Privacy policy

Last updated: 12 November 2026 (previous version: 10 November 2026)

1. Data controller

The controller of the personal data processed in the Baukit service (available at baukit.app, hereinafter the “Service”) is Wojciech Dobry, with his registered address at: Obrońców Pokoju 9, 43-229 Ćwiklice, Tax Identification Number (NIP): 6381825231 (hereinafter the “Administrator”).

Contact: wojciech@baukit.app

2. What data we collect

a) Use without an account

Using the Service without signing in does not require providing any personal data. Your project (drawing, loaded underlays, settings) is saved in the browser storage on your device (localStorage and IndexedDB). We send it to our servers only if you consent to project copies in the banner (section 6 d). In the same storage we save your Service settings, e.g. language and theme.

Like any website, the Service's server receives, with every connection, the IP address of your device and basic technical information (e.g. browser type, time and the address of the requested page). The hosting provider records them automatically in technical logs, which serve solely to ensure the operation and security of the Service and are kept for a short time, in accordance with the provider's rules.

On your first visit we ask in a banner for your consent to full statistics, session recording and project copies (section 6 a). Until you give it, we count visits without identifying who you are and without saving anything on your device (section 6 b). Once you have given consent, we collect the data described in section 6 c and d, including your IP address and approximate location.

b) Signed-in users (Google account)

Signing in is optional. By signing in with a Google account, you share the following data from your Google account with the Service:

• e-mail address – the account identifier,
• name and surname – displayed in the Service's interface,
• profile picture – displayed as an avatar in the account menu.

After you sign in, we also store your profile settings (default region, language), copies of your projects (drawing, names, settings, prices entered in the project) and the underlays loaded into them (e.g. scans of floor plans), so that they are available on other devices. They are used to synchronise projects between your devices. We make a project available to other people only if you yourself create a link to it with the “Share” button: anyone who has the link can then open a copy of the project in Baukit (drawing, name, notes, prices and underlays), and the project name appears in the link preview. The link works until you disable it or delete the project or your account. We count how many times the link has been opened and show you this number; we do not record who opened it. A copy opened from the link belongs to the person who opened it and does not change your project. We access your projects only when it is necessary to fix a problem that affects them (section 2 e). We have no access to your Google account password or to other data from your Google account.

If you used the previous version of Baukit, your saved project remains in your account. After signing in you can load it into the new version or download it as a file.

We may send you a service message to your account's e-mail address when it concerns your account or your use of the Service, e.g. about moving the Service to a new version or about a change to the Terms of Service or to this Privacy Policy. We do not send marketing messages or a newsletter.

After you sign in, we link the statistics of your use of the Service with your account: if you have accepted the banner, to the extent described in section 6 c and d, and if you have not, to the narrower extent described in section 6 e, unless you object to it.

c) Material prices

We calculate the indicative prices shown in the Service from publicly available offers of online shops. When collecting them, we do not process personal data.

We do not collect prices from users: prices entered in a project stay in that project. If we ever introduce the option of sharing prices, it will be voluntary, switched off by default and based on your consent, which you will be able to withdraw at any time, and we will describe it in this Policy before launching it.

d) New project from a drawing

The “New project from a drawing” feature (called “AI wizard” in the editor) is available after signing in. When you use it, the selected images (floor plan, section, visualisations – after being reduced in size in your browser) and the project name you enter are sent via our server to OpenRouter Inc. (USA), which passes them to the AI model provider (currently OpenAI, USA) solely for the purpose of reading the drawing. Both act on our behalf as processors and may not use this data for their own purposes, including for training models. Baukit does not save these images or the reading on its servers and does not record them in logs – they remain only in your browser, in the created project (and, after signing in, also in the copy of the project in the cloud, like any underlay). Drawings of buildings do not usually contain personal data; if your drawing does contain such data (e.g. a stamp with a name and address), cover it before sending or do not use this feature.

