Privacy notice

MagiColoring is run by IMVOID, a sole proprietorship (entreprise individuelle) registered in France, 59 rue de Ponthieu, Bureau 326, 75008 Paris, France (SIRET 894 952 100 00036). We are the “data controller” for the personal data described here, under the EU General Data Protection Regulation (GDPR) and French law. More details in our legal notice.

Your email address, if you create an account. We use it to send your sign-in codes and important messages about your account, and we keep your plan and how many AI pages you made this month. Why: to provide the account you asked for (contract). Kept until you delete your account.

Photos and descriptions you use to make a page. To draw your page, they are sent securely to our server and to our AI provider. We don't keep the photo after the page is drawn, unless you save the page to your account on the website. Saved pages are stored privately in your account until you delete them. In the iPhone app, your pages are saved on your device. Why: to make the pages you ask for (contract).

Your email for the app waitlist, if you leave it. We use it once, to tell you when the iPhone and iPad app launches, then delete the list. Why: you asked us to (consent), and you can withdraw it at any time.

Technical data such as your IP address, which our servers need to work. To stop abuse (for example, a script making thousands of pages), we count requests per IP address in scrambled form that can't be turned back into the address, and old counts are deleted automatically. Our host also keeps short-lived server logs. Why: to keep MagiColoring safe and running (legitimate interest).

We don't sell your data. We don't show ads. We don't use advertising trackers.

To know which pages are useful, we count visits with Vercel Web Analytics. It uses no cookies, doesn't follow you across sites, and only gives us totals (pages viewed, countries, which site sent you), never who you are.

We don't use your photos for anything other than drawing the page you asked for.

The website only uses cookies that are needed to keep you signed in, so there's no cookie banner to accept.

MagiColoring is meant to be used by parents, with their children. Accounts are for adults: children don't need an account to color, and we don't knowingly collect personal information from children. Photos you choose to upload may show your children; you decide which photos to use.

We use a small number of service providers, only for the purposes below:

• Supabase stores accounts and saved pages (servers in Ireland, EU).
• OpenAI (USA) draws the coloring pages from your photo or description. OpenAI states that it does not use data sent through its API to train its models, and may keep it for up to 30 days to detect abuse before deleting it.
• Vercel (USA) hosts the website.
• Resend (USA) delivers our emails, such as sign-in codes.
• Sentry (servers in the EU) tells us when something breaks, with technical details of the error. We set it up to leave out IP addresses, cookies, and anything you upload or type.

Some of these providers are in the United States. Transfers there are protected by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

You can ask to see, correct, export or delete your data, object to how we use it, or withdraw your consent at any time. To delete your account, your saved pages or your waitlist entry, email hello@magicoloring.com from the address you used, and we'll take care of it within one month.

If you think we haven't handled your data properly, you can complain to the French data protection authority, the CNIL (cnil.fr), or the authority where you live.

If we change this notice, we'll update the date at the top. Important changes will be emailed to account holders.