Privacy Policy for ColorBloom

1. Introduction

Welcome to ColorBloom, an offline-first digital coloring and mindfulness application developed by CodePlay Studio ("we", "us", or "our"). We are deeply committed to respecting and protecting the privacy of our users ("you").

This Privacy Policy describes what information we collect, how it is handled, how we protect it, and your rights concerning your personal information. By using ColorBloom, you agree to the collection and handling of information in accordance with this policy.

2. Privacy at a Glance (Google Play Data Safety Summary)

3. Information We Collect

A. Information You Provide Directly

• Optional Display Name: You may set a custom nickname/display name (up to 50 characters) in your profile. You are never asked for your legal name, email, or telephone number.
• Coloring Progress & Artworks: Information about your coloring activity—such as filled regions, color codes, completion status, completion time, streak count, and bookmarked favorites.
• Exported Images: When you export or share a completed artwork as a PNG image or wallpaper, the file is created locally on your device and delegated to Android's native system share sheet. We never retain or transmit your exported creations to third parties.

B. Information Collected Automatically

• Anonymous Account Identifier: To allow you to sync progress across sessions without creating an email/password account, we generate a pseudo-anonymous unique identifier (UUID) using Supabase Auth.
• Sensory & Audio Preferences: Your preferences for sound effects volume and haptic vibration feedback are stored locally on your device.
• Local Offline Storage: Coloring geometry and in-progress artwork are stored in an encrypted local database (Drift/SQLite) so the app can function 100% offline.
• Technical Diagnostics: In the event of a system crash, technical logs (device model, Android version, app version, error traces) may be recorded. Diagnostic logs are sanitized and stripped of tokens, passwords, and user content.

C. Information We Do NOT Collect

4. How We Use Information

We use collected data solely for the following legitimate purposes:

• To render designs, allow smooth coloring interactions, undo/redo features, and calculate completion rates.
• To securely sync your artwork library, favorites, and streak counts to the cloud when connected to the internet.
• To respect your sound and haptic vibration preferences.
• To diagnose crashes, fix software bugs, and optimize battery and rendering performance.

We do not sell, rent, trade, or monetize your information.

5. Third-Party Service Providers

We collaborate only with trusted infrastructure providers that adhere to rigorous security standards:

• Supabase Inc. (Backend, Authentication & Storage): Hosts our secure database and cloud storage with strict Row-Level Security (RLS) enforcement. Supabase Privacy Policy
• Google Play Services / Android OS: Provides app distribution, system runtime APIs, and Android Keystore cryptography. Google Privacy Policy

6. Data Security and Storage

Your privacy and security are built into the architecture of ColorBloom:

• Encryption in Transit: All communication between ColorBloom and backend cloud infrastructure is encrypted with modern TLS / HTTPS protocols.
• Android Keystore: User session tokens are protected using flutter_secure_storage backed by hardware-level Android Keystore encryption.
• Disabled Auto-Backup: Android auto-backup is disabled (allowBackup="false") so that encrypted keys cannot be transferred insecurely across devices.
• Row Level Security (RLS): Our database rules restrict access so that each user can only read and write their own records.

7. Data Retention & Deletion Policy

We retain cloud-synced artwork progress and profile information as long as your account remains active. Local data on your device remains until you clear app storage or uninstall the app.

How to request deletion of your data:

• You may email our privacy team at privacy@codeplaystudio.com with the subject "Data Deletion Request", providing your Display Name or Anonymous User ID.
• Upon receipt, all cloud records linked to your user ID (profile, artworks, favorites, and sync states) are permanently deleted from our servers.
• To clear local data immediately, open Android Settings > Apps > ColorBloom > Storage > Clear Data.

8. Children's Privacy (COPPA & GDPR-K)

ColorBloom is designed for a general audience. We do not knowingly collect or solicit personally identifiable information from children under 13 (or under 16 in the European Union).

Because ColorBloom functions with anonymous guest credentials and does not require personal details, children may safely color offline without disclosing personal data. If a parent or guardian discovers that a child has provided us with personal information, please notify us at privacy@codeplaystudio.com so we can promptly delete it.

9. Your Rights (GDPR & CCPA/CPRA)

Subject to your local laws, you have specific rights concerning your data:

• Access & Portability: The right to obtain a copy of your synced data.
• Rectification: The right to modify your display name at any time in the app profile.
• Erasure: The right to request the permanent deletion of your cloud records.
• Opt-Out: The ability to use the app in complete offline isolation.
• Non-Discrimination: We do not deny services or degrade app features when you exercise your privacy rights.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Any modifications will be posted to this page with an updated "Last Updated" date. Continued use of ColorBloom after updates signifies your acceptance of the revised terms.

11. Contact Us

If you have any questions, feedback, or data privacy requests, please contact us at: