Privacy Policy
In short. We collect as little as possible. Children do not have accounts and we do not knowingly collect personal data from children. From the parent we store an e-mail address, a hashed password and the subscription status. There is no advertising, no third-party trackers and no selling of data. Ever.
1. Controller
FaceyIT FZ-LLC, Compass Building, Al Shohada Road, Street C – Al Hamra Area, Ras Al Khaimah, United Arab Emirates. Privacy contact: support@endlesscoloring.app.
2. What we collect
| Data | Why | Kept |
|---|---|---|
| Parent's e-mail address | To create the account, log in, send service messages | Until the account is deleted |
| Password (hashed, PBKDF2) | To secure the account — we never see the password itself | Until the account is deleted |
| Subscription status and Stripe customer ID | To open the library to paying users | Until the account is deleted + accounting retention |
| Anonymous usage counters (a random app identifier, which drawing was opened / finished / liked) | To know which drawings work and to plan new ones | Aggregated by day, no profiles |
| Drawings your child coloured and the names given to them — only if syncing is on (subscription required) | To show the same drawings on the phone, tablet and in the browser | Until deleted in the app or the account is removed |
| Technical logs of the server (IP address, request time) | Security and abuse prevention | Up to 30 days |
What we do NOT collect
- No name, photo, voice, location or contacts of the child.
- No advertising identifiers (no IDFA/AAID), no third-party analytics or ad SDKs.
- The child's name and age chosen on the website stay in your browser's local storage and are never sent to our servers.
- The name and age you give a child profile stay on the device and never reach our servers.
Drawings on all devices (syncing)
Since 27 August 2026 the app can show the same drawings on every device where you sign in with your account. To do that, a drawing — the coloured areas, the strokes and the name your child gave it — is stored on our server. Nothing else travels with it: no photos, no voice, no location, and not the name of the child profile.
Syncing is available with a subscription and can be switched off at any time in Settings, behind the parental gate. Step-by-step instructions: deleting your data. Switched off, everything stays on the device, exactly as before. A drawing deleted in the app is deleted from the server too, and deleting the account removes every drawing with it.
3. Children's privacy
Endless Coloring is made for children aged 2–8, but only an adult can create an account. We do not knowingly collect personal information from children, we do not show advertising, we do not include social features, chats or third-party links inside the child experience, and purchases sit behind a parental gate.
This approach is designed to meet COPPA (United States), the GDPR/GDPR-K rules for children (EU/EEA and the UK) and Apple's Kids Category and Google Play Families requirements. If you believe a child has provided us personal data, write to us and we will delete it promptly.
4. Who processes data for us
- Stripe — payments on the web. Card details go directly to Stripe; we never receive or store card numbers.
- Apple / Google — payments inside the mobile apps, under their own privacy policies.
- Cloudflare — content delivery and protection of our websites.
- Our own server (Hostinger VPS, EU) — the account database and the coloring-page library.
We do not sell personal data and do not share it for advertising. AI tools are used to produce coloring pages before publication; no user data is sent to them.
5. Where data is stored
Accounts and the library are hosted on our server in the European Union, with content distributed via Cloudflare's global network. Where data leaves the EU/EEA, it is protected by appropriate safeguards (such as EU Standard Contractual Clauses with our processors).
6. Your rights
You can ask us to access, correct, export or delete your data, and to restrict or object to processing. Write from the account e-mail to support@endlesscoloring.app; we answer within 30 days. If you are in the EU/EEA or the UK you may also complain to your local data-protection authority.
Deleting your account
Send "Delete my account" to support@endlesscoloring.app from the address you registered with. We delete the account, e-mail address and subscription record within 30 days; an active subscription is cancelled at the same time. Records we must keep for accounting or legal reasons are retained in the minimum form required by law.
7. Security
All connections use HTTPS. Passwords are stored as PBKDF2 hashes with per-user salt. Access to the server is limited to key-based administration. No system is perfectly secure, but we take these measures seriously and will notify you and the relevant authority of a breach where the law requires it.
8. Cookies
The website does not use advertising or analytics cookies. The web application stores a login token and your settings in your browser's local storage so you stay signed in — this is strictly necessary for the service to work.
9. Changes to this policy
If we change this policy materially, we will post the new version here and inform account holders by e-mail before it takes effect.
10. Contact
FaceyIT FZ-LLC, Compass Building, Al Shohada Road, Street C – Al Hamra Area, Ras Al Khaimah, UAE · support@endlesscoloring.app