Privacy policy

Parents upload photos of their children to make Colorkin, so this page is written plainly rather than as boilerplate — it describes exactly what happens to those photos, start to finish.

What we store. Your email address (to sign you in — no password), the photos you upload, the coloring-page line art generated from them, and the finished PDF book. Nothing else is collected about you or your child.

Storage is private. Every file lives in private cloud storage. Nothing is ever public — every link to a photo or PDF is a signed URL that expires in 10 minutes, generated fresh each time you (or only you) need it.

EXIF and location data are stripped on upload. Photos often carry hidden metadata — GPS coordinates, camera/phone model, timestamp. That metadata is removed the moment a photo is uploaded, before it's processed or stored anywhere else.

Every photo is screened before it's processed. Uploads pass an automated moderation check before any coloring-page generation happens; anything flagged is rejected outright and never reaches the image model. Repeated rejected uploads lock the account.

Retention — files don't stay forever. Original photos are deleted 7 days after you pay for a book, or 30 days after upload if the book is never purchased. The generated line art and the finished PDF are kept until your download link expires — 30 days after purchase — and are deleted automatically after that. None of this requires you to do anything; it happens on its own.

Who processes your data, and why. Supabase (accounts, database, file storage), Vercel (hosting), Resend (sending you email), Inngest (background processing — generating line art, building PDFs), Sentry (error reports only — configured not to collect personal data or file contents), the AI image provider that generates line art from your photos, and Paddle (payment processing — Paddle is merchant of record and handles your payment details directly; we never see or store card numbers). We use an AI provider whose API terms state that inputs submitted through the API are not used to train their models.

Your rights. You can delete your account and every book in it — all photos, line art, and PDFs — at any time from your dashboard. Deletion is immediate, not a 30-day queue: files and database records are removed as soon as you confirm.