To protect this feature against abuse, we record a daily counter of readings and their cost: for a signed-in user it is assigned to the account identifier, and for others to a hash of the IP address (cryptographic and one-way – we do not record the address itself). The counter is used solely to limit the number of readings. Counters from previous days are deleted automatically at the first reading on a following day, usually after two days, and an account's counter is also deleted when the account is deleted.

e) A copy of a project to fix a problem

When, as a signed-in user, you report a problem with a project to us, or when we detect an error that affects your project saved in the cloud, the Administrator may make a copy of that project (together with the images loaded into it) in order to reproduce the problem and fix it. This is done only by the Administrator personally, from an account protected by two-step verification. We record every such access in a register (who, when, which project and for what reason), which we keep for 2 years. We delete the copy once the problem has been fixed, no later than after 30 days, and do not make it available to anyone.

We have no access to projects saved only in the browser, without signing in, except for the copies you consent to in the banner (section 6 d). If you need help with such a project, you can save it to a file and send it to us yourself.

f) AI assistant (early version)

The AI assistant in the editor is available after signing in. Your messages, the project content the assistant needs and its replies are sent via our server to OpenRouter Inc. (USA), which passes them to the selected AI model provider solely for the purpose of preparing a reply. The assistant is in an early version, so we save every conversation in full on our server (Supabase, EU): your messages, the instructions sent to the model and its replies, actions performed in the project, errors, the cost of each reply, and a copy of the project before and after each of your messages, together with the account identifier and e-mail address. If you rate a reply of the assistant (thumb up or down) or add a note to it, we save the rating and the note with the conversation. The design brief you give the assistant (for example the number of bedrooms, the number of people in the household or the width of the plot) is saved in the project as part of it. The same data, without the project copies, goes to PostHog (section 6). We use it to reproduce and fix the assistant's errors, to improve it and to keep its running costs under control. The legal basis for providing the assistant is the contract for using the Service (Article 6(1)(b) GDPR), and for saving the conversations our legitimate interest in fixing errors, improving the assistant and protecting the Service against abuse (Article 6(1)(f) GDPR). We keep this data for 12 months, and when you delete your account we delete it together with the account. You can object to the saving of your conversations by writing to us; we will then switch off the assistant for you, because for now we cannot provide it without the record. Do not enter personal data in the conversation that the assistant does not need to work on your project.

3. Purpose and legal basis of processing

We process personal data solely for the purpose of:

• providing the service – signing in, saving and loading your projects, and reading the drawing in the “New project from a drawing” feature (Article 6(1)(b) GDPR – performance of the contract for the provision of services by electronic means),
• ensuring the operation and security of the Service – the server's technical logs and the daily counter of drawing readings (Article 6(1)(f) GDPR – the Administrator's legitimate interest in protecting the Service against abuse and failures),
• sending service messages to signed-in users (Article 6(1)(f) GDPR – the Administrator's legitimate interest in informing users about matters concerning their account),
• statistics on the use of the Service without your consent, improving its features, helping users and detecting errors (Article 6(1)(f) GDPR – the Administrator's legitimate interest in knowing how the Service is used and in improving it; section 6 b and e),
• full statistics on the use of the Service, session recording and project copies, if you consent to them in the banner, in order to understand how you use the Service and to fix errors (Article 6(1)(a) GDPR – your consent; section 6 a, c and d); a signed-in user who has not accepted the banner may also consent to session recording alone in the settings (section 6 e),
• fixing a problem with your project using a copy of it (Article 6(1)(b) GDPR when you report the problem yourself, and point (f) when we detect an error that affects your project – the Administrator's legitimate interest in fixing errors in the Service; section 2 e),
• handling your messages and requests, including those concerning your rights (Article 6(1)(c) GDPR – legal obligation – and point (f)).

Providing data is voluntary. Without signing in you can use the Service in full, except for saving projects in the cloud and the “New project from a drawing” feature (section 2 d). Refusing consent in the banner does not restrict any feature of the Service. We do not use personal data for marketing purposes and we do not sell it. We do not make automated decisions about you that produce legal effects or similarly significantly affect you (Article 22 GDPR); the statistics described in section 6 are not used to make any decisions concerning you.

