Privacy Policy

Account owners must be 18 or older. Signup asks the owner to confirm their age and responsibility for uploaded pictures. This confirmation is an attestation, not verified age or parental consent. Independent child accounts are not available.

Children may contribute alongside the account owner under direct supervision. The adult operates the account and is responsible for uploads, AI requests, and purchases. Avoid entering unnecessary personal information about children. Accepting the Terms does not give permission to use a particular child's picture; uploads and AI image processing have their own permission checks.

We store your sign-in email, account details, draft books, manuscripts, character notes, layouts, illustration prompts, uploaded and generated pictures, picture names and tags, consent attestations, publishing preparation notes, and support messages. We also keep purchase and credit-use records to fulfill payments and enforce generation limits.

Saved books and reusable pictures are private to your account. Supabase stores account and book records and private image files. Image access requires authorization; temporary signed links expire. A person who receives an unexpired signed link may be able to view that image until it expires, so do not share private links. Upload processing validates file contents and removes embedded image metadata from newly normalized files.

When you request AI assistance, we send the necessary text, prompts, and selected reference images to the configured AI processor, currently OpenAI. Generated results and limited provider usage information are stored for review, credit accounting, and troubleshooting. A picture you only store is not automatically sent for generation.

ColorMyIdea does not use your private books or images to train its own models, and this release has no training opt-in. OpenAI states that API data is not used for training by default; processor retention and abuse-monitoring practices are described in its API data controls. We do not promise zero retention by every processor.

ColorMyIdea uses cookies for authenticated sessions. Guest books and their pictures are saved in IndexedDB on this browser, with legacy drafts and import status sometimes retained in local storage. Guest drafts are not cloud backups and may be lost when site data is cleared or devices change. Sign-in handoffs in IndexedDB expire after 24 hours; the original local draft is retained until confirmed account saving. New cloud projects are not cached there. Unsaved edits may be kept in tab-scoped session storage for recovery after you sign in; this storage may be cleared when the tab closes. Third-party analytics is not loaded by this release. Operational error and security records should not contain manuscript text, prompts, or images.

The sign-in form also stores a resend waiting time in your browser so it can remember the countdown. This value does not contain your email address or a verification token.

We limit repeated sign-in email requests using protected fingerprints of email addresses and network addresses. When enabled, our sign-in forms use Cloudflare Turnstile to help detect automated requests. Your browser connects to Cloudflare for this check, and Supabase verifies its result before sending a sign-in email. Learn more in the Cloudflare Turnstile Privacy Addendum.

If your browser supports speech recognition, you can choose the microphone in the studio and allow browser microphone access. Your browser may send audio to its speech recognition service under that provider's policies. ColorMyIdea does not record or store the audio; the app receives the recognized words and adds them to your page only when you accept them. You can type instead, review the words, or cancel.

Our service providers include Supabase for authentication, database and private image storage; Vercel for hosting; OpenAI for requested AI assistance; Resend for sign-in email; Cloudflare for sign-in protection; and Stripe for checkout, receipts, refunds, and payment disputes when purchasing is enabled. Providers may process data in countries other than yours under their applicable terms.

Stripe collects payment details on its hosted checkout. ColorMyIdea stores customer and payment identifiers, purchase state, amount, currency, receipt links, payment dates, and refund or dispute state. We do not store full card numbers or security codes. See Stripe's Privacy Policy.

We retain saved books and images while needed to provide your account, subject to its storage limits. Recent recovery versions may retain pictures referenced by older book versions. Archiving hides an item and preserves its data; it is not deletion. An image still used by a book or recovery version cannot be removed until those references are cleared.

Account offers a download of current books, image metadata, purchase summaries, and credit records. Image bytes, unsynced browser drafts, and full recovery snapshots require separate downloads or support assistance. Account deletion is a verified support process. When the request feature is available, you can submit or cancel a pending deletion request in Account; otherwise email hello@colormyidea.com from your account address. A request does not immediately delete data or cancel a subscription. We retain its account identifier, reference, status, and dates to handle the request. We may retain payment, security, or other records where required to comply with law, resolve disputes, or prevent abuse. Backup and processor copies may not disappear immediately.

We use practical safeguards such as authenticated sessions, server-side secret handling, HTTPS hosting, and database access policies. No online service can guarantee absolute security.

You can choose what project content to enter, whether to configure optional integrations, and whether to import local drafts into your account. You can also clear local storage in your browser, though that can remove unsynced drafts.

Adults must have permission from a child's parent or legal guardian before uploading the child's photo and must confirm it in the upload form. Use only the information needed for your book; avoid addresses, school details, or other identifying information. Only use a photo for AI generation if that permission covers processing by our AI provider. If you believe a child has created an account or a photo was uploaded without permission, contact hello@colormyidea.com so we can investigate.