Personalized. Private. In your control.
Your data powers your KX2 experience, helps make it more personal when you choose, and keeps your hydration history useful to you.

Your data stays close to you.
01On device
KX2 processes your scan on your device wherever possible.
02Secure cloud
Only when more computing power is needed, the minimum data required is sent for processing. Once complete, temporary processing data is deleted, leaving only the derived information needed for your KX2 experience.
03Your KX2 app
Your result, history and chosen context stay available in KX2. Some information is needed for the core experience; optional information can be changed by you at any time.
Your scan becomes a signal — not a face file.
KX2 reads subtle changes in reflected light from your skin (only from your forehead and cheeks; the rest of your face is blurred) and converts them into an rPPG signal used to generate your result.
Your scan is used to measure a physiological signal, not to recognize who you are or create a facial identity profile.
Only what KX2 needs — or what you choose to share.
The signal and measurements from your scan are used to generate your KX2 result.
KX2 clearly shows what is required for the core experience and what is optional.
An example of the choices in the KX2 app: switching them here changes only this picture.
You choose what becomes personal.
Some information is needed for KX2 to work. When information is optional, we tell you before you share it.
You can skip optional information and keep using core KX2, although some guidance may be less personalized. You can change your optional choices at any time.
Research
Research use is always a separate choice. If you opt in, eligible data may be used to support KX2 research and improvement under the consent shown to you; where appropriate, it may be de-identified before analysis.
You can change this choice at any time, and saying no does not change your core KX2 experience.
Protected. Limited. Not kept forever.
KX2 keeps information only as long as it is needed for its purpose, your account, legal requirements or research you chose to join.
We never save facial videos in our cloud — only the physiological signals from your scan.
Different information may be kept for different periods. KX2 keeps information only as long as reasonably needed to provide and personalize the service, maintain your account and history, protect the service, meet legal requirements, manage transactions or support research you chose to join. When information is no longer needed, it is deleted or anonymized in line with the applicable retention process.
Trusted providers may help run KX2, and receive only the information needed for the service they provide.
Trusted service providers may support hosting, authentication, analytics, communications, customer support, payments or security. They receive only the information needed for their role and are subject to appropriate privacy and security requirements. Where information is processed across borders, KX2 uses the protections required by applicable privacy law.
Access is limited to authorized people and systems, with safeguards designed to protect your information from loss, misuse or unauthorized access.
KX2 uses technical and organizational safeguards designed to protect personal information from unauthorized access, loss, misuse, alteration or inappropriate disclosure. Access is limited to authorized people and systems that need the information for an approved purpose. No digital system can guarantee absolute security.
Your data. Your choices.
Review optional context, manage research choices and communications, or request access, correction or deletion where available.
Your privacy controls bring these choices together in one place.
If you have a privacy question, want to exercise a privacy right or believe something is not working as described, contact the Kronos privacy team.
Personal by design. Private by principle.
Full privacy details
KX2 may process scan-derived data, hydration history, optional context, and account or service information depending on how you use KX2. Website, waitlist, support, payment or usage data may also be processed where those features are used. Each category is used only for the purpose shown to you, and KX2 distinguishes information needed for the service from information you choose to add.
During a scan, the camera reads subtle changes in reflected light from your skin and converts them into an rPPG signal and related measurements used to generate your KX2 result. The scan is not intended for facial recognition or identity profiling. Raw imagery is not retained after processing where the implemented system supports that design; scan-derived information needed for your result, history or personalization may be retained.
KX2 processes scan data on-device wherever possible. When additional computing power is required, the minimum data needed for that task may be sent securely for processing, after which temporary processing data is deleted according to KX2’s verified retention controls. Your result, hydration history and chosen context remain available to support your KX2 experience.
Some information is required for KX2 to provide the core experience; other context is optional. Optional information can make guidance more relevant, but you can choose not to provide it and still use core KX2. You can review and change your optional choices in your privacy settings.
Research use is separate from core KX2. If you opt in, eligible information may be used only within the scope of the research consent shown to you and, where appropriate, may be de-identified before analysis. You can change your research choice in line with the applicable consent terms, and saying no does not affect your core KX2 experience.
Different information may be kept for different periods. KX2 keeps information only as long as reasonably needed to provide and personalize the service, maintain your account and history, protect the service, meet legal requirements, manage transactions or support research you chose to join. When information is no longer needed, it is deleted or anonymized in line with the applicable retention process.
Trusted service providers may support hosting, authentication, analytics, communications, customer support, payments or security. They receive only the information needed for their role and are subject to appropriate privacy and security requirements. Where information is processed across borders, KX2 uses the protections required by applicable privacy law.
KX2 uses technical and organizational safeguards designed to protect personal information from unauthorized access, loss, misuse, alteration or inappropriate disclosure. Access is limited to authorized people and systems that need the information for an approved purpose. No digital system can guarantee absolute security.
Depending on where you live, you may be able to access, correct or delete eligible personal information; change optional personalization and research choices; manage communications; or exercise other rights available under applicable law. Some information may need to be retained where required for legal, security, transaction or research reasons.
If you have a privacy question, want to exercise a privacy right or believe something is not working as described, contact the Kronos privacy team at info@kronos.living.


