What stays on the device
- Everything your child colors, and their saved drawings.
- Saved photo coloring pages in My Photos.
- Your grown-up settings and your choices.
- The anonymous account number, in the device Keychain.
We cannot see any of this.
For parents
Privacy-first, in plain words
Color Garden is for children, so we built it to collect as little as possible. Here is exactly what stays on the device, what leaves it, and how you stay in control.
What we never collect
- Names, emails, ages or birthdays from children.
- Location or advertising identifiers.
- Analytics, ads or crash-reporting tools in the app. The app has none.
- Your photo library. Only the one photo you choose is used.
- Your payment details. Apple handles all payments.
What leaves the device, and when
Only a grown-up can trigger any of this, and only from the Grown-ups area.
A photo, if you choose one
If a grown-up makes a photo coloring page, the app shrinks the photo (longest side at most 1,536 pixels) and removes hidden details such as location and camera information. It is sent over an encrypted connection to our server, and from there to an outside AI service that checks it for safety and draws the coloring page.
An anonymous number
A random number, made on your device, counts your credits and free tries and lets you ask us to delete your records. It is not linked to your name, your Apple Account or your device. The AI service does not receive it.
Purchases, through Apple
If you buy credits or Premium, Apple tells us a purchase happened, using the anonymous number as a reference. We never see your card or Apple Account details.
What happens to your photo
- Before sending: shrunk and stripped of hidden details on your device. The app can also run Apple's on-device sensitive-content check when it is available.
- Safety check on the way in: if a photo is flagged, or the check cannot finish, nothing is made.
- Drawing: the AI service draws the coloring page using a fixed instruction written by us. No text from you is ever sent.
- Safety check on the way out: the finished drawing is checked too, and must look like a normal coloring page.
- Not kept by us: the photo and the drawing exist only in our server's memory while the request runs. They are never written to disk or to our logs.
- Saved on your device only if you tap Save.
Honest caveat: an outside AI service does the drawing, and it follows its own data rules. We do not control its systems, so we cannot promise a photo is erased everywhere the instant we finish. We send it only the photo and our fixed instruction, never your name or account number. The privacy policy names the provider and explains its retention.
The notice a grown-up reads and agrees to before the first photo.
The adult gate
Everything that costs money, changes settings or sends anything off the device lives in the Grown-ups area. To open it, a grown-up passes a short challenge that is easy for an adult but hard for a young child, such as holding two buttons together or tapping shapes in a spoken order. If you prefer, you can use Face ID, Touch ID or your passcode instead.
There are no links out of the children's area, no chat, no ads and no social features.
Apple's Ask to Buy and Screen Time add further protection on the device.
Deleting your data
- In the app: Grown-ups area, then Settings, then Privacy, then Delete my photo data. This removes your credit and purchase records from our server. Credits you already bought are lost.
- By email: write to [email protected] with your support code (shown in Grown-ups, Settings).
- What we keep on purpose: only scrambled references needed to stop fraud, such as which Apple purchases were already credited and whether the free tries were used. They contain no name, contact details or photos.
Read the full privacy policy and terms of use.
Coming soon to the App Store
Color Garden is coming soon to the App Store for iPad and iPhone.
Coming soon to theApp Store
Coming soon to the App Store. Questions? [email protected]