Privacy Policy

Effective date: June 11, 2026  |  Last updated: June 11, 2026  |  Contact: adel.elmenawy@yahoo.com

Who we are

AI Coloring Book ("we", "us", "our") is a mobile application that lets children and families create custom coloring pages using AI image generation. We are operated by Adel Sayed (individual developer), reachable at adel.elmenawy@yahoo.com.

1. Children's privacy (COPPA / GDPR-K)

This app is designed for children aged 2 and up. We comply with the U.S. Children's Online Privacy Protection Act (COPPA) and applicable international equivalents (UK Children's Code, EU GDPR Article 8, UAE PDPL).

• We do not collect personal information from children without verifiable parental consent.
• Account creation requires a parent or guardian email address and acknowledgement of this policy.
• Parents may review, correct, or delete their child's account data at any time by contacting us at adel.elmenawy@yahoo.com.

2. What we collect

Data	Purpose	Retained
Parent/guardian email	Account creation and recovery	Until account deleted
Anonymous usage events	App improvement (generation counts, error rates, latency)	90 days, then aggregated
Purchase receipts (hashed)	Credit balance verification	Duration of account
Device ID (anonymous)	Per-device rate limiting to prevent abuse	30 days rolling

We do not collect names, addresses, phone numbers, or any other personally identifiable information beyond the parent email.

3. How we use uploaded photos

When a parent enables the "photo-to-coloring-page" feature:

• The photo is transmitted over an encrypted HTTPS connection directly to our image generation server.
• The photo is processed in memory only — it is never written to disk, stored in a database, logged, or retained in any form after the API call completes.
• The resulting coloring-page image is returned to the device. We do not keep a copy.
• We do not use uploaded photos to train AI models.
• We do not share uploaded photos with third parties.

4. AI-generated images and SynthID watermarking

Coloring pages are generated using Google's Gemini image generation model running on Google Cloud Vertex AI. Google applies an invisible digital watermark called SynthID to AI-generated images. This watermark:

• Is embedded in the image data by Google and cannot be removed by us.
• Does not contain any personal information.
• Identifies the image as AI-generated if analyzed by compatible tools.

We do not apply any additional tracking or identification mechanisms to generated images.

5. Data we do not collect

• We do not collect behavioral data for advertising purposes.
• We do not sell, rent, or trade personal information to any third party.
• We do not use cross-app tracking or advertising identifiers (no IDFA / GAID usage for ads).
• We do not run behavioral advertising of any kind.
• We do not share data with social networks or analytics companies beyond the anonymous, aggregated metrics described in Section 2.

6. Third-party services

Service	Purpose	Privacy policy
Supabase	Authentication and credit balance storage	supabase.com/privacy
Google Cloud Vertex AI	AI image generation	cloud.google.com/terms/cloud-privacy-notice
Apple App Store / Google Play	In-app purchases	Per-platform policies

Each third-party service processes only the minimum data required for its function. We do not share photo data with any of these services beyond what is necessary for image generation (Google Cloud only).

7. Data retention and deletion

• Account data: Retained until you delete your account. To delete, use Account → Delete Account in the app, or email adel.elmenawy@yahoo.com.
• Usage events: Auto-deleted after 90 days.
• Photo data: Not retained (see Section 3).
• Generated coloring pages: Stored on-device in the app's local gallery only. Uninstalling the app removes all local data. We do not store copies.

8. Security

All data in transit is encrypted using TLS 1.2 or higher. Stored credentials (API keys, service account keys) are held in environment-variable secrets and never exposed in source code or client-side bundles.

9. Parental controls

Parents can:

• Delete the account and all associated data from Account → Delete Account within the app. This immediately and permanently removes all stored data.
• Contact us at adel.elmenawy@yahoo.com to exercise any COPPA/GDPR rights (data access, correction, deletion). We will respond within 48 hours.

The app's parental gate (a math challenge on every sensitive action) helps ensure children cannot change settings or access mature features without a parent present.

10. Changes to this policy

We will notify registered parent/guardian accounts by email at least 14 days before any material change to this policy. Continued use after that date constitutes acceptance.

11. Contact

For privacy questions, data requests, or to exercise your rights:

Email: adel.elmenawy@yahoo.com
Address: The Gardens, Rosa Road, Dubai, UAE

For urgent concerns about a child's data, we commit to responding within 48 hours.