Privacy Policy.

1. Data we collect

We try to collect as little personal information as possible. We do not ask for your name, email address, or password. The data we process falls into the following broad categories:

• Data generated by your use of the App. When you first open the App, an anonymous identifier is created for your device so we can save your artwork, coin balance, and subscription status. Photos you upload and prompts you type for AI generation, together with the coloring pages produced, are stored in the cloud so you can access them across sessions. If you choose to answer the optional onboarding questions (age range, reason for using the App, where you heard about us), those answers are stored as anonymous analytics events.
• Automatic usage data. Standard technical information (app version, operating system, device model, language, network metadata) and in-app events such as screens viewed and features used. Some in-App interactions may be recorded by our analytics provider — see the list of providers below and their privacy policies for details.
• Purchase data. When you subscribe or buy coins, the purchase is processed by the Apple App Store or Google Play and relayed to RevenueCat, which gives us your subscription status and coin balance. We do not see your payment card, bank details, or full billing address.
• Push notification token. If you grant notification permission, your device push token is stored so we can deliver the notifications you have enabled.

2. How we use this data

We use the data above to:

• Provide the core service — generate coloring pages, save your artwork, and track your coin balance and subscription.
• Diagnose bugs and errors and improve the App.
• Deliver push notifications you have opted into.
• Process purchases and manage subscriptions.
• Prevent abuse and comply with legal obligations.

3. Legal basis for processing (EEA and UK users)

If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases: performance of a contract (to deliver the App and its features), legitimate interests (to keep the App secure, diagnose issues, and improve the service), consent (for iOS App Tracking Transparency, push notifications, and optional onboarding surveys — which you can withdraw at any time in your device settings), and legal obligation (where we must retain records by law).

4. Third parties we share data with

We do not sell your personal data. Purchases are handled by the Apple App Store or Google Play — they process your payment and send us back only the information we need to unlock your subscription or coins. We never see your card or bank details.

Beyond that, we share limited data with service providers that fall into the following categories. Each is contractually bound to protect your data and to use it only for the purpose we specify:

• Anonymous authentication and identity.
• Cloud hosting and storage of your artwork and uploaded photos.
• AI model providers for text prompt processing and image generation.
• Product analytics, including session replay of in-app interactions.
• Error and crash monitoring.
• Push notification delivery.

A current list of the specific sub-processors we use is available on request — email sfumisupport@gmail.com.

5. International data transfers

Our service providers may process your data outside your country of residence, including in the United States. Where required by law, we rely on appropriate safeguards — including Standard Contractual Clauses where our providers use them — to protect your data during international transfers.

6. How long we keep data

We keep your data only as long as we need it for the purposes described above.

Your generated artwork and uploaded source photos are kept until you delete the related artwork from within the App or request deletion. The anonymous user record tied to your device is kept while you continue to use the App and is deleted on request. Data held by our service providers is retained according to each provider's standard retention policy and any applicable legal requirement.

You can email sfumisupport@gmail.com at any time to request deletion of your data.

7. Your rights

Depending on where you live, you may have the right to access, rectify, delete, or restrict processing of your personal data, the right to data portability, the right to withdraw consent (for example by disabling App Tracking Transparency or push notifications in device settings), and the right to lodge a complaint with your data protection authority (in Türkiye: Kişisel Verileri Koruma Kurulu; in the EU: your national DPA).

To exercise any right, email sfumisupport@gmail.com. Because Sfumi uses anonymous authentication, please include enough information to help us locate your data — for example the anonymous user ID shown on the Profile screen, your device model, and the approximate date of first use. We respond within 30 days.

8. Data security

We use industry-standard measures to protect your data, including encryption in transit. Access to our systems is authenticated and limited. No system is perfectly secure; if we become aware of a breach that affects you, we will notify you where required by law.

9. Children's privacy

Sfumi is intended for users aged 13 and over and is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you are a parent or guardian and believe your child has used the App, email sfumisupport@gmail.com and we will delete their data. In some EEA and UK countries the age of digital consent is higher (up to 16); if you are under that age, use the App only with a parent or legal guardian's consent.

10. App Tracking Transparency (iOS)

On iOS, the App Tracking Transparency system prompts you before any cross-app or cross-website tracking occurs. If you decline, we do not track you across other companies' apps or websites. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking.

11. Changes and contact

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest version, and material changes will be announced in the App or on this website before they take effect.

For any question, request, or complaint about this Privacy Policy, email sfumisupport@gmail.com.