🔥Last updated: April 2, 2026
1. Introduction
KilnRun ("we," "our," or "us") operates the KilnRun mobile application and website at kilnrun.com (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using the Service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, phone number, and password when you create an account.
- Profile Information: Clay preferences, glaze recipes, pottery technique preferences, and studio affiliations.
- Piece Data: Photos of your pottery pieces, descriptions, clay and glaze details, dimensions, and personal notes you add during the piece tracking process.
- Booking Information: Session dates, times, and membership type when you book studio sessions.
- Communications: Messages you send through the Service, feedback, and support requests.
2.2 Information Collected Automatically
- Device Information: Device type, operating system, unique device identifiers, and mobile network information.
- Usage Data: Features used, pages visited, actions taken, time and date of use, and other diagnostic data.
- Location Data: With your permission, approximate location for studio discovery and geofence-based check-in features.
- Photos and Camera: With your permission, access to your camera and photo library for piece documentation.
2.3 Information from Third Parties
- Studio Integrations: If your studio uses WooCommerce, Shopify, or other platforms integrated with KilnRun, we may receive booking and enrollment data from those platforms.
- Push Notification Tokens: We collect device tokens to send you notifications about your piece status and bookings.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Track your pottery pieces through the production lifecycle (submission, firing, glazing, pickup)
- Process studio session bookings and send confirmations
- Send notifications about piece status changes, booking reminders, and account updates
- Analyze pottery material usage (clay types, glaze combinations) to improve the Service
- Use AI-powered features including piece photo analysis, volume estimation, and description generation
- Provide customer support and respond to inquiries
- Detect, prevent, and address technical issues and security threats
4. AI-Powered Features
KilnRun uses artificial intelligence to enhance your experience:
- Piece Analysis: Photos you upload may be analyzed by AI to auto-detect form type, clay type, technique, and dimensions. This data is stored with your piece record.
- Volume Estimation: AI estimates piece dimensions from photos for firing fee calculations.
- Description Generation: AI may generate artistic descriptions of your pieces based on photos and metadata you provide. You control whether these descriptions are shared.
AI analysis is performed using third-party AI services (Anthropic Claude). Photos sent for analysis are not used to train AI models and are not retained by the AI provider beyond the processing request.
5. Data Sharing and Disclosure
5.1 With Studios
When you join a studio on KilnRun, the studio's staff can see your name, contact information, piece records, and booking history at their studio. This is necessary for studio operations (firing your pieces, managing bookings, etc.).
5.2 Aggregated and Anonymized Data
We may aggregate and anonymize usage data (such as popular clay types, glaze combinations, and material usage trends) for analytics and industry insights. This data cannot be used to identify individual users. We may share aggregated, anonymized data with pottery material manufacturers and industry partners.
5.3 Service Providers
We share information with third-party service providers who assist us in operating the Service:
- Cloud Hosting: Railway (application hosting), PostgreSQL (database)
- Image Storage: Cloudinary (photo storage and delivery)
- AI Services: Anthropic (piece photo analysis)
- Email: Resend (transactional emails)
- SMS: Twilio (text message notifications)
- Payments: Stripe (payment processing, when applicable)
5.4 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
5.5 We Do NOT
- Sell your personal information to third parties
- Share your individual piece photos, glaze recipes, or techniques with other users without your consent
- Use your photos to train AI models
6. Your Pottery Data
Your pieces, photos, glaze recipes, clay profiles, and journal entries belong to you. Specifically:
- You retain ownership of all photos and content you upload
- You control what information is shared publicly (via the Journal sharing feature)
- Your glaze recipes and techniques are private by default
- If you leave a studio, your piece history and photos remain in your account
- You can export or delete your data at any time by contacting us
7. Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- AES-256-GCM encryption for sensitive data at rest (API credentials, integration keys)
- HTTPS/TLS encryption for all data in transit
- JWT-based authentication with token refresh
- Bcrypt password hashing (passwords are never stored in plain text)
- Role-based access controls within studios
While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
8. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes).
9. Your Rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Delete your account and associated data
- Export your data in a portable format
- Opt out of non-essential communications
- Withdraw consent for location and camera access
To exercise these rights, contact us at [email protected].
10. Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.
12. Contact Us
If you have questions about this Privacy Policy, please contact us: