Privacy Policy
Last updated: July 2026 (revised 13 August 2026)
We collect the minimum we need to run Koloring.ai. This page explains what we collect, why, who we share it with, and how to remove it.
1. Introduction
This Privacy Policy describes how Koloring.ai (“Koloring.ai”, “we”, “us”) collects, uses, and protects information when you visit our website or use our services. It is designed to comply with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Children’s Online Privacy Protection Act (COPPA), and other applicable privacy laws.
By using Koloring.ai, you agree to the practices described here. If you do not agree, please do not use the service.
2. Information we collect
2.1 Account information
When you create an account using Google Sign-In, we receive your email address and the display name associated with that Google account. We do not receive or store your Google password.
2.2 Usage data
We record basic usage information so we can improve the service and detect abuse:
- Pages you view on Koloring.ai
- Coloring pages you generate, color, or save
- Downloads (anonymized counts only)
- Approximate location (country level, derived from IP)
2.3 Device information
Browser type, operating system, and screen resolution. This is used to debug display issues and choose the right image sizes.
When you send us a message or feedback, we also store a one-way hash of your network address — never the address itself. It lets us tell whether two submissions came from the same sender, which is how we catch spam and abuse, and it cannot be turned back into your address. It is deleted after 90 days, while your message itself is kept as part of our support history.
2.4 AI prompts and creations
When you use our AI tools, the text prompts you submit and the images you generate are stored against your account so they appear in your dashboard. Prompts are also sent to a third-party AI technology provider for processing (see §5).
2.5 Uploaded photos
If you use photo-to-coloring conversion, the image you upload is processed temporarily by our AI technology provider. We do not store your original uploaded photos on our servers. The resulting line-art output is saved to your account; the source photo is discarded immediately after conversion completes.
2.6 Colored artwork
If you click “Save” on a colored page, the resulting image is stored against your account so you can find it again in your dashboard.
2.7 Cookies
We use a small number of strictly-necessary cookies: an authentication session cookie, a language-preference cookie, and a bot-protection cookie set by our third-party CAPTCHA provider. We do not use advertising or cross-site tracking cookies.
2.8 Payment information
Payment details (card number, billing address) are collected and stored by whichever provider handles your purchase, each acting as Merchant of Record: our third-party payment processor for purchases made on koloring.ai, and Amazon In-App Purchasing for purchases made in the Amazon Fire app. Koloring.ai does not see or store your payment information at any time. We receive only a customer reference and subscription status — or, for Fire app purchases, a purchase receipt we verify on our server.
3. How we use your information
- To provide and improve the service
- To generate custom coloring pages from your prompts
- To save your favorites, colored artwork, and AI creations
- To process subscriptions and manage your plan
- To enforce rate limits and detect abuse
- To respond to support, copyright, and privacy requests
- To analyze aggregate site usage so we can improve features
- To email you about new coloring pages, new features, and occasional updates. If you create an account we add your address to this list, because an account is how we know where to send it. You can unsubscribe from all of it with one click — there is a link in the footer of every such email, and it never affects your account, your saved artwork, or any service email about a purchase.
We do not sell your personal data to anyone. We do not use your data for advertising targeting, retargeting, or building advertising profiles. We do not share your prompts or generated images with third parties except as strictly necessary to operate the service.
4. Tool-specific data handling
Each Koloring.ai tool is built privacy-first; the sub-sections below explain exactly what happens to your data when you use them.
4.1 Photo-to-coloring
When you upload a photo for conversion, the image itself is sent to our AI technology provider. The provider works directly from your photo’s pixels to trace it into line art — that is what keeps the result recognisably the same subject. Your photo is transmitted twice during a single conversion: once for an automated safety review, and once for the conversion itself.
The uploaded photo is processed in memory and is never written to our servers. We keep no copy of your original photo at any point, and it is discarded as soon as the conversion completes.
The generated coloring page — not the original photo — is what we keep. If you are signed in, it is saved to your account. If you are not signed in, the generated page is still uploaded to public cloud storage so your browser can display and download it. That file sits at a long, randomly generated web address that is not listed or linked anywhere and is not connected to any account, but anyone who has the address can open it. Anonymous conversions are automatically deleted after 7 days by a daily cleanup job.
EXIF metadata (including any GPS coordinates) is stripped from the image before it leaves our server, so location data in a photo never reaches the AI provider.
4.2 Coloring book creator
When you create a coloring book, we compile selected pages into a PDF. The PDF is generated on demand and delivered as a download. We do not store generated PDFs permanently. The list of pages you selected is not retained after the PDF is built.
4.3 Chrome extension (Koloring — Photo to Coloring Page)
Our Chrome extension sends image URLs to our server for processing. We do not access your browsing history, bookmarks, or any data beyond the specific image you choose to convert. The extension requires only contextMenus and activeTab permissions; no host permissions, no content scripts, no third-party requests, no analytics inside the extension itself.
When you click “Turn into Coloring Page” in the right- click menu, a new tab opens to koloring.ai/create with the image URL as a query parameter. From that point on, the site’s normal privacy policy applies.