4. Data storage

1. Projects saved in the browser remain on your device until you delete them (in the Service or by clearing the site data in your browser).
2. We store account data and projects saved in the cloud on Supabase servers (region: EU West – Ireland). Supabase runs on Amazon Web Services (AWS) infrastructure and processes the data on our behalf under a data processing agreement.
3. We keep account data for as long as you have an account in the Service. After the account is deleted, the account data and projects saved in the cloud are permanently deleted from the database and file storage; they may remain in encrypted backups for no longer than 35 days (section 5.3).
4. We keep statistics on the use of the Service (section 6 b, c and e) for 12 months, session recordings (section 6 c and e) for no more than 30 days, and project copies (section 6 d) for 90 days. When you delete your account, we immediately delete the project copies linked to your account, and within 30 days all statistics and recordings linked to it.
5. We delete a copy of a project made to fix a problem once the problem has been fixed, no later than after 30 days. We keep the register of access to such copies and to the project copies under section 6 d for 2 years (section 2 e).
6. We keep the messages you send us for as long as is necessary to handle them and to establish, pursue or defend any claims.

5. Export and deletion of data

1. You can save a project to a file and delete it from your browser at any time.
2. After signing in, open “Settings” in the account menu and choose “Download” in the “Data” section: you will receive a JSON file with your profile, all projects saved in the cloud (including those from the old version) and a list of saved images.
3. In the “Account” section of those settings, choose “Delete account…” to delete immediately and permanently your profile, all projects in the cloud (including those from the old version), saved images, project copies linked to the account (section 6 d), the drawing-reading counter and the sign-in account itself. We delete statistics and session recordings linked to the account from PostHog within 30 days. Projects saved in your browser stay on your device – you can delete them in the projects menu. We make encrypted backups of the database every week and delete each of them no later than after 35 days; until then they may contain deleted data. We do not use backups for any purpose other than restoring the Service after a failure, and if that were ever necessary, we would delete the deleted data again.
4. You can also write to us at wojciech@baukit.app.

6. Analytics

For statistics on the use of the Service we use the PostHog tool, provided by PostHog Inc. (USA), which processes data on our behalf under a data processing agreement (Article 28 GDPR). The data is stored in the PostHog cloud in the European Union (Frankfurt, Germany). Your browser sends it via our domain (baukit.app/ingest), from where it goes to PostHog. We do not use any other analytics tools (e.g. Google Analytics) or any advertising tools.

a) Consent banner

On your first visit we show, at the bottom of every page, a banner with two equivalent buttons, “Accept” and “Reject”, and a link to this Policy. By clicking “Accept”, you consent (Article 6(1)(a) GDPR) to our collecting full statistics and recording sessions (point c) and saving copies of your projects (point d), in order to understand how you use the Service and to fix errors. Until you choose, the Service works as it does after you click “Reject” (point b).

We save your choice and its date in the browser storage (the baukit-consent entry in localStorage) and, after you sign in, also in your account. Without this entry we could not remember your choice, which is why it does not require consent. You can change your choice at any time via the “Privacy settings” link in the page footer. Withdrawing consent stops full statistics, session recording and project copies from that moment; it does not affect the lawfulness of processing before its withdrawal.

b) Without consent

If you reject the banner or have not yet chosen, PostHog does not save any data on your device: neither cookies nor an identifier in the browser storage. To count visits, the PostHog server creates a temporary hash (cryptographic and one-way) from the IP address, browser data and a random value that changes every day. As a result, you cannot be recognised on the following day, and we do not link the collected data with any person. The IP address is discarded before the data is saved, and we do not determine your location from it.

We collect: the pages visited, the address of the page from which you came to us and the campaign parameters in the address (utm_*), the device type, browser, operating system, screen size, clicks on buttons and links (without their text), which editor tools and commands you use and where you select them from (the toolbar, a key or the command search; without the project content), whether we have shown you a prompt to sign in or a notice that the editor does not work on a phone, and which button in them you chose, whether the editor has shown you a tutorial video, where (e.g. on an empty plan or while a drawing is being read), whether you played it, skipped to a chapter, watched it to the end or closed it, and how many seconds you watched, whether the reading of a drawing in the “New project from a drawing” feature succeeded, was stopped by you or failed, and how many seconds it took, the ready-made starter projects opened from calculators and guides, whether you created, copied or disabled a link to a project and whether you opened a project from such a link (with the link identifier, without the project content), and application errors. This data is used for statistics on the use of the Service and to fix errors. The legal basis is our legitimate interest in knowing how the Service is used and in improving it (Article 6(1)(f) GDPR). We keep it for 12 months.

