Legal
Privacy Policy
Last updated: 2026-04-29
Plain English summary: We try to collect only what we need to run ColoringStudio.ai, keep accounts secure, generate coloring pages, and improve the product. We do not sell your personal information. We send prompts and any photos you upload to AI providers and other service providers so they can return your generated coloring pages. You can email support@coloringstudio.ai any time to ask for deletion or to ask questions.
1.Introduction
This Privacy Policy explains how Christian Martin, an individual doing business as ColoringStudio.ai ("ColoringStudio.ai", "we", "us", or "our") collects and uses information when you use the website at coloringstudio.ai, related subdomains, and the application (the "Service"). It applies alongside our Terms of Use.
2.Information We Collect
We collect information in the categories below.
Account and authentication
- Supabase user ID, email address, and login state. If you sign in with Google, we receive the basic profile information Google returns (such as name, email, and profile image). If you use a magic link, we use your email to send the link.
- Password reset and email verification metadata when applicable.
Billing and credits
- Stripe customer ID, subscription ID, payment intent IDs, plan, amount, status, currency, and renewal dates.
- Credit balance, credit reservations, transaction history, and generation costs.
- We do not store full payment card numbers on our servers. Card details are entered into Stripe directly.
Usage and analytics
- Pageviews, page leaves, click and funnel events, web vitals metrics, UTM attribution, referrer, user agent, device type, IP address (used by analytics providers for approximate location and abuse prevention), and session identifiers.
- Server-side analytics events stored in Supabase, such as funnel events and feature usage.
Errors and performance monitoring
- Error reports, stack traces, browser and device information, performance traces, and breadcrumbs.
- Session replay snapshots covering the pages you saw and the actions you took. Text, form inputs, and media are masked before transmission. See "Analytics, Cookies, Local Storage, and Session Replay" below for the full list of protections.
Marketing and waitlist
- Email addresses and any source or attribution metadata submitted through waitlist forms, lead-magnet pack claims, or similar entry points.
Feedback and support
- Ratings, categories, and messages you send through our in-app feedback form or the UserJot widget. Feedback may be linked to your user ID and email.
Quiz answers
- Your answers to optional product quizzes, the resulting personality label, and the recommended pack slugs.
3.Content You Provide
When you use the Service, we collect the content you submit and the content the Service produces for you, including:
- Text prompts, optimized prompts, style choices, complexity settings, and theme settings.
- Uploaded photos and other reference images.
- Generated coloring page images and related metadata (style, model, generation parameters, timestamp).
- Items you save to your private gallery or as "Keepers", including the name and visibility you assign.
- Acknowledgement that you are 18 or older for mature or playful profanity categories. This acknowledgement is stored in your browser's local storage.
4.Uploaded Photos and Generated Images
When you upload a photo, we treat it as your User Content under our Terms of Use. We send your prompts and uploaded images to AI model providers (currently Google Generative AI / Gemini) so they can generate your coloring page. We also store the original upload, the generated image, and related metadata in Supabase storage and database tables tied to your account.
Uploaded photos may include sensitive content, such as images of children, family members, pets, classrooms, homes, schools, or other personal environments. You are responsible for having the rights and consents needed to upload them. We process them as described in this Policy and the Terms of Use.
5.Children and Student Information
ColoringStudio.ai is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Children under 13 may not create accounts.
If a parent, legal guardian, or teacher uploads a photo of a child, that photo is treated as the adult account holder's User Content. The adult account holder is responsible for having consent and authority before uploading.
Parents and legal guardians can review or request deletion of any information about their child by contacting support@coloringstudio.ai. We will delete it from our active systems and ask our service providers to do the same, subject to their retention policies and applicable law.
Schools and teachers must not upload student photos or student information without the authority and consents required by their school, district, parents, and applicable law. We are a general-audience SaaS tool. We do not sign FERPA, school district, or student data privacy addenda by default, and we do not promise compliance with any specific student-privacy framework. If your district requires a separate data processing agreement, please contact us before uploading student data.
6.How We Use Information
We use information to:
- Run the Service, generate coloring pages, and deliver outputs.
