Privacy Policy

Last updated: 12 October 2026 · Effective: 12 October 2026

1. Controller

FaceyIT FZ-LLC, Compass Building, Al Shohada Road, Street C – Al Hamra Area, Ras Al Khaimah, United Arab Emirates. Privacy contact: support@endlesscoloring.app.

2. What we collect

Data	Why	Kept
Parent's e-mail address and the language chosen for e-mails	To create the account, log in, send service and billing messages	Until the account is deleted
Password (hashed, PBKDF2)	To secure the account — we never see the password itself	Until the account is deleted
If you sign in with Google or Apple: the account identifier the provider gives us and the e-mail address it reports; for Sign in with Apple also a token that lets us revoke the sign-in	To sign you in; to revoke the Apple sign-in when the account is deleted	Until the account is deleted
Subscription: status, source (web, App Store, Google Play or free days), plan and end date; for web payments the Stripe customer ID and the card brand and last four digits reported by Stripe; a random account tag the app passes to Apple or Google with a purchase	To open the library to subscribers on every device and to show the parent how they pay	Until the account is deleted; payment records held by Stripe, Apple and Google follow their own rules
Time zone of the parent's device (an offset such as UTC+4, not a location), sent by the app at every launch	To send the reminder that the free days are ending in the daytime, not at night	Until the account is deleted
Free-trial device marker. On Android it is a one-way fingerprint of the app-specific Android ID, computed on the device; on iOS a random string the app keeps in the device keychain; on the web a random string in the browser. The server stores only a keyed hash of it and the account it was used for	So that the free days are given once per device, not to every new account on the same device	12 months, also after the account is deleted
Usage counters: the events “drawing opened / finished / added to favourites” (only the ID of the drawing) with a random tag that exists only in the app’s memory and changes every day. They carry no account, e-mail or child data	To know which drawings work and to plan new ones	Summed per drawing and per day; the daily tag is kept only with the day it was used. Not linked to the account and not stored on your device
Drawings and child profiles — only while syncing is on (see below): finished and unfinished drawings and the names your child gave them, favourites, and for each child profile the animal badge and the coloring-page category	To show the same drawings on the phone, tablet and in the browser	Until deleted in the app or the account is removed
Technical logs of the server (IP address, request time)	Security and abuse prevention	Up to 30 days
Failed sign-in attempts (e-mail address entered, time)	Protection against password guessing	24 hours
Messages you send to our support address	To answer you	As long as needed to handle your request

What we do NOT collect

• No name, photo, voice, location or contacts of the child.
• No advertising identifiers (no IDFA/AAID), no third-party analytics or ad SDKs.
• The name you give a child profile stays on the device (in the web version, in your browser's local storage) and never reaches our servers.
• We do not ask for or store a child's age or date of birth. The app only has coloring-page categories “2–3”, “4–5” and “6–8” — a difficulty level for the drawings, not the child's age: a child can color in any of them.

Drawings on all devices (syncing)

Since 27 August 2026 the app can show the same drawings on every device where you sign in with your account. To do that, a drawing — finished or still in progress: the coloured areas, the strokes and the name your child gave it — is stored on our server. Nothing else travels with it: no photos, no voice, no location, and not the name of the child profile.

So that a child finds their own profile and favourites on another device, a few more things are stored on the server: the list of favourite pages, the number of the animal badge and the chosen coloring-page category (“2–3”, “4–5” or “6–8”). The child's name is not among them.

Syncing works for a signed-in account while it has free days or a subscription. It is on by default and can be switched off at any time in the parents' settings, behind the parental gate. Step-by-step instructions: deleting your data. Switched off, nothing new leaves the device and everything stays on it. A drawing deleted in the app is deleted from the server too, and deleting the account removes every drawing with it.

Legal bases (EU/EEA and UK)

• Contract (Art. 6(1)(b) GDPR): the account and sign-in, the subscription and access on all devices, service and billing e-mails (including the reminder that the free days are ending) and syncing drawings between your devices.
• Legitimate interests (Art. 6(1)(f) GDPR): server logs and failed sign-in records for security, the free-trial device marker against repeated free days, usage counters to improve the library, and backups to recover from failures.
• Legal obligation (Art. 6(1)(c) GDPR): keeping billing records where tax and accounting law requires it, and answering requests from you and from authorities.

3. Children's privacy

Endless Coloring is made for children aged 2–8, but only an adult can create an account. Children do not sign in and are never asked for personal data. We do not show advertising, we do not include social features, chats or third-party links inside the child experience, and purchases, sign-in, sharing and settings sit behind a parental gate.

What a child makes in the app can still say something about the child: the drawings and the names the child gives them. They stay on the device unless syncing is on (see above) and are never shared with anyone. Please make sure the child does not type a full name, an address or other contact details into the name of a drawing.

This approach is designed to meet COPPA (United States), the GDPR including its rules for children’s data (EU/EEA), the UK GDPR and the UK Age Appropriate Design Code, as well as the Apple App Store and Google Play Families rules. If you believe a child has provided us personal data, write to us and we will delete it promptly.

