ColorMagic — Privacy Policy

Last updated: 29 July 2026 · Effective: on first publication

ColorMagic is published by Sycamore Hill Studios. It is a colouring-page app intended for children and families, and participates in Google Play's Designed for Families programme. This policy is written for parents and guardians, and describes the app exactly as built.

The short version for parents. ColorMagic collects no personal information about your child. There is no account, no sign-up, no ads, no analytics, and no tracking. We never ask for a name, age, photo, or location. What your child types is used only to draw the picture, and is never stored as a record of them.

1. What we collect

Data	Why	How long we keep it
A random app identifier A randomly generated UUID created on first launch.	To count the daily free page and to remember whether a subscription is active. It is not a hardware ID, and not an advertising ID. It cannot be used to identify a person or to follow anyone between apps.	Until you delete the data or uninstall the app.
The picture description For example "a friendly dinosaur".	Sent to our server, which passes it to Microsoft Azure OpenAI to draw the page.	Never logged and never stored. Because ColorMagic is a children's app, our server is built so that what a child types is never written to any log — only a non-reversible hash, the timing and the cost are recorded.
The generated colouring page	Stored briefly so the app can download and display it.	Automatically deleted after 30 days. It is not linked to any personal information.
Subscription status	To unlock unlimited pages. Verified directly with Google Play.	Until you delete the data or the subscription record expires.
Content reports If a grown-up reports a picture: the reason and an identifier for that picture.	To review and improve safety filtering. Required by Google Play's AI-generated content policy.	180 days.

2. What we never collect

No personal information — no name, age, birthday, email, phone number, or address.
No location, no contacts, no photos, no camera, no microphone. The app does not request these permissions.
No advertising ID, and no ads of any kind.
No analytics or crash-reporting SDK. There is no Firebase Analytics, no Sentry, no Crashlytics, and no third-party tracker in this app.
No payment details. Google Play handles all payments; we never see your card.

3. COPPA and the Families programme

ColorMagic is designed to comply with the US Children's Online Privacy Protection Act (COPPA) and Google Play's Families policy. We do not knowingly collect personal information from children. Because we collect no personal information at all, there is nothing about your child for us to disclose, sell, or share — and we do not do so.

Anything that leaves the app for a grown-up — the subscription screen, external links, and deleting data — sits behind a parental gate: a short multiplication question that a young child is unlikely to answer.

4. AI-generated pictures

Colouring pages are drawn by an artificial intelligence model (Microsoft Azure OpenAI). They are generated automatically and are not reviewed by a person before they appear.

We apply strict, child-focused safety instructions on our server: pictures must be age-appropriate, never frightening, and must not depict trademarked or copyrighted characters. If your child asks for a well-known character, the app will draw an original one of its own instead. Occasionally a picture may still come out odd — every page has a Report button, and reports are reviewed.

5. Who processes the data

Microsoft Azure (including Azure OpenAI) — hosts our server and draws the pictures. Processed in the United States (East US 2). Azure OpenAI does not use this content to train its models.
Google Play — processes payments and confirms subscription validity.

There are no other third parties. We do not sell data, and we do not share it for advertising.

6. Deleting your data

Open For grown-ups → Delete my data in the app (behind the parental gate). This removes the usage counters, the subscription mapping, and the random app identifier, along with anything saved on the device.

Deleting data does not cancel a subscription — subscriptions are managed by Google Play. To cancel, use Manage subscription in the grown-ups area, or the Subscriptions section of the Play Store app.

Parents may also email sycamorehillstudios@outlook.com to request deletion, or to ask what is held. We respond within 30 days.

7. Security

All traffic uses HTTPS. Our server holds no API keys for the AI services — it authenticates using managed workload identity, and key-based access to media storage is disabled entirely. Links to generated pictures are time-limited and expire on their own. The app is configured so its data is excluded from cloud backup and device-to-device transfer.

8. Changes

If this policy changes materially, we will update the date above and surface a notice in the app where the change affects how data is used.