Your art is personal.
We treat it that way.

The short version

Paint Alive is designed so your paintings stay on your device. We do not sell personal information, run third-party advertising, or use your artwork to train AI models.

Information Paint Alive uses

The app stores your artwork, painting progress, onboarding preferences, and studio settings locally on your device. Those items leave the device only when you choose an Apple sharing or backup feature that handles them.

To provide memberships, RevenueCat processes your Apple user identifier if you sign in with Apple (otherwise a randomly generated app user identifier), your purchase status, and a label saying whether this is a test or App Store install. Apple processes payment and subscription information; Paint Alive does not receive your full payment card details.

Usage analytics

This website uses Cloudflare Web Analytics to count visits. It sets no cookies and does not track you across sites. For each page view it records the page address, the referring page, your browser type, your country (derived from your IP address, which is not stored) and how fast the page loaded. We see only totals. The Paint Alive app does not use it.

The App Store link on this website is provided by AppsFlyer. If you choose it, AppsFlyer processes the link request to redirect you and measure clicks. In-app usage analytics are separate. Starting with version 1.0.1, basic usage analytics are on by default for general-audience profiles. Existing opt-outs remain off. You can turn them off before signing up through “Usage analytics & privacy” or later in Settings. Earlier versions use opt-in analytics through AppsFlyer's strict iOS SDK, with advertising-partner sharing blocked. Child profiles do not send usage events.

Version 1.0.1 sends basic usage events to Paint Alive's service hosted by Cloudflare, not to AppsFlyer. These events contain an event name, onboarding experiment and design, step, app build, test-or-release flag, Apple-or-private signup method and flow, and, from version 1.0.2 if you answer them during setup, how often you color and where you heard about Paint Alive (chosen from a short list; the second question is optional). Membership and exit screen events also carry the screen experiment and version shown and a short detail from a fixed list, such as the plan chosen, why the screen closed or why a purchase failed. They do not contain a user or device identifier, your answers, artwork, name, email, Apple ID, or purchase receipts. Your IP address is processed transiently to deliver and rate-limit requests; it is not stored in our analytics database. We keep daily aggregate event counts for up to 180 days and temporary hashed delivery receipts to prevent duplicate counts. These counts do not track an individual person's journey.

When usage analytics are enabled, RevenueCat also receives the onboarding experiment and design, and the membership-screen and exit-screen experiment and version shown, associated with its existing customer record, so we can compare membership outcomes. Those attributes are customer-linked, not anonymous, and are cleared when you turn analytics off. If you installed Paint Alive from an Apple Ads ad, RevenueCat also receives the campaign and keyword Apple reports for that ad (through Apple's AdServices framework, which needs no tracking permission), so we can see which ads lead to memberships; this stays with the subscription record after analytics are turned off. RevenueCat remains responsible for subscription records. Turning analytics off does not cancel a membership or delete billing records.

Ad measurement

When we advertise Paint Alive, we measure ads with Apple's AdAttributionKit and SKAdNetwork. The app tells Apple a single number from 0 to 63 that summarizes progress such as finishing onboarding or starting a membership. Apple reports that number to the ad network that showed the ad, after a random delay and only when enough installs share it, and sends us a signed copy. These reports contain no name, email, device or advertising identifier, and we keep only daily totals by ad network, campaign code and country for up to 400 days. They work without tracking: unless you allow tracking (below), Paint Alive does not use the advertising identifier (IDFA) and does not share usage events, purchase records or identifiers with Meta, TikTok or other ad networks. Child profiles never report. With usage analytics off, the report says only that the app was installed and whether a membership started, and broadly which plan.

Starting with version 1.0.2, when usage analytics are on, the app uses AppsFlyer to tell us which of our ads and links lead to installs. AppsFlyer receives that the app was installed and opened, a random AppsFlyer install ID, standard device information such as device model, iOS version, language and IP address, and five milestones without details: first brush stroke, onboarding finished, account created, membership screen shown and checkout started. AppsFlyer never receives your name, email, Apple ID, onboarding answers or artwork.

During setup, Apple asks whether Paint Alive may track you. If you allow it, AppsFlyer also receives your device's advertising identifier (IDFA) and vendor identifier (IDFV), RevenueCat sends AppsFlyer your membership events (such as a trial, purchase or renewal and its price) linked to the AppsFlyer install ID, and AppsFlyer shares the install, milestones and membership events with the ad networks whose ads we run, currently TikTok, Meta and Apple Ads, so they can tell which ad brought you and show our ads to similar people. If you ask the app not to track, or are never asked, no advertising or vendor identifier is collected, nothing is shared with ad networks, and RevenueCat sends AppsFlyer nothing; our ads are then measured only through Apple's anonymous reports above. You can change your choice anytime in Settings → Privacy & Security → Tracking. Child profiles never start AppsFlyer and are never asked, and turning usage analytics off stops AppsFlyer.

We also keep daily membership revenue totals by plan and App Store country, from RevenueCat, to judge whether advertising pays for itself. These totals do not identify a customer.

Canvas delivery

Canvas files and catalog information may be downloaded from Cloudflare’s content delivery network. Standard network information such as an IP address may be processed briefly to deliver and protect that request.

Children and families

Paint Alive can be enjoyed by families, but it does not ask a child for a name, email address, precise location, or public profile. A parent or guardian should manage the Apple Account and any subscription purchase.

Your choices

You can decline optional analytics, delete paintings inside the app, or remove all local app data by deleting the app. Deleting local data does not cancel an active Apple subscription; subscriptions are managed in Apple Account settings.

Questions

Visit Paint Alive Support for privacy and account help. We will update this notice if our data practices materially change.