Krea
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- They say they do not sell or share your data.
- The documents do not say who can read your content.
Broad data collection, a license on your uploads, auto-renew with no refunds.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account, payments, device IDs, GPS location, photos/videos, and even IDs like passport numbers are listed.
Read the exact line
Privacy policy
“Sensory Data such as photos, videos, or recordings of you and/or of your environment.• Providing, Customizing and Improving the Services• Service Providers• Analytics Partners”
Training
They use your data to run, personalize, market, and improve the service, including product development.
Read the exact line
Privacy policy
“Improving the Services, including testing, research, internal analytics and product development.”
Sharing
Service providers, analytics firms, and ad/cookie partners can get data; they also say they do not sell it.
Read the exact line
Privacy policy
“We will not sell or share your Personal Data, and have not done so over the last 12 months.”
Kept
They keep data as long as they need it for the service, billing, or legal reasons.
Read the exact line
Privacy policy
“We retain Personal Data about you for as long as necessary to provide you with our Services or to perform our business or commercial purposes for collecting your Personal Data.”
Controls
Cookie settings are in the account page; deletion and other rights are by sending them a request.
Read the exact line
Privacy policy
“To explore what Cookie settings are available to you or to modify your preferences with respect to Cookies, you can access your Cookie management settings by clicking krea.ai/account.”
Fine print
license on your content, auto-renew with no refunds, they can close you anytime.
Read the exact line
Terms of service
“you hereby do and shall grant Krea a worldwide, non-exclusive, , , fully paid, and transferable license to use, edit, modify, truncate, aggregate, reproduce, distribute, prepare derivative works of, display, perform, and otherwise fully exploit such User Submissions”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Cancel auto-renew in account settings
Account settings (Paid Services / auto-renewal section of the Terms)
Adjust cookie preferences
krea.ai/account
of personal data
Email a Valid Request as described under Exercising Your Rights; contact [email protected]
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They get a forever license to use, change, and share what you upload or generate, and they can pass that license to others.
Read the exact line
Terms of service
“you hereby do and shall grant Krea a worldwide, non-exclusive, , , fully paid, and transferable license to use, edit, modify, truncate, aggregate, reproduce, distribute, prepare derivative works of, display, perform, and otherwise fully exploit such User Submissions”
For example, an image you generate could still be used in their marketing after you delete your account.
Other users also get a lasting right to use your submissions if they can see them.
Read the exact line
Terms of service
“You also hereby do and shall grant each user of this site and/or the Services a non-exclusive, license to access such User Submissions through this site and/or the Services, and to use, edit, modify, reproduce, distribute, prepare derivative works of, display and perform such User Submissions, including after your termination of your account or the Services.”
For example, if your generation is not private, another user could keep using a copy after you leave.
They can shut your account whenever they want, for any reason.
Read the exact line
Terms of service
“Krea is also free to terminate (or suspend access to) your use of the Services or your account for any reason in our discretion, including your breach of these Terms.”
For example, they could close your account and you might lose access to saved generations without warning.
Closing the account can wipe your content.
Read the exact line
Terms of service
“Account termination may result in destruction of any Content associated with your account, so keep that in mind before you decide to terminate your account.”
For example, if they terminate you, your project files on Krea may be gone.
Subscriptions keep going until the period ends and they generally will not refund money already paid.
Read the exact line
Terms of service
“PAID SERVICES CANNOT BE TERMINATED BEFORE THE END OF THE PERIOD FOR WHICH YOU HAVE ALREADY PAID, AND EXCEPT AS EXPRESSLY PROVIDED IN THESE TERMS, KREA WILL NOT REFUND ANY FEES THAT YOU HAVE ALREADY PAID.”
For example, if you cancel mid-month, you keep access until the end but do not get money back.
If someone sues them because of how you used the app, you may have to pay their legal costs.
Read the exact line
Terms of service
“You agree to and hold the Krea Parties harmless from and against any and all claims, liabilities, damages (actual and consequential), losses and expenses (including attorneys’ fees) arising from or in any way related to any claims relating to (a) your use of the Services”
For example, if a generated image causes a lawsuit, they can ask you to cover their lawyers.
They list collecting very sensitive IDs and even religious or philosophical beliefs.
Read the exact line
Privacy policy
“Identifiers such as social security number, driver’s license number, state identification card, passport number, cultural or social identifiers (for example, being a skateboarder, a Green Bay Packers fan, an environmental activist, religious or philosophical beliefs, etc.)”
For example, the chart claims they may collect passport numbers or religious beliefs for customizing the service.
They collect location from IP and GPS, not just what you type.
Read the exact line
Privacy policy
“Geolocation Data such as IP-address-based location information, and GPS data.”
For example, using the site on a phone could send GPS location to them and analytics partners.
They use tracking cookies to follow your activity for ads, even while later saying they do not do targeted ads under some state laws.
Read the exact line
Privacy policy
“Retargeting/Advertising Cookies collect data about your online activity and identify your interests so that we can provide advertising that we believe is relevant to you.”
For example, visiting Krea could later show you Krea ads on other sites.
They state they do not sell or share personal data under California rules.
Read the exact line
Privacy policy
“We will not sell or share your Personal Data, and have not done so over the last 12 months.”
For example, they say they have not sold your data to data brokers in the last year.
Words to know
Legal words from the lines above, in plain English.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- perpetual
- Lasting forever, with no end date. For example, a perpetual licence means the company can keep using your video years after you leave.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- sublicensable
- The company can pass its rights over your content on to other companies without asking you. For example, an app can let an advertiser or a partner reuse your video under the licence you gave.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- precise geolocation
- Your exact position, usually from GPS, often accurate to within a few metres. For example, an app can tell not just your city but which building you are in right now.
- targeted advertising
- Ads chosen for you based on what you have done across other apps and websites, not just this one. For example, you look at shoes in one app and see shoe ads in a totally different app the next day.
How we got here · grade F · score 31/100 · 15 of 15 policy answers backed by a verified quote · 3 not stated
What does the app collect beyond what it needs to work?
They list far more than account and prompts: device IDs, GPS, photos and recordings, payment data, and even passport or religious-belief style identifiers.
Does it record your voice, face or body, and what happens to that?
They collect photos, videos, or recordings of you and share that sensory data with service providers and analytics partners to customize and improve the service.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They use retargeting and advertising cookies and get data from advertising partners, while some state sections say they do not do targeted ads.
Do they sell or share your data, and can you opt out?
California and other state sections say they will not sell or share personal data and have not done so in the last 12 months, though they still disclose to providers and analytics partners.
What rights do they take over what you type and what the AI makes?
You grant Krea a perpetual, sublicensable, transferable license to fully exploit your submissions, including after you leave, and other users get a perpetual license too.
How long do they keep your data after you delete it, and can you delete it in the app?
They keep data as long as needed for the service or law. Deletion is described as a rights request, not a clear in-app wipe with a deadline.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say they use physical, technical, organizational, and administrative security measures, but no audit or leak history is described.
Is there a real age gate, and are teens protected?
Privacy says they do not knowingly collect from under 18; terms say under 13. There is no described age check beyond that statement.
Will they tell you when the rules change, and is the policy specific?
Neither document has a last-updated date. They say they may post changes and continued use means you agree.
Can they close your account without warning, and can you get your data out first?
They can terminate your account for any reason in their discretion, and termination may destroy content tied to the account.
If something goes wrong, who pays?
The service is as-is, liability is capped around $100 or a year of fees, and you must indemnify them for claims related to your use.
Do subscriptions renew on their own, and can you get a refund?
Paid plans auto-renew unless you cancel in account settings, and they say they will not refund fees already paid or prorate.
The privacy policy is 6,210 words at a college graduate level (Flesch reading ease 39.8); the terms are 7,159 words at a college level.