4.4 Embeddable widget
Our widget runs on third-party websites with the site owner’s consent. It does not track users across sites, set cookies, or collect any personal data. It only activates when a user explicitly clicks the coloring button on a specific image.
On click, the user is sent to koloring.ai with the chosen image URL as a query parameter; nothing about the host page is transmitted to us. The widget makes no analytics calls of its own.
4.5 Camera Trace & Sketch
Camera Trace & Sketch uses your device camera to overlay a coloring page on a real piece of paper. The camera stream stays entirely in your browser — no video frames are uploaded to our servers. We only record an anonymous session count to enforce the daily free tier limit.
4.6 Online coloring canvas
The browser canvas runs entirely on your device. Your work is kept locally until you click “Save”, at which point the finished image (PNG composite of paint plus outline) is uploaded to your private account storage. Pro subscribers’ saves sync across devices; free accounts do not get cloud-saved canvas work beyond a small local history.
4.7 Mobile apps (Amazon Appstore, Google Play, Apple App Store)
Our coloring apps are built for children and their families. They contain no third-party advertising, no ad-tracking SDKs, and no analytics that profile a child. Browsing and coloring work without an account; signing in (optional) uses the same email-based account as the website and only unlocks saved-art sync and Pro.
Coloring pages are downloaded from our own catalogue (line-art images we publish), and offline packs cache those images on your device so kids can color without a connection — that cache is our artwork, not personal data, and you can delete it anytime from the app. Saved colorings are handled exactly as in §4.6 (kept local until you save; uploaded to your private account storage only when signed in).
Purchases: on the Amazon Fire app, Pro is bought through Amazon In-App Purchasing — Amazon processes the payment and we never see your card details; we receive only a purchase receipt, which we verify on our server to unlock Pro on your account. On other stores, Pro may be managed through your koloring.ai account. Account, purchase, and any links that leave the app sit behind a parental gate (see §6).
The current apps do not request camera access or photo-library uploads (the AI photo and camera tracing tools are web-only). We request only the minimal device permissions an app needs to store your downloads and saved art.
4.8 My Drawing (kids’ drawing to coloring page)
Works exactly like photo-to-coloring (§4.1): the photo of the drawing is processed in memory, EXIF/GPS metadata is stripped before it leaves our server, and the uploaded image is not stored permanently — only the generated coloring page is saved to your account when signed in. The optional before/after share image you create is uploaded to a public link so you can post it; those share images are automatically deleted after 7 days.
4.9 Story coloring books
Story books require a signed-in account. The character name and story idea you type are sent to our AI providers to write the story and generate the pages; the finished PDF is stored privately in your account and delivered only to you through a time-limited, owner-verified download link.
4.10 Color Together (multiplayer coloring)
Brush strokes in a shared room are relayed between participants in real time and are not recorded on our servers — the room link is unguessable, rooms expire automatically after 2 hours, and joining needs no account. The first name or nickname you enter for your cursor tag is visible only to people in the same room and is discarded when the room ends.
4.11 Coloring challenges
Entering a weekly challenge uploads your colored page to the public challenge gallery, credited by your chosen initials only — never your full name or email. Every entry passes an automated safety review before it appears. You can replace your entry during the week, and you can ask us to remove it at any time via koloring.ai/contact. Votes are stored against your account solely to prevent double-voting and are never public.
4.12 Name, letter, alphabet & personalized pages
Our name, letter, alphabet, and personalized-page generators are deterministic — they draw the text you type using built-in fonts, with no AI and no image upload. The name or text is used only to render your page and is not stored on our servers or linked to any account; the generated image is cached anonymously so the same request loads quickly. Please avoid typing sensitive personal information beyond a first name.
5. Third-party services
To run Koloring.ai we rely on the following categories of third-party services. These providers process limited data on our behalf under contractual data-protection agreements:
- Authentication provider — handles Google Sign-In on our behalf. Receives only the data needed to verify your identity.
- Payment processor (Merchant of Record) — handles billing, taxes, refunds, and chargebacks for purchases made on koloring.ai. Holds your billing information; we do not.
- Amazon In-App Purchasing (Merchant of Record for Amazon Fire app purchases) — handles billing, taxes, refunds and chargebacks for Pro bought inside the Fire app, under Amazon’s own privacy policy. We never see your card details; we receive only a purchase receipt, which we verify to unlock Pro.
- Cloud hosting and database services — host the website, user accounts, and stored images.
- Content delivery network — caches and serves images globally so the site loads quickly.
- Bot-protection service — verifies that form submissions are from real humans, not bots. Sets a strictly-necessary cookie.
- AI technology providers — generate coloring pages from your prompts and uploaded photos. Prompts and the photos themselves are transmitted to these providers. On every single request we send, we instruct our AI router to use only providers whose own policies prohibit retaining your input or using it to train their models. This is enforced in our code on each request rather than by an account setting, so it applies to every generation, including automated safety checks and retries. Those providers’ own terms govern any further handling of your input.
