Legal
Privacy Notice
Last updated 11 August 2026
Allen Jacob Bulenga is the data controller for the personal data described here. Kronika is built around a simple idea: your journey is yours. Entries are private by default, and we only ever surface what you explicitly mark as public.
What we collect and why
- Account data (email, name, login credentials, sign-in provider) — to create and secure your account. Legal basis: performance of our contract with you.
- Profile data (username, bio, avatar, categories, visibility settings) — to provide your profile and honour your privacy choices. Legal basis: contract.
- Your content (entries, photos, video, voice recordings, goals, milestones) — stored so we can show it back to you. Legal basis: contract.
- Questions and appreciations you send or receive on public entries — to deliver those interactions. Legal basis: contract.
- Subscription records (plan, status, billing period) — to give you the features you paid for. Legal basis: contract.
- Technical and usage data (device, IP address, error logs) — for security, fraud prevention and fixing problems. Legal basis: our legitimate interest in running a safe, working service.
- Support messages — to answer you. Legal basis: legitimate interest.
We do not collect or store your card details. Payments, when available, are handled by our payment partner, Paddle.com, acting as Merchant of Record.
Who we share it with
- Service providers who host our database, storage and infrastructure;
- Paddle.com, our payment partner and Merchant of Record, for the sale of Premium, subscription management, payments, invoicing and tax compliance;
- Professional advisers such as lawyers and accountants, where needed;
- Authorities, where we are legally required to.
We do not sell your personal data, and we do not use your entries to train models or to advertise to you.
International transfers
Our providers may process data outside the UK and EEA. Where that happens we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.
How long we keep it
We keep your account and content for as long as your account is open. If you delete your account we remove your personal data and content within 30 days, except where we must keep records longer for legal, tax or accounting reasons.
Your rights
You can access, correct, erase, restrict or object to our processing of your data, request a portable copy, and withdraw consent where we rely on it. You can export your entire journey as a PDF from within the app at any time. We respond within one month. If you are in the UK or EEA you also have the right to complain to your supervisory authority.
Security
We use appropriate technical and organisational measures, including encryption in transit, private storage buckets, and row-level access rules that restrict every record to its owner.
Cookies
We use only essential cookies and local storage — to keep you signed in and remember your appearance preference. We do not use advertising or third-party tracking cookies. Our payment partner may set cookies necessary to complete checkout.
Contact
To exercise any right or ask a question, contact us from Settings → Help.