Privacy Policy

Last updated: 29/06/2026
Effective date: 29/06/2026

1. Who we are

Krown is a creator authority platform operated by KROWN ("Krown", "we", "us").

For any questions about this Privacy Policy or how we handle your data, contact us at: contact@krown.me

Our Data Protection Officer can be reached at: contact@krown.me

2. Scope of this policy

This Privacy Policy explains how Krown collects, uses, shares, and protects personal data when you:

• Create a Krown account
• Connect your social network accounts to Krown
• Use the Krown mobile application (iOS or Android)
• Visit krown.app or any subdomain
• Communicate with us by email or through the app

This policy applies to all Krown users worldwide, with specific provisions for users in the European Union, United Kingdom, and California where applicable laws require additional protections.

3. Data we collect

3.1 Information you provide directly

When you sign up and use Krown, you provide:

• Account information: email address, password (hashed), display name, profile picture, country
• Social network handles: the usernames you connect to your Krown profile (LinkedIn, Instagram, TikTok, YouTube, X)
• Goal and preferences: the goal you select during onboarding (e.g. "Generate leads"), target ranks, notification preferences
• Payment information: when subscribing to a paid plan, payment details are processed by our payment provider (Stripe) and we do not store full card numbers
• Communications: any messages you send us through support channels

3.2 Information we collect about your public social activity

Krown's core function is to analyze publicly available content and activity on your connected social networks. When you connect an account, we collect:

• Public profile data: your username, display name, bio, follower count, profile picture
• Public posts: posts you have published publicly (text, media metadata, publication date, format)
• Public engagement metrics: views, likes, comments, shares, saves on your public posts
• Public follower data: aggregate follower counts and follower growth over time

We collect this data through:

• OAuth connections you authorize during onboarding
• Public APIs where available
• Public web data that you have made publicly visible on your social network profiles

We do NOT collect:

• Your private messages or DMs
• Posts marked as private or visible only to specific audiences
• Content from accounts you have not explicitly connected to Krown
• Payment data of your customers or audience

3.3 Information we collect automatically

When you use the Krown app or website:

• Device information: device type, operating system, app version, language, time zone
• Usage data: which screens you visit, which features you use, time spent in the app, taps and interactions
• Diagnostic data: crash logs, error reports, performance metrics
• Approximate location: country and region, derived from your IP address (we do not collect precise GPS location)

3.4 Information from third parties

• Authentication providers: if you sign in via Apple, Google, or another single sign-on provider, we receive your basic profile information from that provider
• Payment provider: transaction status, subscription information from Stripe
• Analytics providers: aggregated app usage data from analytics platforms we use (see Section 7)

4. How we use your data

We use your data for the following purposes:

4.1 To provide the Krown service

• Compute your Authority Score, network scores, and rankings
• Analyze your posts to surface insights (format performance, topic performance, etc.)
• Match you with clubs and weekly challenges
• Generate shareable cards based on your activity
• Maintain your public profile at krown.app/yourname (if you choose to make it public)

4.2 To improve Krown

• Understand which features creators use and value
• Detect and fix bugs, crashes, and performance issues
• Train and improve our AI classification systems (niche detection, content analysis)
• Develop new features and refine existing ones

4.3 To communicate with you

• Send transactional notifications (your daily score, weekly recap, club challenge updates)
• Send service announcements (changes to the product, new features, important updates)
• Respond to your support requests
• Send marketing communications, where you have opted in (you can unsubscribe at any time)

4.4 To protect Krown and our users

• Detect and prevent fraud, abuse, fake accounts, and gaming of the scoring system
• Enforce our Terms of Use
• Comply with legal obligations
• Protect the rights and safety of Krown, our users, and the public

4.5 Legal bases (EU/UK users)

Under GDPR, we process your data based on:

• Contract performance: most processing is necessary to provide the Krown service you signed up for
• Legitimate interest: improving the product, preventing fraud, basic analytics. You can object to this at any time.
• Consent: marketing communications, optional features, AI training where applicable. You can withdraw consent at any time.
• Legal obligation: tax, accounting, regulatory compliance

5. AI and automated processing

Krown uses artificial intelligence to:

• Classify your posts into niches and topics
• Score the quality of comments and engagement on your posts (Authenticity)
• Generate insights about your content performance
• Recommend creators to watch, posts of the week, and other Discover content
• Personalize your in-app experience

These systems use your public social data and your in-app activity as inputs. They do not make legally significant decisions about you (such as credit decisions or employment decisions). You have the right to request human review of any AI-generated insight that significantly affects you.

We do not sell your data to AI model providers. Where we use third-party AI services (such as language models) to process content, we do so under contracts that prevent that data from being used to train external models.

