Privacy Policy

This policy explains what Color Fill ("the Service") collects, why it is collected, how long it is kept and what control you have over it. It applies to the Service only. The Adarsh Yadav website has its own privacy policy.

The Service is operated by Adarsh Yadav, an independent software developer working as a sole trader rather than an incorporated company. The guiding principle is simple: collect the minimum needed to make the product work, be explicit about it, and delete it when it is no longer needed.

Every category of data handled by the Service is listed below, together with its purpose and retention period.

Color Fill runs in the browser and requests no device permissions — no location, camera, microphone, contacts or files beyond the documents you deliberately upload.

Most privacy policies for children's apps are long because the app collects something and has to explain it. Color Fill collects nothing. It ships with no advertising SDK, no analytics SDK, no crash reporter and no networking code whatsoever — the app cannot contact a server, because it contains nothing capable of doing so.

• No account, login, email address or password.
• No advertising, ad network, ad identifier or tracking of any kind.
• No analytics, telemetry, usage statistics or crash reporting.
• No camera, microphone, photo library, contacts, location or notification access — the app requests no system permissions at all.
• No third-party SDKs, and therefore no third parties receiving anything.

Everything a child should not trigger alone sits behind a parental gate that asks a multiplication question: opening the privacy policy, the terms or the support page in a browser, and erasing saved progress. The gate is deliberately arithmetic rather than a press-and-hold gesture, which a young child works out immediately.

• Your data is never sold, rented or traded.
• Your content is never used to train machine learning models.
• There is no advertising in the Service and no advertising trackers are embedded.
• No data is shared with data brokers.
• No profile is built about you for any purpose beyond operating the Service.

Personal information is handled in line with applicable privacy law wherever you are. Where GDPR-style law applies, processing rests on one of the following bases:

• Contract — processing needed to provide the Service you signed up for.
• Legitimate interests — keeping the Service secure, reliable and free from abuse, balanced against your rights.
• Consent — optional features such as marketing email, which you can withdraw at any time.
• Legal obligation — retaining billing records where tax or accounting law requires it.

Color Fill does not use any third-party infrastructure, hosting or analytics providers to operate. It works entirely on your device, so there is no server for your data to pass through and no provider for it to be shared with.

• Your data is protected by the same on-device encryption and sandboxing Apple applies to every app's local storage.
• There is no developer-operated server, so your data is never uploaded to one. Any outside connection the app makes is listed under Service providers above and uses HTTPS.
• Color Fill does not currently offer any in-app purchase or subscription — no payment or billing information is collected.
• If you export a backup file, its security in transit and at rest becomes your responsibility once it leaves the app.

No system is perfectly secure. If you believe you have found a security issue, email support@adarshyadav.com and it will be looked at promptly.

Regardless of where you live, you can exercise all of the following:

• Access — request a copy of the data held about you.
• Correction — fix anything inaccurate.
• Deletion — remove any data you have entered, at any time, from within the app.
• Portability — export your data in a machine-readable format.
• Objection and restriction — object to or limit certain processing.
• Withdraw consent — for anything based on consent, at any time.

Most of these are self-service inside the Service. For anything else, email support@adarshyadav.com and it will be actioned within 30 days.

The rights above are offered to everyone, everywhere. Some regions add specific rights or wording, set out below. Exercising any of them is free, and you will never be treated differently for doing so.

If your region is not listed, the rights in the previous section still apply — email support@adarshyadav.com and your request will be handled the same way.

No authorised agent, verification fee or account requirement stands between you and these rights. Requests are verified only to the extent needed to confirm you are the person the data relates to.

There are no accounts and no backend, so there is nothing held on a server to retain or delete. Data you enter stays on your device until you delete it — either individually, by archiving or removing it in the app, or entirely by deleting the app. Any backup file you have exported persists wherever you chose to save it until you delete it yourself.

The Service is made for children, and is designed so that this is safe: it collects no personal information from anyone, of any age. There is no account, no sign-in, no analytics, no advertising and no third-party SDK. Nothing a child does in the app is transmitted anywhere.

Anything a child creates stays in the app's own storage on the device and is removed with the app. Links that leave the app, and any action that would erase saved progress, sit behind a parental gate. If you have any question about how the Service treats children's data, email support@adarshyadav.com.

If this policy changes materially, the effective date at the top of this page is updated and the current version is always available here and inside the app. Past versions are available on request.

Questions, requests or complaints about privacy: support@adarshyadav.com. If you are not satisfied with the response, you can complain to the data protection authority in your country.