Privacy policy

Effective October 11, 2026

ColorMallow provides coloring activities and optional generated coloring pages. This policy explains the information used by the app and this website, and the controls available to parents and guardians.

1. Who operates ColorMallow

Living Wire LLC operates ColorMallow. Parents or guardians can contact us using the details on our support page.

2. Information that stays on the device

Coloring strokes, colored artwork, saved-picture previews, coloring-level and interest preferences, and parent-gate settings are stored locally. Colored artwork is not uploaded to our servers. The app does not request a child’s name, date of birth, email, precise location, contacts, or photo. It does not include camera uploads, a public gallery, or chat.

The parent PIN is stored using protected device storage. If you enable device authentication, iOS performs the check. We do not receive face or fingerprint data.

3. Anonymous identity and service information

When online features are used, Firebase Authentication creates an anonymous account identifier. Anonymous means no email or password is required; it does not mean that no data is collected. Firebase App Check verifies requests from the app. We use the account identifier to associate generated pages, job status, membership access, and Magic Page balances with the app installation.

Our service providers may process technical information such as IP addresses, app/device integrity signals, service logs, and error information to operate and secure the service. We do not use advertising SDKs or behavioral analytics SDKs.

4. Making a Magic Page

The subject, setting, activity, and coloring level you choose—or a custom description entered by a grown-up—are sent to our backend to generate a picture. OpenAI processes the scene description, creates an illustration, and helps review it for safety and quality. We do not send your Firebase account identifier to OpenAI.

Please do not include a child’s name, address, contact information, or other personal details in a custom description. Custom descriptions are intended for grown-ups and sit behind the parent gate.

Firebase stores generation status, generated source pictures, and related service records. The scene description is removed from our job/audit record after terminal processing; generated assets and operational records remain until deletion or necessary service cleanup. Providers may retain API data or technical logs under their own applicable terms and policies.

5. Purchases and credit balances

Apple processes App Store purchases. RevenueCat processes subscription status, store transaction references, product identifiers, and Magic Page balances using the app’s anonymous identifier. We do not receive your payment-card number. Purchase records may remain with Apple, RevenueCat, or in billing records for transaction validation, fraud prevention, and applicable recordkeeping obligations.

6. Why information is used and who receives it

We use service information to provide coloring-page generation, deliver private pages, manage memberships and credits, refund failed generation, secure requests, troubleshoot problems, and respond to support requests. Service providers include Google Firebase, OpenAI, RevenueCat, and Apple. Information may also be disclosed when necessary to meet a legal obligation or protect the service. We do not sell personal information or use app information for targeted advertising or tracking across other companies’ apps and websites.

7. Parents, children, and support

The app’s coloring activities can be used by children. Purchases, custom descriptions, and deletion are protected by a parental interaction gate. That gate does not verify age and is not a substitute for legally required parental consent. Parents and guardians should manage online features and avoid including children’s personal information in descriptions or support messages.

If you contact support, we receive the information you send, such as your email address and issue details, and use it to respond and resolve the request. If you believe a child’s personal information was provided unintentionally, contact us through support so we can investigate and address it.

8. Retention and deletion

Local artwork remains on the device until you delete it or the app’s local data is removed. There is no cross-device colored-artwork backup. Uninstalling can remove that artwork.

To delete app data, unlock Grown-ups and choose Delete my app data. An internet connection is required, and any active generation must finish first. This removes local artwork and settings, generated source pages in our storage, associated generation records, and the anonymous Firebase account. Billing records held by Apple or RevenueCat may be retained separately. Store transactions and records needed for legal, billing, or security purposes may remain as necessary.

Deleting data does not cancel a subscription. Cancel subscriptions separately in your App Store account settings. Contact us through support for help with access or deletion requests; we may need information sufficient to locate your app’s records.

9. Security and international processing

We use authenticated access, app-integrity checks, access rules, and protected device storage to limit access to information. No storage or transmission method guarantees absolute security. Providers may process information in the United States or other countries where they operate.

10. This website

This is a static informational website hosted by Firebase Hosting. We do not add advertising, analytics, tracking pixels, or account sign-in to these pages. Hosting providers may process ordinary request information, including IP addresses, for content delivery and security. Following a link to another provider is subject to that provider’s policies.

11. Updates and contact

We may update this policy when the app or its practices change. The effective date above identifies the current version. Material changes will be reflected here and, where appropriate, in the app.

For support or privacy requests, email cyrjake@gmail.com. Please contact us as a parent or guardian; do not send a child’s personal information.