Kinderdorf

Privacy Policy

As of 28 September 2026.

The most important thing first

Your works are not reused. They belong to you alone. They are stored in Switzerland, are not used to train AI and are not passed on. No advertising, no trackers, no analytics cookies. If you publish works on Instagram, Pinterest or other services, that provider's terms apply.

This applies to chroma.ch, transarte.org, kinderdorf.ch and the diaries at 1me.eu.

What data we store

  • Account: name, email address, language, chosen currency label, optionally a password (only as a hash), passkeys (only the public key) and the secrets for the second factor, your invitation code, who invited you, whether you are an ambassador and, where applicable, your association. For guest access, only a random key that is kept in your browser.
  • Children's profiles: first name or fantasy name, symbol, optionally year of birth, medals, custom columns created by the teacher (e.g. class), time of QR access and a hashed device key of the phone. No photos of the children, no email addresses.
  • Painting sessions: subject photos, photos of the work, the sketch, the dialogue with the coach, medium, level, duration and, if you allow it, the location of the subject with place name.
  • Gallery and diary: works, texts, photos, selfies and audio recordings that you upload yourself; public only what you set as such.
  • Groups and meet-ups: memberships, posts, RSVPs to meet-ups, region preferences, café suggestions.
  • Credit and purchases: every transaction (purchase, use, gift, credit note), amount, currency and the payment service's reference. No card data — only Stripe sees that.
  • Feedback: thumbs on answers, stars on sessions, problem reports and messages with text or voice recording, testimonials under the name you choose, "Shape it with us" hints.
  • Usage: for every call to the coach we record the model, tokens, duration and cost, without content. To protect against misuse we briefly store the IP address for login attempts and forms (at most 24 hours). For the free first picture we store the IP address, a device identifier and a fingerprint of the image to prevent it being claimed more than once, for as long as the offer exists, but for no more than two years. The web server writes access logs with IP address, which are deleted after 14 days.

Where data goes

Hosting in Switzerland: all images, works, diaries and personal details are stored on a server in Switzerland. Backup copies are kept on a second server in Switzerland and are overwritten after 30 days.

The following services receive individual data:

  • AI provider, currently Anthropic (USA): to answer, subject photo, photo of the work, your first name, medium, level, duration, place name and your questions, plus short summaries of earlier sessions (the coach's memory); also the texts of "Shape it with us" hints (for assessment), photos for the automatic recognition of medium and level, and app texts for translations (without personal data). According to Anthropic, these inputs are not used to train AI models and are kept for at most 30 days for misuse monitoring.
  • Image AI xAI (USA), only on request: if you tap «Before / after», a crop of your work photo with a short description of the correction is sent to xAI (Grok), which paints the corrected crop. We store the result with your work; it is not published. According to xAI, generated images are not used for training. This feature does not exist for children's profiles.
  • Stripe (Ireland/USA): for a purchase, your email address, amount, currency and your payment details. Stripe processes the payment under its own privacy terms.
  • OpenStreetMap / Nominatim: if you share the location, it is translated into a place name. When the meeting-points map is displayed, your browser loads map tiles from the German OpenStreetMap server; in doing so that server sees your IP address.
  • Cloudflare cdnjs and Google Fonts: your browser loads the map library and the fonts from these servers; they see your IP address in the process.
  • Email: we send login links, confirmations and gifts via our own mail server in Switzerland.
  • Telegram: the operator receives operational notifications, such as new feedback, new accounts or errors, with the name and the type of event; for "Shape it with us" hints, association applications, ambassador rewards and deleted accounts also the email address and, where applicable, the text, so that the operator can decide. Never images or conversations with the coach. Telegram is a service based outside Switzerland.

Cookies and browser storage

A technical cookie keeps you logged in; it applies to the whole brand, including its subdomains (e.g. usk.chroma.ch). If you log in with a passkey, the secret key stays on your device. Further small cookies: dvc (device identifier for the free first picture, 2 years), invite (invitation link, 30 days), org (association, 30 days), preview (invitation to worlds under construction, 1 year), NEXT_LOCALE (language), plus cookies for the currency label, francs or euros, the active child profile and access to a password-protected diary. Browser storage holds font size, contrast, colour world, the guest key and whether you have seen the intro. None of this serves advertising or tracking.

Children, schools, clubs and courses

Children use the app through an adult's account: parents, godparents, teachers or course leaders. This person creates the children's profiles, sees all the children's works and sessions and is responsible for the parents' consent. Children's works are not public unless the adult releases them. There is no advertising, no tracking and no profiling. Photos go to the AI provider for assessment as described above. On request we delete all data of an account within 30 days; receipts for credit purchases are available to print under Credit. For a data processing agreement, write to andres.obrero@progenea.org.

Images in the courses

The children's drawings in the course galleries come from earlier painting courses run by the course leader and are shown with consent, without names. If you would like an image removed, write to the address below; we will take it down immediately.

Your rights

You can request information, correction, release or deletion of your data at any time and withdraw any consent given. Write to andres.obrero@progenea.org. You can also delete your account yourself under Settings; this removes all photos, sessions, works, diaries and feedback.

Legal basis

Swiss Data Protection Act (DSG). For users in the EU the GDPR also applies; the basis is the contract with you (Art. 6(1)(b)), for operational notifications and misuse protection our legitimate interest (lit. f), for testimonials your consent (lit. a). The German version is authoritative.

The coach's memory. After a review we store a short summary of your work (subject, what you worked on, what you might pay attention to next), so that the coach can build on it with your next picture. It is created from the coach's answers, without images, and is visible only to you (sketchbook, "Your path"). In the settings you can have individual entries or everything forgotten; it is deleted along with your account.