4. Who processes data for us

• Hostinger — our server (VPS) in Germany: the account database, synced drawings, usage counters, server logs and the coloring-page library. Coloring pages are served directly from this server.
• Stripe — payments on the web; receives the parent's e-mail address. Card details go directly to Stripe; we never receive or store card numbers, only the card brand and last four digits that Stripe reports.
• Apple (iOS app only) — Sign in with Apple and App Store purchases. We check purchases with Apple using the transaction ID and the account tag.
• Google — Google Sign-In (web, Android and iOS) and Google Play purchases, which we check with Google using the purchase token and the account tag.
• Resend — sends our e-mails (confirmation codes, password reset, deletion links, billing notices); receives the address and the content of each e-mail.
• Migadu — hosts the mailbox support@endlesscoloring.app, i.e. the messages you send us.
• Backblaze (B2) — off-site backups of the account database, including synced drawings, sent over an encrypted connection.
• Google Drive (Google Workspace) — a second off-site location for the same backups.
• Cloudflare — DNS for our domains only. Since 23 August 2026 our websites, the app and the coloring pages do not pass through Cloudflare.

Stripe, Apple and Google handle payments and sign-in also under their own privacy policies. We do not sell personal data and do not share it for advertising. AI tools are used to produce coloring pages before publication; no user data is sent to them.

5. Where data is stored

We are based in the United Arab Emirates. Our server with the account database and the coloring-page library is hosted by Hostinger in Germany (Frankfurt). Backup copies are kept at Backblaze and in Google Drive, which may store them outside the EU/EEA, and on a work computer of the operator. Our other providers process data in the countries where they operate, including the United States.

If you are in the EU/EEA or the UK, this means that your data is transferred to countries without an adequacy decision, such as the United Arab Emirates. We rely on the data-processing terms of our providers, which include the EU Standard Contractual Clauses (and, for the UK, the International Data Transfer Addendum) where the provider offers them, and we transfer only what is needed to run the service.

6. Your rights

You can ask us to access, correct, export or delete your data, and to restrict or object to processing. Write from the account e-mail to support@endlesscoloring.app; we answer within 30 days. If you are in the EU/EEA or the UK you may also complain to your local data-protection authority.

Right to object. Where we rely on legitimate interests (see “Legal bases” above), you can object at any time by writing to us. We will then stop, unless we have compelling reasons to continue, such as preventing repeated free days on the same device.

We have not appointed a data protection officer: for anything about your data, write to the address above. We do not make decisions about you by automated means, including profiling. An e-mail address is needed to create an account; without it we cannot provide the service.

Deleting your account

You can delete the account yourself: in the app (the parents' section, behind the parental gate → Delete account) or on the website, on the page Delete your account (we send a confirmation link to the account e-mail). You can also send "Delete my account" to support@endlesscoloring.app from the address you registered with; we then delete it within 30 days.

Deletion takes effect immediately. It removes the account, the e-mail address and password, Google and Apple sign-ins, the subscription and access records, and every drawing, favourite and child profile synced to our server. A web subscription is cancelled and the customer record at Stripe is deleted; Sign in with Apple is revoked.

Subscriptions bought in the App Store or Google Play are not cancelled by deleting the account. Cancel them in the subscription settings of the App Store or Google Play, otherwise the store keeps charging.

What remains after deletion: the free-trial device marker (12 months, see above); usage counters, which are not linked to the account; server logs (up to 30 days); payment records that Stripe, Apple and Google keep under their own legal obligations; and, when our support deletes an account on request, a note of the deletion (e-mail address and date) that shows the request was carried out. Deleted data can also remain in backups for a while: up to 14 days on our server, up to 45 days at Backblaze, and longer in the monthly archive copies. Backups are access-restricted and used only to restore the service after a failure.

7. Security

All connections use HTTPS. Passwords are stored as PBKDF2 hashes with per-user salt. Access to the server is limited to key-based administration. No system is perfectly secure, but we take these measures seriously and will notify you and the relevant authority of a breach where the law requires it.

8. Cookies and storage on your device

We use no advertising or analytics cookies and no tracking, so there is no cookie banner. Only what the service needs to work is stored on your device:

Where	What	Why	How long
Website	The chosen language	To show the site in your language	Until you clear the browser data
Web app	Login token, settings, child profiles (names stay here), drawings and favourites, in the browser’s storage	To keep you signed in and keep your drawings	Until you sign out or clear the browser data; the login token expires after 30 days
iOS and Android apps	Login token, settings, child profiles, drawings and favourites, in the app’s private storage	For the app to work, also offline	Until you sign out or remove the app
Web app, iOS and Android apps	Free-trial device marker (see section 2)	To give the free days once per device	On the device until the app or browser data is removed (on iOS it can survive reinstalling); on our server 12 months

Usage counters use a random tag that exists only in the app’s memory and changes every day; it is not stored on your device. If you choose Sign in with Google on the web, Google’s sign-in window may set Google’s own cookies under Google’s policy.

9. Changes to this policy

If we change this policy materially, we will post the new version here and inform account holders by e-mail before it takes effect.

10. Contact

FaceyIT FZ-LLC, Compass Building, Al Shohada Road, Street C – Al Hamra Area, Ras Al Khaimah, UAE · support@endlesscoloring.app