Privacy Policy

Last updated 7 September 2026 (rev. j) · Yellow8 Studios LLC

1. What stays on your device

This is the part most design tools cannot say, so it goes first.

• Your boards, in this browser. Every project is saved in your own browser as well as in your account (section 1a). The browser copy is what makes the studio work offline; the account copy is what survives a cleared cache or a new computer.
• Your uploaded pictures. A photograph you add is read by the page and stays there. Nothing uploads it.
• The background remover. Crevano removes backgrounds by running the model on your machine. The model file is served from crevano.app, is cached by your browser, and does its work in the page. Your picture is never transmitted, to us or to anyone else — and the remover is the same on the free plan and the paid one, so paying does not buy a better one or a different one. The single exception in the whole app is Refine edge, a separate button covered in section 2: it is the only thing that sends a picture anywhere, and only at the moment you press it.
• Your date of birth. The signup form asks for it, works out your age in your own browser, and sends us only whether you are 13 or over. The date itself is never transmitted and never stored.

1a. Your projects, when you are signed in

An account exists so your work reaches your other devices, and that only works if we hold a copy. So this is what happens, stated plainly.

• It is automatic. While you are signed in, a project you are editing is saved to our servers on its own, roughly every ten seconds, with no button to press. We do it this way so that closing a laptop lid is never the thing that loses an afternoon's work.
• What is stored is the whole project file — the layout, your text, and the pictures you placed on it, which are held inside the file. It is the same .crev document the Save button writes to your own computer.
• Where it is stored. The project files are in Cloudflare R2, under a folder belonging to your account and no one else's. The short index that lets us list your projects — the name, the size, the time you last changed it — is in our Supabase database. Both are described in section 7.
• Who can read it. You, and the small number of people who run Crevano, only where they need to in order to fix a fault or answer something you have asked us. We do not read your projects otherwise, we do not use them to train any machine-learning model, and we do not give them to anyone.
• How much you get. 5 GB on a free account and 100 GB on a paid one. If you reach the ceiling, the cloud copy stops taking new changes — you carry on editing on your own device, and nothing you already stored is deleted, ever, by us reaching a limit.
• How to remove it. Deleting a project in the studio deletes our copy at the same time. Deleting your account removes all of them — see section 12.
• If you would rather we held nothing. Opening the studio needs an account, so there is no signed-out way to use it. What you can do: sign out, which stops the syncing; delete a project, which deletes our copy at the same moment; or delete your account, which removes all of them (see section 12). Fonts you add never leave your device on any plan.

2. Refine edge — the one time a picture leaves your device

Refine edge is a paid tool for difficult cutouts — hair, fur, flyaway strands — where the on-device model is not good enough. It works by asking a better model, which we do not run ourselves, for a cleaner edge. We would rather state exactly how that works than describe it vaguely.

• It happens only when you press Refine edge. Never automatically, never in the background, never on a picture you have not chosen.
• What is sent: that one picture, as a PNG, shrunk to no more than 1024 pixels on its longest side. Nothing else travels with it — not your name, not your email address, not your account, not your board, not the other pictures on it.
• Who receives it: fal.ai, which runs the model. fal stores the inputs and outputs of requests made to it under its own privacy policy and retention rules, which are theirs and not ours.
• What comes back: a grayscale mask — a black-and-white picture of which parts are the subject and which are the background. Your picture's colors are recombined with that mask on your own device.
• What we keep: nothing of the picture. It passes through our server and is not written to any disk or database of ours. What we do record is that a refine happened, against your account, so the monthly allowance can be counted.

If you would rather no picture ever left your device, simply do not use Refine edge. Everything else in Crevano, including background removal, works without it.

