Kadar is operated by CODETRON DOO, Moše Pijade 63, Umčari, Serbia (company registration number 21807729, tax ID 113127651), which is the controller of your personal data. Contact: help@codetron.xyz.
Data we collect
Account data: your name, email address and profile picture, received from Google when you sign in.
Content you create: the prompts you build, refine and copy while signed in, which Kadar keeps as your prompt history (see Prompt history below). When you use prompt enhancement, the prompt text you submit is sent to OpenAI to generate the improved version.
Usage data: credit balance and usage, features used, and basic technical data such as IP address, browser type and error logs.
Billing data: subscription status and plan. Payment details (card number, billing address) are collected and processed by Paddle; we do not receive or store your full card details.
Prompt history
When you are signed in, Kadar keeps a history of your prompts on our servers, so you can find, copy and reopen them later on any device where you sign in.
What we record: the builder cards and settings you used, including the text you typed; your Refine with AI, follow-up and Refine again requests; the prompts and change notes the AI returns; and the prompts you copy from the builder.
How much we keep: your 20 most recently created or updated entries on the Free plan, or 500 on Pro. Each time a new entry is added, the oldest entries beyond the limit are deleted. If you move from Pro to Free, the Pro limit still applies for 30 days; after that, your next new entry deletes every entry beyond the Free limit.
Removing it: on the History page you can delete one entry, or all of them with Clear all.
Your account: when your account is deleted, your prompt history is deleted with it.
How we use your data
To provide the service: sign you in, save your prompts, track credits and apply your plan (legal basis: performance of a contract).
To provide AI-assisted prompt enhancement when you request it, by sending your prompt text to OpenAI (performance of a contract).
To process payments and subscriptions via Paddle (performance of a contract; legal obligations for tax and accounting).
To keep the service secure, prevent abuse and fix errors (legitimate interest).
To send you service-related emails, such as changes to terms or billing notices (performance of a contract / legitimate interest).
We do not sell your data, do not use it for advertising, and do not use your prompts to train AI models.
OpenAI – AI-assisted prompt enhancement: the prompt text you submit for enhancement. OpenAI Privacy Policy
We share personal data with these providers only as needed to operate Kadar. Some of them process data outside your country of residence and the EU/EEA, including in the United States. Where this happens, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision. Paddle acts as an independent controller for payment data it collects as merchant of record.
Cookies and local storage
Kadar uses only cookies and local storage that are strictly necessary for the service to work: a sign-in cookie keeps you signed in, and local storage keeps two things in this browser: kadar-v1, your prompt draft, and kadar-sessions-v1, which holds only the ids that reconnect your open refine sessions after a reload; it is tied to your account and cleared when you sign out. We do not use advertising or tracking cookies or third-party analytics. Paddle's checkout may set its own cookies when you make a payment. Because we only use essential storage, we do not show a cookie consent banner.
Data retention
Account data is kept while your account is active, and your prompt history as described under Prompt history; both are deleted within 30 days after you ask us to delete your account.
Prompts sent to OpenAI for enhancement may be retained by OpenAI for up to 30 days for abuse monitoring, after which they are deleted. OpenAI does not use data submitted through its API to train its models.
Billing and transaction records are kept for as long as required by tax and accounting law (generally up to 10 years), by us and/or Paddle.
Server logs are kept for up to 30 days.
Backups may retain deleted data for up to 30 days before being overwritten.
Your rights
Under applicable data protection law, including the EU GDPR where it applies, you have the right to:
access the personal data we hold about you;
correct inaccurate data;
delete your data (email us and we will delete your account);
receive your data in a portable format;
object to or restrict certain processing.
To exercise these rights, email privacy@kadar.studio. We will respond within 30 days. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work, or where we are established.
Children
Kadar is not intended for anyone under 16. We do not knowingly collect data from children; if you believe a child has created an account, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. We will post the updated version on this page and change the "Last updated" date. For material changes, we will notify you by email or in the app before they take effect.