Privacy Policy

Imagine & Color · Effective 8 August 2026

Imagine & Color is a coloring book app for iPad. Your artwork stays on your device except for the temporary processing and retry cache described below. We built the app to collect as little as possible.

What stays on your device

Your coloring pages, projects, palettes, and settings are stored on your iPad. If you turn on iCloud backup in the app, copies are stored in your own iCloud Drive and are not accessible to us.

The app creates a random anonymous purchase identity in the Apple Keychain so credits can survive a reinstall. If iCloud Keychain is enabled, Apple may sync that identity to your other devices. It is not your Apple ID, name, or email, and we cannot use it to learn those details.

What our server processes

When you use the Studio, the app sends your chosen theme, category, and optional scene description to our Cloudflare Worker, which forwards them to OpenAI to draw the coloring page and screen the request for kid-appropriate content. The prompt is processed for the request and is not written to our D1 database. The completed response, including the generated image, is cached in Cloudflare Workers KV for up to 24 hours so an interrupted retry can receive the same paid result instead of being charged twice.

To prevent abuse, the app uses Apple's App Attest. Our D1 database stores the random anonymous purchase identifier, a one-way hash of its recovery secret, App Attest device records, hashed session tokens, generation request status, credit and subscription balances, an immutable credit ledger, and provider budget reservations. These records are pseudonymous and are not linked by us to a name, email address, Apple ID, advertising identifier, contacts, photos, or location.

When you buy a generation pack or a membership, Apple processes the payment. Our server receives Apple-signed transaction and lifecycle-notification data such as the transaction identifier, product, purchase environment, dates, status, and anonymous purchase identifier. We never receive your card or other payment details.

Cloudflare may retain limited operational request metadata and error logs under our service configuration. Our application logs use random support references, request identifiers, selected collection/theme metadata, quality settings, and outcomes; they do not intentionally log scene descriptions or generated image contents. Financial and security records are kept as needed to operate the service, restore purchases, investigate abuse or disputes, and meet legal obligations.

What we don't do

Service providers

iCloud

If you choose to back up your pages, they are copied to your own iCloud Drive under your Apple Account. That copy is yours — it is not sent to us and we cannot see it.

Children's privacy

The app is designed to be family-friendly. We do not knowingly collect names, contact details, location, advertising identifiers, or other directly identifying information from children. The pseudonymous operational and purchase records described above are used only to provide and protect the app.

Deleting your data

Deleting the app removes its local artwork and settings, but may not remove an iCloud Drive backup, the synchronizable Keychain identity, or server-side purchase and security records. Use Settings → Legal → Data & Privacy → Delete Server Data to delete eligible server records, or contact us at ImagineAndColorApp@gmail.com with the support reference shown in Settings. Deletion forfeits remaining generations. Some transaction and ledger records may need to be retained for fraud prevention, accounting, dispute handling, or legal obligations.

Contact

ImagineAndColorApp@gmail.com

Changes

We will update this page and the effective date if our practices change.