3. Your account

An account is required to open the studio. It is free and takes no payment details. We hold:

• Your email address, and the six-digit sign-in codes we send to it. There is no password, so there is nothing here to steal or reset.
• If you sign in with Google: your email address, your name and the link to your Google profile picture, which Google gives us when you press Continue with Google. We use the email address to identify your account; we do not post anything to Google, we do not read your contacts, your Drive, your calendar or your mail, and we ask Google for nothing beyond your basic profile and email. You can disconnect Crevano at any time from your Google account's Third-party apps & services page, and that stops any further sharing.
• A list of your projects — the name, the size and when you last changed each one — so the studio can show you your own gallery. The projects themselves are described in section 1a.
• Your session — a token stored in your own browser that keeps you signed in, and which your browser sends back when you use a paid feature.
• Your subscription status — whether a plan is live, and when it renews or lapsed.
• Counts of paid usage — how many Refine edge calls you have made this minute and this month, against your account. Numbers only; no pictures.
• Confirmation that you are 13 or over — a yes or no, nothing more.
• Where you heard about us, if you picked something from the list.
• A record of your agreement to our terms: the date, and which version of the wording you agreed to.
• The country your request came from, which our host reports automatically. Not your address, and not your IP address.

4. Anonymous counters

Crevano records a small number of counts about what a browser is capable of — whether it can run the background-removal model, roughly how fast, roughly how much storage it will allow. We use it for one decision: how many people can get the free on-device remover instead of needing a paid one.

These counts carry no identifier whatsoever. No account, no cookie, no session, no IP address, no browser string, no graphics-card name. Each row is a handful of coarse buckets and one duration, and there is no field in it that could be linked back to a person or to another row. They are stored on our own hosting; no analytics company is involved.

5. Feedback you send us

If you use the feedback form to send a suggestion or report a problem, we store what you wrote and email it to our support address. That includes the message itself, the address you gave us to reply to if you gave one, a short technical note about your browser, and the country your request came from. Send us only what you are happy for us to keep.

6. Payments

Paid plans are handled by an outside payment processor. We never see or store your card number — it goes to the processor, not to us. We are told only whether your subscription is live. The processor will be named here, with a link to its own privacy policy, before any payment is taken.

7. The companies that touch your data

These are our sub-processors — the outside companies that hold or handle any of your information on our behalf. This is the complete list, and what each one does. If we add one or swap one out, this list and the date at the top change with it, and we say so.

• Cloudflare — hosts the site, runs the small server pieces behind it, stores the sign-up and usage counters described above, and stores the project files of signed-in customers (Cloudflare R2, see section 1a). Like any web host, Cloudflare's network sees the IP address your request comes from in the course of delivering it; we do not store your IP address ourselves.
• Supabase — holds accounts: your email address, sign-in codes, sessions and subscription status. It also holds the index of your projects — their names, sizes and dates. The project files themselves are in Cloudflare R2, not in Supabase.
• Google — if you choose Continue with Google, Google confirms who you are and gives us your email address, your name and a link to your profile picture. Crevano's use of information received from Google APIs follows Google's Limited Use requirements, including the limits on how it may be transferred and used. We do not use it for advertising, we do not sell it, and no person reads it except where you have asked us to help, where security requires it, or where the law does.
• Resend — sends our email.
• fal.ai — runs the Refine edge model, and only on a picture you explicitly send it. See section 2.
• Google Fonts — our pages load two typefaces from Google's font service, which means your browser makes a request to Google to fetch them. Google receives that request in the ordinary course of serving a file.

Each of these processes your information on our instructions, for the purpose described, and for nothing else. None of them is permitted to use it for their own purposes, and none of them is permitted to sell it.

Where in the world. Yellow8 Studios LLC is in Texas, in the United States, and these providers run global networks. Your information may therefore be stored or handled outside the country you are in, including in the United States. If you are in the UK or the European Economic Area, that is an international transfer, and we rely on the standard contractual protections our providers offer for it.

8. Email we send you

By setting up an account you agree to receive email from us. There are three kinds, and that is the whole list:

• Your sign-in code and occasional notes about the app itself — new element packs, changes worth knowing about.
• A request for an honest review of the app, and of the book if you bought it. Honest is the operative word: we are asking for your real opinion, whatever it is. Nothing is ever offered in exchange for a review, and no discount or benefit depends on you leaving one.
• Discount offers on future books and products.

Every email has an unsubscribe link. Use it and we stop, without affecting your access to the app.

9. We do not sell your information

We do not sell, rent, trade or otherwise pass your personal information to third parties for their own use. The only companies that touch it are the ones listed in section 7, and they process it on our instructions only.

We do not use your boards, your uploaded pictures or anything you write to train any machine-learning model, and we do not license them to anyone else who would.

10. Tracking

No advertising pixels, no analytics profile, no third-party trackers following you around. We set no cookies for advertising or measurement.

11. How long we keep it

If you have never signed in, we hold nothing you have made. If you have an account, we hold the projects described in section 1a. Here is how long each thing lasts:

• Your projects: for as long as your account exists. Delete a project and our copy goes with it, at once. Delete your account and they all go — see section 12. We never delete your work to reclaim space: if you reach your storage ceiling the cloud copy simply stops accepting new changes.
• Account details: until you ask us to delete them, or until the service closes down.
• Usage counts: they roll over each month and are kept only long enough to enforce the allowance and check our own bills.
• Feedback: until we have dealt with it and for a reasonable period afterward.
• Pictures sent to Refine edge: we keep none, and fal's retention is governed by fal's policy.
• Anonymous counters: kept indefinitely, because there is nothing in them attached to a person — see section 4.

12. Your rights, and how to have things deleted

Wherever you live, and whatever the law where you live requires, we will do these things if you ask. Write to [email protected] from the address on your account and we will, without argument and without charging you:

• Tell you what we hold about you, all of it, in plain terms.
• Give you a copy you can take somewhere else. You mostly do not need to ask us for this one, because your work is already yours and already on your own machine: Crevano writes every board out as an ordinary .crev file, and Connect a folder in the studio writes them as plain JSON, one file per board, that any program can read. Your browser has to support that second one — Chrome and Edge do today, Safari and Firefox do not. If your work is in the cloud, opening the studio while signed in brings it back down to your device, and Save writes each project out as a .crev file. If you would rather we sent you everything at once, write to us and we will.
• Correct anything that is wrong.
• Delete all of it — see below.
• Stop emailing you.

What deleting your account reaches. We delete your email address, your sign-in records, your session, your subscription record, your usage counts and any feedback you sent us. It also reaches every project we are holding for you — the files in Cloudflare R2 and the index rows that describe them. Whatever is on your own device stays there, untouched; deleting your account does not reach the copies you hold, only the copies we hold. What is left on our side afterward is nothing that identifies you: the anonymous counters in section 4, which never carried an identifier in the first place, and whatever record of a payment a payment processor has to keep for its own accounting and tax obligations.

How long it takes. The live records go at once, and in any event within a day of us acting on your request. Our database provider keeps a short automatic point-in-time restore window so that a fault on our side cannot lose your account — 7 days on the plan we are on today, and never more than 30. Nothing in that window is indexed by us, searched by us, or used to bring back a deleted account, and it expires on its own. We would rather tell you that than promise an instant erasure that no system of this kind performs.

If you are in the UK or the European Economic Area, those are your rights of access, portability, rectification and erasure under the GDPR; you may also object to or ask us to restrict what we do, and you may complain to your data protection authority. If you are in California, they are your rights to know, to access, to correct, to delete, and to opt out of the sale or sharing of your personal information under the CCPA — and on that last one, we do not sell or share it and never have, so there is nothing to opt out of. We will not give you a worse service for asking for any of this.

We answer within 30 days, and tell you if we need longer.

13. Children

Crevano is not intended for children under 13 and we do not knowingly collect information from them. The signup form checks age before asking for an email address. If you believe a child under 13 has given us their details, write to us and we will delete the record.

14. Changes

If we change this policy we will update the date at the top. If the change is a significant one, we will email you about it.

What changed on 7 September 2026: we added cloud saving. Section 1a says what we now store and how to remove it.

15. Who we are

Crevano is run by Yellow8 Studios LLC. Questions, complaints and deletion requests all go to [email protected].

This policy is written in plain English by the people who built Crevano, so that you can actually check it against what the software does. It is a description of our practices, not legal advice, and we are not lawyers.