- Email delivery provider — sends account and service emails, our welcome sequence, and our newsletter. Receives your email address and the contents of those messages. Used only to deliver email we send; never for advertising, and never sold or shared onward. You can unsubscribe from marketing email at any time using the link in any such message.
- Google Analytics — anonymized aggregate analytics. IP addresses are truncated before analytics processing. We do not enable advertising features in Google Analytics.
- Product-analytics and session-replay provider — records playback of site sessions (mouse movement, clicks, scrolling and page navigation) and aggregates them into heatmaps, so we can see where the site is confusing. All on-screen text is masked before it leaves your browser — not only what you type, but page content too — so it never appears in a recording. It does not record your camera or microphone, and it is never active on our administrative pages. We do not use it to build advertising profiles, and we never send it your email address or your name.
If you are signed in, we tell the provider your internal account number, so that the pages you visit are grouped into one account rather than treated as unrelated strangers. That number is meaningless outside our database, and it is the only account information the provider receives. Signed-out visitors are never given a name or a number by us.
The same provider also records technical errors — when something breaks in your browser, it receives the error message, the location in our code that failed, and the page you were on, so we can fix it. Error reports carry no information you have entered. - Embedded video provider — some tool pages include a short demonstration video. The video player is not loaded until you click play, and it runs in the provider’s privacy-enhanced mode, which does not set tracking cookies for playback. The preview thumbnail is served from the provider, so loading such a page tells them your IP address and which page you are on.
6. Children’s privacy (COPPA)
Koloring.ai is designed to be safe for children to use under parental supervision. We take the following measures to comply with COPPA and similar international child-protection laws:
- Children can browse and color pages on Koloring.ai without creating an account. No personal information is collected in this anonymous mode beyond standard analytics.
- Account creation requires Google Sign-In, which requires the user to be at least 13 years old (or the equivalent minimum age in their jurisdiction) per Google’s own terms.
- We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe we have such data, please email us and we will delete it.
- Parents may request deletion of any data associated with their child’s account at any time by emailing the address in §13.
- We do not sell or transfer child user data to third parties for any purpose other than the operation of the service.
7. Data retention
- Account data — retained for as long as your account is active. To delete your account, email hello@koloring.ai from the address on the account. We handle deletion requests manually and will delete your account and its associated data within 30 days of receiving a verified request.
- AI-generated coloring pages — published pages are retained indefinitely as part of the catalog. Pages tied to your account are deleted when your account is deleted.
- Uploaded photos (photo-to-coloring) — discarded immediately after the conversion completes. Never retained.
- Colored artwork — retained until you delete it or your account.
- Analytics data — anonymized and aggregated; retained for a maximum of 14 months.
- Contact form messages — retained as part of our support history.
- Payment records — retained by whichever provider processed the purchase (our payment processor for koloring.ai purchases, Amazon for Amazon Fire app purchases) under their own retention policies and as required by tax authorities (typically 5–7 years). We separately store an Amazon receipt identifier against your subscription record for as long as that subscription exists, so entitlement can be re-verified.
8. Your rights (GDPR & CCPA)
Depending on where you live, you may have the following rights with respect to your personal data. We honor these requests from any user, regardless of jurisdiction.
- Right of access — request a copy of the personal data we hold about you.
- Right of deletion — request deletion of your account and associated data.
- Right of correction — update inaccurate information.
- Right of data portability — receive your data in a machine-readable format.
- Right to object — opt out of analytics or any specific processing activity.
- Right to withdraw consent — withdraw any consent you have previously given, at any time.
- Right to non-discrimination — we will not treat you differently for exercising any of these rights.
To exercise any of these rights, email us at the address in §13. We will respond within 30 days.
10. Security
We take reasonable technical and organizational measures to protect your data:
- All data is encrypted in transit using TLS (HTTPS).
- The database is protected by row-level security policies, so users can only access their own data.
- API endpoints are protected by per-IP rate limiting and input validation.
- Payment information never touches our servers — it is collected and processed entirely by our payment partners.
- Service accounts and API keys are stored in encrypted environment variables, not in source control.
No system is perfectly secure. We will notify affected users without undue delay if a personal-data breach occurs that is likely to result in a high risk to their rights, as required by GDPR Article 34.
11. International data transfers
Koloring.ai is operated globally. Some of our third-party processors are located outside your country of residence. When personal data is transferred outside the EU/EEA or the UK, we rely on appropriate safeguards such as the Standard Contractual Clauses approved by the European Commission and, where applicable, the EU-US Data Privacy Framework.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of the page. For material changes (e.g. new categories of data collection, new third-party processors handling personal data, changes to your rights), we will notify account holders by email at least 14 days before the change takes effect. Your continued use of the service after the effective date constitutes acceptance of the updated policy.
13. Contact us
Questions, requests, or concerns about this policy or your data:
- Email: hello@koloring.ai
- Contact form: koloring.ai/contact
We aim to respond to all privacy requests within 30 days.