ColorFun Privacy Policy

Effective date: October 13, 2026. This version replaces the policy dated October 7, 2026.

This Privacy Policy explains how TheSoft ("we", "us" or "our") handles information when you use the ColorFun mobile application (the "App"). It covers the App on iOS and Android.

1. Overview

ColorFun is a color-by-number coloring app. You can use the core coloring features without an account. When you use the App's online features (progress backup, friends, invites and game rooms), the App creates an anonymous guest account for you on our servers and gives it a ColorFun ID. You can later link that account to Sign in with Apple, Google Sign-In or an email address so you can restore it on another device.

Some features described here may not be available in your version or region yet. This policy describes everything the App can do, so it stays accurate as features are switched on.

2. Information we process

a. Data stored on your device

• coloring progress, artwork completion status and favorite artworks;
• stars, coins, hints, brush wands, experience points, chests, trophies and other game progress;
• appearance, sound, vibration and reminder settings;
• content files and images needed for the App to work;
• finished artwork you choose to save.

This data stays on your device unless a feature below says otherwise.

b. Your ColorFun account (online features)

• an account identifier created by our backend, and your ColorFun ID (an 8-digit number others can use to find you);
• your display name, and your profile photo if you set one (otherwise your avatar is the first letter of your name on a colour);
• a progress snapshot: stars, coins, hints, experience level, opened chests, unlocked stages, claimed trophies, daily gift state and the identifiers of pictures you recently colored. It is uploaded so your progress survives a reinstall and so a limited part of it can appear on your profile.

c. Sign-in and linking

• Sign in with Apple and Google Sign-In: we receive the provider's user identifier and, if you allow it, your email address. When you link your account, the App uses the name the provider shares (Apple shares it only the first time you sign in, and you can choose to hide it) as your display name, unless you already chose a name yourself. Google Sign-In also shares your Google profile photo. The App copies it and stores the copy as your profile photo only: when you link your account to Google and have no profile photo yet; when you sign in with Google to an account that still has its default name and no photo; or whenever you choose "Use Google photo". Otherwise later changes to your Apple or Google name or photo are not copied. You can change or remove your name and photo in the App at any time.
• Email: we process your email address to send you a one-time sign-in code or link that you request. We do not send marketing email.

d. Friends, blocks and reports

The App stores who you follow and who follows you (two people who follow each other are friends), people you blocked, and reports you send about another player. Reports are used to review abuse.

e. Invites and game rooms

When you invite a friend to color together or to race, we process the invite, the room, the picture chosen, which regions each player colored and when, race timings and results, head-to-head win and loss counts, and whether you are currently online. Players can send each other preset reactions and phrases. The App has no free-text chat between players.

f. Notifications

• Push notifications (only if you allow them): we store a device token supplied by Apple or Google through Firebase Cloud Messaging, your platform, language, time zone and app version, so we can deliver invites, new-follower alerts and room updates. You can turn each category off in the App's settings or in your system settings.
• Local reminders (for example the daily gift or your streak): scheduled on your device only; they are not sent from our servers.
• Inbox: the App keeps a list of your recent social notifications.

g. Purchases

In-app purchases and subscriptions are processed by Apple or Google. We receive the purchase verification information needed to unlock what you bought (for example removing ads or unlocking pictures) and to restore it on your account. We do not receive your payment card details.

h. Ads

The free version shows ads provided by Google AdMob. AdMob and its partners may collect and use device identifiers (such as the advertising identifier), your IP address and information about how you interact with ads, to deliver, limit and measure ads. Where the law requires it, the App asks for your consent (through Google's User Messaging Platform and, on iOS, Apple's App Tracking Transparency prompt). You can change your choices in your device settings. You can remove ads with an in-app purchase.

i. Analytics, crash reports and configuration

We use Google Firebase services:

• Firebase Analytics to understand how the App is used (for example screens opened and features used);
• Firebase Crashlytics to find and fix crashes (crash traces and device information such as model, operating system and app version);
• Firebase Remote Config to manage app configuration and feature availability without a new release.

These services may process app instance identifiers, app version, platform and operating system information, language or region, and similar technical data.

j. Camera and profile photo

If you choose to scan a friend's ColorFun QR code, the App uses the camera on your device to read the code. Those camera images are not stored or sent to us.