If you are signed in, point e) applies instead of this point.

c) After consent: statistics and session recordings

After you click “Accept”, PostHog saves a random identifier on your device (a cookie and an entry in the browser storage, section 7), which allows us to recognise your subsequent visits. We then collect: the pages visited, the address of the page from which you came to us and the campaign parameters in the address (utm_*), the device type, browser, operating system, screen size, your IP address and the approximate location determined from it (country, region and city), all clicks together with the text of the clicked elements, the loading and performance speed of pages, and application errors. We also collect information about which tools and commands you use, what kind of changes you make to a project (e.g. “added a wall”) and what actions you perform on projects (creating, importing, exporting, opening a starter project).

We also record sessions. A recording reproduces everything that was visible on the Service's screen, including your project (also in the 3D view), mouse movements and clicks, and messages written by the application to the browser console. Password and e-mail address fields are masked in the recording; text entered in other fields, e.g. the name or note of a project, is visible in the recording.

If you are signed in, we link all this data with your account (the account identifier, e-mail address and the name and surname from your Google account). We keep statistics for 12 months and recordings for no more than 30 days; when you delete your account, we delete everything linked to it from PostHog within 30 days.

d) After consent: project copies

After you click “Accept”, the Service sends a copy of the project you are working on to our database in the EU (Supabase, Ireland): when the project is opened, every 10 minutes if the project changes, and when you leave the page. This also applies to projects saved only in the browser. The copy includes the content of the project: levels, walls, rooms, dimensions, names, notes and settings. It does not include loaded images, only references to them. If you enter personal data in a name or note, e.g. the address of the building site or the plot number, it will be included in the copy.

We link the copy with the PostHog identifier (point c) and, after you sign in, also with your account. The copies are used to understand how users use Baukit and to fix errors. Only the Administrator has access to them, and we record every access in the same register as access to the copies under section 2 e, which is kept for 2 years. We keep the copies for 90 days, and we delete copies linked to an account together with the account.

e) Signed in without consent

If you are signed in and have not accepted the banner, we collect the data listed in point b), as well as your IP address and the approximate location determined from it (country, region and city). We link this data with your account (the account identifier, e-mail address and the name and surname from your Google account) in order to know how often you come back and which features you use. In addition, we collect information about which tools and commands you use, what kind of changes you make to a project (e.g. “added a wall”), what actions you perform on projects (creating, importing, exporting, opening a starter project), which views you use (e.g. the costs view), which tutorial videos you watch, when you sign out and what errors have occurred. We do not send the content of projects, i.e. dimensions, names, addresses or images, to PostHog. PostHog keeps its identifier only in the memory of the open page and does not save it on your device.

This data is used to understand how you use the Service, to improve its features, to help you in the event of problems and to detect errors. The legal basis is our legitimate interest (Article 6(1)(f) GDPR). We keep it for 12 months, and when you delete your account we delete it from PostHog within 30 days.

You may object to this processing at any time (Article 21 GDPR) by turning off the “Usage statistics” switch in the settings (account menu › “Settings” › “Privacy”). From that moment, events from your account are not linked with you, and we count your visits as in point b), regardless of your choice in the banner, and therefore also without session recordings and project copies. We save the setting in your account, so it applies on every device on which you sign in. Turning off the switch does not delete data collected earlier; if you want it deleted, write to us (section 13).

If you have not accepted the banner, you may consent to session recording alone by turning on the “Session recording” switch in the settings (account menu › “Settings” › “Privacy”), which is off by default (Article 6(1)(a) GDPR). We save the setting in your account. You may withdraw your consent at any time by turning off the same switch; this does not affect the lawfulness of recordings made earlier. A recording covers the same as in point c) and is kept for no more than 30 days.

