Your data, in plain words.
Last updated: 18 October 2026.
Summary
What we collect
| Data | When | Why |
|---|---|---|
| Email address | You join the waitlist | To tell you when RONA is ready. |
| Name, email, message | You send the contact form | To answer you. |
| Account data: account ID, email, organization, plan, seats | You sign in (free or paid) | To give you your account and plan. |
| Saved projects and their board images | You save while signed in | To open your projects on any device. |
| Usage counts | You use paid generation or AI features | To apply the usage limit for each user. |
| Consent records | You choose "Share for training" | To keep a record of your choice. |
Where your projects are
With no account, your work stays as one draft in your browser. The browser can delete it.
With a free or paid account, your projects and their board images are saved on our server, so you can open them on any device. Your browser also keeps a copy so you can work offline. We never use saved projects to train our models.
You can delete a project at any time. When you delete your account, we delete all your projects. You can also download a project file.
AI and images
- Small models read your images in your browser.
- On paid plans, the rules that make your design system run on our server. The request holds what the app read from your board, not your images. The server does not store the request or the result. It keeps only the usage count.
- An AI language model runs on a server only when you ask ("Describe more", "Write description", "Write examples") or when the rules are not sure.
- "Describe more" sends an image only after you agree. The app tells you before it sends the image.
Training data
We never train on your boards unless you choose to share them. "Share for training" is opt-in. It needs sign-in, and it shows a consent screen first. You can delete a shared board later.
Browser storage
The app saves your projects in your browser (IndexedDB), so your work is still there when you come back. When you sign in, the browser keeps a session token. The token never goes into your project file. You can clear this data in your browser settings.
This website
This website loads its fonts from Google Fonts, a service of Google. To send the fonts, Google receives your IP address. See the Google privacy policy. All other files of this website come from our own server.
If you pick a preview on the roadmap page, this website
saves your pick in your browser (local storage, key roadmap-vote).
The pick never leaves your browser. You can clear it in your browser settings.
This website sets no cookies and uses no analytics.
Your choices and rights
- Unsubscribe from the waitlist at any time with the link in each email.
- Ask us to see, correct or delete the data we keep about you.
- Delete a board that you shared for training.
Changes to this policy
When we change this policy, we update the date at the top of this page. For important changes, we tell you by email.
Contact
Questions about privacy: use the contact page.