Privacy Policy

Last updated November 8, 2026

MindPaint is a coloring app published by Cryptobyte LLC ("we" or "us"). This policy explains what information the MindPaint apps for iPhone, iPad and Android and the website at mindpaint.app collect, why we collect it and the choices you have.

The short version

• You can browse and color without an account, and then we collect nothing that identifies you.
• MindPaint has no ads, no ad tracking and no third-party analytics.
• Accounts are for grown-ups 18 and older. Children use profiles that a grown-up creates, with no email address and no birthdate.
• When you make a page, your description and any photos go to OpenAI to draw it. Photos are deleted as soon as the page is finished.
• You can delete your account and everything in it at any time, in the app or at mindpaint.app/delete-account.

Information we collect

Without an account

Coloring without an account stays on your device. On iPhone and iPad it can be kept in your own iCloud account, and on Android in your device's own backup. We can't see it. To show the catalog, the app asks our servers for pages, which means our servers see your device's IP address for that request.

With a grown-up account

• Email address and password. Used to sign in, confirm your email, reset your password and send notices about your account. We store your password only as a secure hash.
• Age confirmation. We ask for your birth year once to confirm you are 18 or older. We don't store it.
• Coloring progress. Saved to your account so it can follow you to other devices.
• Purchases. When you buy credits, Apple or Google tells us which product you bought and gives us a transaction reference. We never see your payment details.

Child profiles

A grown-up can add a profile for each child. A profile holds a display name, an age band such as "6 to 9", a color, an optional PIN and that child's coloring progress. We never ask for a child's email address, full name, birthdate or location.

Making pages

When you make a page we store your description, the choices you made, the finished page and the photos you added until the page is done. Children make pages from guided choices unless a grown-up lets them type their own ideas or add photos, and both settings start off.

Reports

If you report a page, we keep the page, the reason you chose and which account sent it.

Technical information

Our servers keep short-lived request logs, including IP addresses and the addresses of requests such as search words, to keep the service running and to stop abuse. We use IP addresses to limit repeated sign-in attempts.

How we use information

• To provide the app: sign-in, syncing your coloring, making pages and adding the credits you buy.
• To keep MindPaint safe: checking requests and pages for unsafe content, reviewing reported pages and stopping abuse.
• To choose pages for the public catalog. A person on our team reviews every page before it joins the catalog. Pages in the catalog are never credited to anyone, and pages made from photos are never added.
• To contact you about your account, such as confirming your email or confirming parental consent.

We don't sell personal information, share it for advertising or use it to build advertising profiles.

Who we share information with

We share information only with companies that help us run MindPaint, only for that purpose:

• OpenAI draws pages from your description and photos and checks requests and pages for safety. Under its API terms, OpenAI doesn't use this data to train its models and may keep it for up to 30 days to detect abuse.
• Cloudflare hosts our servers, database and file storage.
• Resend sends our emails, such as email confirmation and password reset.
• Apple and Google process purchases made in the app.

We may also share information if the law requires it, to protect someone's safety or as part of a sale or merger of our business, in which case this policy continues to apply.

Children's privacy

MindPaint is for families. Children don't create accounts. A parent or guardian creates the account and gives consent before adding a child profile, by confirming the account email and password. We then send a notice to that email address.

A parent can at any time:

• See and change a child's profile and settings.
• Turn off making pages, typing ideas or adding photos for that child.
• Delete a child's profile, which deletes their coloring progress.
• Delete the whole account.
• Ask us what information we hold about their child, by writing to support@mindpaint.app.

Pages a child makes from a description go to OpenAI as described above. We collect only what is needed for the child to use MindPaint, and we don't make a child's participation depend on sharing more. If you believe we hold a child's information without a parent's consent, write to us and we will delete it.

How long we keep information

• Photos added to a page request are deleted as soon as the page is finished, and within an hour if they are never used.
• Descriptions people type are removed 90 days after the page is made.
• Account information, coloring progress and pages you made are kept until you delete them or your account.
• Records of purchases are kept while your account exists, and longer where tax or accounting law requires.
• Request logs are kept for a short time, usually days.

When you delete your account we delete your account, child profiles, coloring progress and the pages your family made that aren't in the public catalog. Pages already in the catalog stay there with no link to you. Unused credits are lost.

Security

All information travels over encrypted connections. Passwords are stored as secure hashes, sign-in tokens are stored securely on your device and access to our systems is limited and protected with a second factor.

Your rights

Depending on where you live, you may have the right to see, correct, download or delete your information, or to object to how we use it. You can delete your account yourself at any time. For anything else, write to support@mindpaint.app and we will respond within 30 days. You may also complain to your local data protection authority.

Our servers may be in the United States or other countries. Where the law requires it, we protect information sent across borders with appropriate safeguards.

Changes to this policy

If we change this policy we will update the date above. If the change is significant, we will tell you in the app or by email before it applies.

Contact us

Cryptobyte LLC
Email: support@mindpaint.app