7. Cookies and browser storage

1. Until you accept the banner (section 6 a), the Service does not use cookies when you are not signed in. It uses the browser storage (localStorage and IndexedDB) solely to save on your device your project, your settings and the choice you made in the banner together with its date (the baukit-consent entry). When you open a project from a link, the project copy remembers which link it came from, so that the next time you open the link your copy is shown, and the browser storage records whether we have already shown a prompt to sign in for that copy (the baukit-share-claim-shown entry). It also records which tutorial videos the editor has already shown you, which ones you watched to the end and how many times you postponed the suggestion to watch one (the baukit.videos.v1 entry), so that we do not suggest them again; after you sign in, we save the same information in your account, so that it applies on every device. These entries are necessary for the Service to work, which is why they do not require consent.
2. After you sign in, the Service uses only the cookies necessary for signing in: a sign-in session cookie (Supabase Auth), which keeps you signed in until you sign out, and two short-lived cookies saved for the duration of signing in with Google (sign-in protection and the address of the page you return to after signing in). Signing in does not work without them, which is why they do not require consent. After you sign in, the browser storage also keeps information about which projects on this device belong to which account.
3. After you accept the banner, PostHog (section 6 c) saves on your device the Service's own first-party cookies with names beginning with ph_<project key>_posthog and entries in the browser storage (localStorage) with the same names, which contain a random identifier that allows your subsequent visits to be recognised. The cookies expire after 365 days. When you withdraw consent, PostHog deletes these cookies and entries, and only the information about your refusal remains in the browser storage (the __ph_opt_in_out_<project key> entry), so that it does not save them again. Before you accept and after you reject the banner, PostHog saves nothing on your device: it keeps its identifier and, after you sign in, also the session recording if you turn it on in the account menu, only in the memory of the open page until they are sent.
4. We do not use advertising cookies.

8. YouTube videos

The home page and the guide articles may contain YouTube videos. The player loads from the youtube-nocookie.com domain only after you click on the video; before that, the page does not connect to YouTube. After you click, Google may process data in accordance with the Google privacy policy.

9. Sharing data

Personal data may be shared only with entities that help us provide the service and process it on our behalf:

• Supabase Inc. – provider of the database, file storage and authentication (after signing in) and of the database of project copies you consent to in the banner (section 6 d); data stored in the EU,
• Google LLC – signing in with a Google account (OAuth) and the YouTube player after you click on a video,
• Vercel Inc. – hosting provider of the Service,
• OpenRouter Inc. and the AI model provider (currently OpenAI) – reading the drawing in the “New project from a drawing” feature (section 2 d),
• OpenRouter Inc. and the selected AI model provider – the AI assistant's replies (section 2 f),
• PostHog Inc. – statistics on the use of the Service and session recordings (section 6; data stored in the EU).

Some of these entities are based in the USA, so data may be transferred outside the European Economic Area. This also applies to PostHog: although it stores the data in the EU, it may make it available to its technical support staff and subcontractors in the USA. Such transfers take place on the basis of the European Commission's adequacy decision (the EU-US Data Privacy Framework) where the entity concerned is covered by it, and in other cases on the basis of standard contractual clauses approved by the European Commission (Article 46(2)(c) GDPR). You can obtain a copy of these safeguards by writing to the address given in section 13.

We do not sell, rent or share personal data with other entities for commercial purposes. We may disclose data to public authorities only where required by law.

10. Your rights

Under the GDPR you have the right to:

• access your data,
• rectification of your data,
• erasure of your data (the “right to be forgotten”),
• restriction of processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw consent at any time, without affecting the lawfulness of processing before its withdrawal.

You can withdraw the consent given in the banner, or give it again, via the “Privacy settings” link in the footer of every page or with the “Statistics, recordings and project copies” switch in the “Privacy” section of the settings (section 6 a). The simplest way to object to statistics linked to your account is the “Usage statistics” switch, and you can withdraw consent to session recording given in the settings with the “Session recording” switch; both are in the account menu (section 6 e). To exercise your other rights, write to wojciech@baukit.app; we will reply without undue delay and in any event within one month. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO).

11. Security

We apply appropriate technical and organisational measures, including:

• encryption of connections (HTTPS / TLS),
• control of access to data in the database (Row Level Security in Supabase): each signed-in user has access only to their own projects,
• access to users' projects and to project copies only for the Administrator, from an account protected by two-step verification, in the cases described in sections 2 e) and 6 d), with every access recorded in a register,
• signing in through Google without storing passwords,
• encryption of backups and their storage outside the database.

12. Changes to the policy

The Administrator may change this Privacy Policy, e.g. when the features of the Service, the entities processing data or the law change. We will announce changes by updating the “Last updated” date on this page, and we will also inform signed-in users of material changes by e-mail or by a message in the Service.

13. Contact

In matters concerning the protection of personal data, write to wojciech@baukit.app or by post to the Administrator's address given in section 1.

This Privacy Policy is effective from the date of its publication in the Service. Use of the Service is also subject to the Terms of Service.