If you choose to set a profile photo, you take it with the camera or pick it from your photo library. The App only receives the photo you choose. On your device it is cropped to a square, made smaller (512 x 512 pixels) and saved as a JPEG without its metadata (no location or camera details), then uploaded to our storage provider (Supabase). We keep your current photo. A photo you replace or remove, or one that was uploaded but not used, is deleted within about 24 hours; a photo another player reported is kept until we have reviewed the report.

k. Saved images and content delivery

If you choose to save artwork, the App writes the image to your photo library or gallery. On Android, some content packs may be delivered through Google Play Asset Delivery.

3. What other players can see

Other players can find you with your ColorFun ID. A player who finds you can see your display name, your profile photo (or the first letter of your name), level, experience, total stars, whether you are online or when you were last online, your head-to-head record with them, and the pictures you recently colored. Your friends, your followers and the players in your game rooms see your profile photo; it is stored at a web address that is not listed anywhere but that anyone who has it can open. Other players cannot see your email address. Do not use your real full name as your display name, or a photo of yourself, if you do not want others to see it. You can block or report any player from their profile, including for an inappropriate name or photo; a reported photo is kept until it is reviewed (within 24 hours), and one that breaks our rules is then removed and the avatar goes back to the first letter.

4. Permissions the App may ask for

• Internet: to load content and use online features;
• Notifications: to deliver reminders and, if you allow it, push notifications;
• Camera: only to scan a friend's QR code or to take a profile photo when you ask;
• Photos or storage: only to save artwork, or to pick a profile photo, when you ask;
• Advertising identifier / tracking: only as described in the Ads section, with your consent where required.

The App does not require access to your location, microphone, contacts or SMS.

5. How we use information

• to provide the coloring features and save your progress and settings;
• to run your account, friends, invites and game rooms, and to keep them safe from abuse;
• to send the sign-in codes and notifications you ask for;
• to verify and restore purchases;
• to show and measure ads where they apply;
• to improve the App's stability, compatibility and user experience.

6. Sharing and service providers

We do not sell your personal information. We use service providers to run the App:

• Supabase: database, authentication and profile photo storage for your account and online features;
• Cloudflare: servers, content delivery and DNS for our backend and website;
• Google Firebase and Google AdMob: configuration, analytics, crash reporting, push delivery and ads;
• Apple and Google: App Store and Google Play distribution, in-app purchases, Sign in with Apple, Google Sign-In and push delivery;
• Resend: delivery of the sign-in emails you request.

These providers process information on our behalf or under their own privacy policies. We may also disclose information when the law requires it or to protect the safety of players and the App.

7. Retention and deleting your data

Data stored only on your device stays there until you clear the App's data or uninstall it. Account data on our servers is kept while your account exists.

You can delete your account in the App's settings (Account section, "Delete account"). Deleting your account removes your profile and ColorFun ID, your profile photo, linked sign-in identities, uploaded progress snapshot, follows and friendships, blocks, invites, room participation, push tokens and inbox from our servers. Game results shared with other players may remain in their history without identifying you. Pictures and progress stored on your device stay on your device, and purchases stay with your Apple or Google account. Service providers may keep limited technical data under their own policies.

8. Children

The core coloring features can be used without an account. The online features (accounts, friends, invites and game rooms) are intended for people aged 13 and older. We do not knowingly collect personal information from children under 13 through the online features. If you believe a child has provided personal information, please contact us and we will delete it.

9. Your choices and rights

• turn notifications off in the App's settings or your system settings;
• deny permissions you do not want to give;
• change your ad and tracking choices in your device settings;
• block or report players;
• delete your account in the App;
• clear the App's data or uninstall it.

Depending on where you live, you may have the right to ask us for access to, correction of, deletion of or a copy of your personal information, or to object to or restrict some processing. To use these rights, write to us at the address below.

10. Security and international processing

We take reasonable measures to protect the App and our servers, including encrypted connections and access controls on our database. No method of storage or transmission is completely secure. Our servers and our providers' servers may be located outside your country, including in Singapore and the United States, so your information may be processed there.

11. Changes to this policy

We may update this Privacy Policy from time to time. The latest version is posted on this page and takes effect on the date shown at the top.

12. Contact us

If you have questions about this Privacy Policy or want to use your rights, contact:

TheSoft
[email protected]