- Authenticate users and keep accounts secure.
- Process payments, credits, subscriptions, and refunds.
- Provide private galleries, Keepers, and history.
- Personalize quiz results and recommendations.
- Send transactional email (receipts, password resets, account notices).
- Send marketing email about ColoringStudio.ai when you opt in, join the waitlist, or claim a lead-magnet pack. You can unsubscribe at any time.
- Detect, prevent, and respond to fraud, abuse, security incidents, and policy violations.
- Debug errors and improve performance, reliability, and quality.
- Comply with legal obligations.
7.AI Processing and Third-Party Service Providers
We use third-party providers to operate the Service. They process information on our behalf under their own terms and security practices. The current providers are listed below.
| Provider | Purpose | Data they may process |
|---|---|---|
| Supabase | Auth, database, storage, edge functions. | Account, content, billing metadata, analytics events. |
| Google Generative AI / Gemini | AI model inference for coloring pages. | Prompts and uploaded images submitted for generation. |
| Stripe | Payments, subscriptions, credit purchases, payouts. | Name, email, billing details, payment method info, transactions. |
| Vercel | Hosting and deployment. | Request logs, IP address, user agent, performance data. |
| PostHog | Product analytics and funnels. | Pageviews, events, device info, IP, identifiers, UTM data. |
| Sentry | Error monitoring, performance, session replay. | Error data, breadcrumbs, masked replay snapshots (text, inputs, and media redacted), device info. |
| UserJot | In-app feedback widget. | Feedback content, user ID, email, page context. |
| Loops | Marketing email and lifecycle. | Email, name, attribution metadata, list membership. |
| Resend | Transactional and marketing email delivery. | Email address, message content, delivery metadata. |
We do not use your prompts, uploads, or generated outputs to train our own foundation models. AI providers may process your prompts and uploads to deliver results, subject to their own terms. If you share a generated file using your device's native share menu, the app you choose receives the file under its own terms.
8.Payments
All payments are processed by Stripe. We do not store full payment card numbers on our servers. We receive limited billing metadata from Stripe (such as customer ID, last four digits of the card, brand, country, and subscription status) so we can show your plan and history.
Stripe's privacy practices are described at stripe.com.
9.Analytics, Cookies, Local Storage, and Session Replay
We use cookies, local storage, and session storage to keep you logged in, remember preferences, capture UTM attribution, and measure how the Service is used. Some examples:
- Supabase auth session persistence.
- Guest projects, recents, favorites, and counters.
- Demo and onboarding state.
- Funnel and UTM session keys.
- Mature-content age acknowledgement (stored locally in your browser).
- Sidebar and theme preferences.
We use PostHog for product analytics. We use Sentry for error monitoring, performance, and session replay. Session replay records page interactions to help us reproduce and fix bugs. Our Sentry replay configuration ships with the following privacy protections enabled:
- Text masking. Every text node on the page is redacted before transmission. Prompts you type, account names, page copy, and any other on-screen text appear in replays as placeholder characters, not the original content.
- Input masking. Values you type into form fields (text inputs, textareas, select boxes) are redacted in the same way.
- Media blocking. Images, video elements, and canvas content render as placeholders in replays. Photos you upload and coloring pages we generate are not transmitted as part of the replay.
- Network body suppression. Replays do not capture HTTP request or response bodies. Only metadata (URL, status code, timing) is recorded.
Sentry still receives metadata that helps us debug: URLs you visit within the Service, click and navigation breadcrumbs, browser and device information, and error stack traces. Performance traces and error reports are also sent under standard sampling. See "Your Choices and Rights" for how to contact us with concerns.
At this time, we do not provide an in-product analytics opt-out toggle. You can use your browser's privacy controls (such as cookie blocking, "Do Not Track", or extensions) to limit analytics. Disabling cookies or storage may break parts of the Service.
10.Email, Waitlists, Pack Claims, and Marketing
When you join the waitlist, claim a lead-magnet pack, or sign up for product updates, we store your email and any source or tier metadata. We sync these contacts to Loops, and we send email through Loops or Resend.
Transactional emails (such as receipts, magic links, password resets, and account notices) are sent regardless of marketing preferences. Marketing emails always include an unsubscribe link. You can also email support@coloringstudio.ai to opt out.
11.Feedback and Support
When you contact support or submit feedback, we receive what you send us, including the page or feature you were using, your email, and your user ID where applicable. We use this to respond, investigate, and improve the Service.
12.When We Share Information
We share information only as described below.
- With service providers that help us run the Service (see the table above). They process information on our behalf.
- With AI providers as needed to generate the outputs you request.
- With participants in payouts (such as Stripe Connect) when you join our affiliate program and earn a commission.
- In response to lawful requests from law enforcement or other authorities, or to enforce our Terms, prevent fraud, protect people, or defend our rights.
- In a corporate transaction (merger, acquisition, financing, or asset sale), in which case we will give notice and continue to protect your information consistent with this Policy.
- With your direction, such as when you choose to share a generated file using your device's native share menu.
We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising.
13.Public Sharing and Galleries
Public sharing and public galleries are currently turned off. Generated outputs and saved Keepers are visible to you in your private account by default. If we add opt-in public sharing in the future, we will tell you before any of your content is shown to other users, and we will give you controls to keep content private.
14.Data Retention
We keep account, content, billing, and analytics information for as long as your account is active and as needed to provide the Service. After you delete your account, we delete account-level records from our active systems within a reasonable period and ask our service providers to do the same, subject to their retention policies. We may keep certain records longer when required by law (for example, tax and payment records) or for legitimate business reasons such as fraud prevention, dispute resolution, security, and backup integrity.
Aggregated or de-identified data that no longer identifies you may be kept and used for analytics and improvement of the Service.
15.Your Choices and Rights
You can:
- Update your account information from settings.
- Delete individual generations or saved Keepers from your gallery.
- Cancel your subscription from settings or by contacting us.
- Request deletion of your account and associated content by emailing support@coloringstudio.ai. We will verify your identity before deleting.
- Unsubscribe from marketing email at any time.
- Use your browser's privacy controls (cookie settings, "Do Not Track", extensions) to limit analytics.
Depending on where you live, you may have additional rights to access, correct, delete, port, restrict, or object to certain processing of your personal information, and to lodge a complaint with a data protection authority. To exercise these rights, email support@coloringstudio.ai. We will not discriminate against you for exercising your rights.
16.California Privacy Notice
If you are a California resident, you may have rights under California law to:
- Know what personal information we collect about you and how we use it.
- Request a copy of certain personal information we hold.
- Request correction or deletion of certain personal information.
- Opt out of "sale" or "sharing" of personal information.
- Receive non-discriminatory treatment for exercising these rights.
We do not sell your personal information for money, and we do not share it for cross-context behavioral advertising. To exercise California rights, email support@coloringstudio.ai. We may need to verify your identity. You may also designate an authorized agent.
17.Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, contact support@coloringstudio.ai and we will delete it.
Parents and teachers using the Service are responsible for supervising children, deciding what content is age-appropriate, and obtaining the consents required to upload any photo, name, or information about a child.
18.Security
We use reasonable technical and organizational measures to protect personal information, including encryption in transit, access controls, and audit logging. No service is perfectly secure. If you believe your account has been compromised, contact support@coloringstudio.ai immediately.
19.International Users
The Service is operated from the United States. If you use the Service from outside the United States, your information will be transferred to and processed in the United States and other countries where our service providers operate. By using the Service, you consent to that transfer. Privacy laws in those countries may differ from those in your country.
20.Changes to This Policy
We may update this Policy. When we do, we will change the "Last updated" date and, for material changes, give reasonable notice in the Service or by email. Continued use of the Service after the new Policy takes effect means you accept it.
21.Contact
Christian Martin, an individual doing business as ColoringStudio.ai
530 S Lake Ave, Ste #488, Pasadena, CA 91101
Email: support@coloringstudio.ai
See our Terms of Use for the rules that govern the Service.