used, shared, or sold.
  • Right to delete personal information held by businesses.
  • Right to opt-out of the sale of personal information.
  • Right to non-discrimination for exercising your CCPA rights.

We do not sell personal information as defined by the CCPA.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. When we transfer data internationally, we implement appropriate safeguards to protect your information in accordance with applicable law.

12. Children's Privacy

The Service is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that information.

13. Third-Party Links and Services

The Service may contain links to, or interoperate with, third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" above. Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Voxel Marketing LLC
Email: support@voxel.marketing
Website: kilona.org

For EEA/UK residents, you also have the right to lodge a complaint with your local data protection authority.