6. How we share your data

We do not sell your personal data. We share data only in the following circumstances:

6.1 With other Krown users (only what you choose to make public)

• Your public profile (krown.app/yourname) shows the information you choose to display
• Your rank, score, and badges may appear on public leaderboards and in Discover
• Your name and avatar may appear in club leaderboards visible to other club members
• Posts you share publicly may appear in shareable cards generated by other users

You control what is public. You can make your profile private at any time in Settings.

6.2 With service providers (data processors)

We use trusted third parties to operate Krown, including:

• Cloud hosting: AWS, Google Cloud
• Database providers: Scaleway SAS
• Payment processing: Stripe
• Analytics: Mixpanel, Amplitude (or similar)
• Customer support: FIN
• AI providers: Anthropic, OpenAI, or similar, under strict data processing agreements

These providers process data on our behalf and under our instructions.

6.3 With social networks (only as you authorize)

When you connect a social account via OAuth, the social network may receive limited information confirming the connection. We do not share your Krown data back to social networks without your explicit action (e.g. when you share a Krown card to a network).

6.4 For legal reasons

We may share data if required by law, court order, or government request, or to protect the rights, property, or safety of Krown, our users, or the public.

6.5 Business transfers

If Krown is acquired, merged, or sold, your data may transfer to the new entity. You will be notified of any change in ownership and given the opportunity to delete your account before any transfer.

7. International data transfers

Krown is operated from France. Your data may be processed in:

• The European Economic Area (primary processing)
• The United States (some service providers)
• Other countries where our service providers operate

For transfers outside the EEA, we rely on:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Other legally valid transfer mechanisms

You can request a copy of the safeguards in place by contacting contact@krown.me

8. Data retention

We retain your data for as long as necessary to provide the service:

• Account data: retained while your account is active
• Social network metrics: retained for as long as needed to compute rolling windows (typically 90-day metrics + 12-month history for trend analysis)
• Activity logs: retained for up to 24 months for security and product improvement
• Support communications: retained for up to 3 years
• Billing records: retained for the legal minimum (typically 10 years in France for accounting purposes)

When you delete your account, we delete your personal data within 30 days, except where retention is legally required (e.g. billing records) or where data has been fully anonymized.

9. Your rights

9.1 Rights available to all users

• Access: request a copy of the personal data we hold about you
• Correction: ask us to correct inaccurate data
• Deletion: request deletion of your account and associated data
• Export: download your data in a portable format
• Opt-out of marketing: unsubscribe from marketing emails at any time

9.2 Additional rights for EU/UK users (GDPR)

• Object to processing: object to processing based on legitimate interest
• Restrict processing: ask us to limit how we use your data
• Data portability: receive your data in a structured, machine-readable format
• Withdraw consent: withdraw consent for any processing based on consent
• Lodge a complaint: with your local data protection authority (in France: CNIL, www.cnil.fr)

9.3 Additional rights for California users (CCPA/CPRA)

• Right to know: what categories of personal information we collect and how we use it
• Right to delete: request deletion of personal information
• Right to correct: request correction of inaccurate personal information
• Right to opt-out of sale/sharing: we do not sell personal information, so this right does not apply, but you can opt out of any sharing for cross-context behavioral advertising
• Right to non-discrimination: we will not discriminate against you for exercising your rights

9.4 How to exercise your rights

Contact us at contact@krown.me with your request. We will respond within 30 days (or sooner where required by law). We may need to verify your identity before processing certain requests.

10. Security

We protect your data through:

• Encryption in transit (TLS 1.2+) and at rest
• Strict access controls and authentication for our staff
• Regular security audits and penetration testing
• Bug bounty program (contact contact@krown.me)
• Incident response procedures including notification of affected users where legally required

No system is perfectly secure. If you suspect unauthorized access to your account, please contact us immediately.

11. Children's privacy

Krown is not intended for users under 16 years old (or under the minimum age of digital consent in your country, where higher). We do not knowingly collect data from minors below this age. If we learn we have collected data from a minor without proper consent, we will delete it promptly.

If you are a parent or guardian and believe your child has provided data to Krown, contact contact@krown.me

12. Cookies and similar technologies

The Krown app and website use cookies, local storage, and similar technologies for:

• Authentication and session management (essential)
• Saving your preferences
• Analytics and performance measurement
• Detecting bugs and crashes

You can manage cookie preferences through our cookie banner (web) or device settings (mobile). For more information, see our Cookie Policy at krown.app/cookies.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes:

• We will notify you by email and through an in-app notice
• We will update the "Last updated" date at the top of this policy
• For significant changes affecting your rights, we may ask for renewed consent

You can always find the current version at krown.app/privacy.

14. Contact

For privacy-related questions, requests, or complaints:

• Email: contact@krown.me
• DPO: contact@krown.me
• Mail: KROWN, Data Protection, 14 AVENUE DU GENERAL DE GAULLE 94160 SAINT-MANDÉ, France

You also have the right to lodge a complaint with your local data protection authority. In France: Commission Nationale de l'Informatique et des Libertés (CNIL), www.cnil.fr.

‍