Kroj collects no data.

In short

• We, the developer, receive nothing: no photos, no measurements, no names, no usage data, no crash reports, no identifiers.
• Your closet, outfits, sizes and body measurements are stored on your iPhone only, encrypted while it's locked.
• Styling, tagging and writing run on your iPhone with Apple's on-device model.
• Two things go out, and only when you use them: an approximate location to Apple Weather for the forecast, and a request for a product page you chose to share or paste.
• Kroj Pro is bought through the App Store. Apple handles the payment and your Apple Account; we never see your name, email or card.
• On the App Store, Kroj's privacy label is "Data Not Collected".

What Kroj keeps on your iPhone

• Photos of your garments, with the background removed, and the cut-out before clean-up, so you can redo it later.
• The details you confirm for each piece: name, type, occasions, formality, warmth, pattern, colour, size, brand and notes.
• Outfit plans, and which looks you marked as worn.
• Your profile: height, sizes, the cuts you wear (menswear, womenswear or both), your fit preference, and notes you write or accept.
• Body measurements, as numbers: lengths from the pose, and chest, waist and hips from live measuring. Kroj never asks for your weight.
• One photo of you, only if you switch it on when saving, cropped below the neck before it is written. Camera frames are never stored.
• A 3D body, only if you make one with the 3D scan: your shape below the neck, as geometry, with no photo texture. The scan photos are processed on your iPhone and deleted as soon as processing ends, if you cancel, and at the next launch if anything was left.
• If you add the Kroj widget: a copy of the coming week's planned looks for it, their names and small pictures of the pieces, in a protected folder that only Kroj and its widget can read. Delete everything removes it.
• Settings such as appearance, language and temperature unit, and how many of the free Pro tries you've used (counts only).

All of it is protected with iOS complete file protection, so it's encrypted whenever your iPhone is locked. Nothing is synced: Kroj doesn't use iCloud sync. Your data is included in your normal iPhone backup (iCloud Backup or a computer), as every app's data is; turn on encrypted backups to keep it encrypted there too.

Live measuring analyses video frames in memory only. Your outline from each side of the turn is used to work out chest, waist and hips, then dropped. Nothing of the video is saved.

What leaves your iPhone

An approximate location, for the forecast. If you allow location "while using the app", Kroj asks iOS for a reduced-accuracy location, rounds it to about one kilometre and sends it to Apple WeatherKit to get the forecast. It's held in memory and never stored. Apple handles that request under Apple's privacy policy. If you don't allow location, you pick the weather by hand and nothing is sent. The Apple Weather mark next to the forecast is loaded from Apple, as Apple requires.

A product page, when you ask for one. If you share a shop's product link to Kroj, or paste one into "Worth it?" or the add screen, your iPhone requests that one page, the way Messages builds a link preview, to get its photo and name. As with any web page, the shop's server sees an ordinary request from your iPhone, including its IP address. Nothing about you or your closet is sent with it, no other page is visited, and the link is not logged. iOS may keep that page in its usual web cache. The photo is checked against your closet on your iPhone and then discarded, unless you choose to add the piece.

Purchases, through Apple. Kroj Pro is a one-time in-app purchase. When you buy it, restore it, redeem a code or ask for a refund, iOS and the App Store handle it under Apple's privacy policy, as for any app. Kroj only asks your iPhone whether Pro is active; it sends nothing of its own. We receive no name, email, Apple Account or payment detail, only Apple's aggregated sales reports (how many were sold, by country).

Nothing else is sent, by the app or by anyone else's code inside it.

The share sheet

When you choose Kroj in the share sheet, the link or photo you shared waits in Kroj's private, encrypted folder on your iPhone until you open Kroj, and is deleted then, or after seven days if you never do.

Apple Intelligence

Tagging, outfit explanations, and the style and proportion notes Kroj drafts for you run on Apple's on-device model. Your photos and closet are not sent to a server to be styled. Kroj instructs the model never to comment on your body, weight or looks. Without Apple Intelligence, Kroj works the same and explains more plainly.

Backups you make

Settings → Your data → Back up now writes your closet, plans, sizes, body photo and scan into one file, encrypted on your iPhone with a passphrase you choose (AES-256-GCM, with the key derived from your passphrase by PBKDF2-SHA256). You decide where to save it, for example iCloud Drive or a folder in Files. Kroj never uploads it and never stores your passphrase, so nobody, Apple and us included, can open the file without it. If you forget the passphrase, the backup can't be recovered.

Siri and Shortcuts

If you ask Siri "What should I wear with Kroj?", the answer names the pieces in today's look. It works only while your iPhone is unlocked. Siri requests are handled under Apple's privacy policy.

Diagnostics

Settings → Developer → Diagnostics keeps a short log of app events in memory on your iPhone: states, counts, timings and errors, never photos, garment names, measurements or location. It leaves your iPhone only if you copy or share the report yourself, and then only to whoever you send it to.

What Kroj never does

• Create an account or ask for your name, email or phone number.
• Use analytics, advertising, crash reporting or tracking of any kind, or include third-party code that could.
• Sell, share or transfer data: we have none to sell, share or transfer.
• Comment on your body. Fit suggestions are about cuts, lengths and sizes.

Children

Kroj is suitable for all ages and collects no data from anyone, children included. Measuring and the 3D scan keep only numbers and shape on the device, as described above.

Your rights and choices

Because we hold no data about you, there is nothing for us to access, correct, export or delete on our side, and nothing to object to or opt out of. Everything Kroj keeps is on your iPhone, under your control:

• See or change it in the app: every piece, plan, size and measurement can be edited or deleted.
• Export it: Settings → Your data → Back up now.
• Delete it: Settings → Your data → Delete everything removes every photo, tag, plan, measurement and size. Deleting the app does the same. Backup files you saved yourself are not affected: delete them in Files.
• Stop the forecast's location: iOS Settings → Kroj → Location.
• Stop the camera: iOS Settings → Kroj → Camera.

For requests sent to Apple Weather, Apple acts on its own behalf; see Apple's privacy policy.

This website

kroj.origin.ba uses no cookies, scripts, analytics or third-party fonts. Your browser requests the pages and images from our host, which, like every web host, processes your IP address to deliver them and may keep short-lived server logs for security.

Changes to this policy

If Kroj ever changes what it keeps or sends, this page changes first, with a new effective date at the top. A change that sends anything new off your iPhone would also be described in the app's release notes.

Questions about this policy: contact the developer through origin.ba, or see Support.