Kid Canvas ("Kid Canvas," "we," "us") is made by Garritson Works LLC. Kid Canvas is a drawing, coloring, and creativity app designed for children. Because it is a children's app, we hold ourselves to a higher standard than the law requires. This policy explains, in plain language, exactly what the app does and does not do with data.
What we collect
We designed Kid Canvas to collect as little as possible. Specifically:
- Artwork & creations — the drawings, coloring pages, mazes, and reveals your child makes are stored on the device and, if you use family sync, in your family's private Apple iCloud account. We do not have a copy on our servers and we cannot see your child's artwork.
- AI coloring-page requests — when a parent enables cloud AI, the short text idea a child types or dictates, the selected age band and page settings, the app version, a random request ID, the free/Plus tier, and an anonymous install-scoped app ID are sent to our processing service to generate a page and enforce usage limits. See "AI features" below.
- Purchase & entitlement records — RevenueCat receives an anonymous App User ID plus App Store receipt, purchase, product, and entitlement information so subscriptions and content packs can be purchased, restored, and unlocked. RevenueCat may also process limited technical information required to operate its service.
- Network security information — our Cloudflare service necessarily processes a request's network address for delivery, abuse prevention, and rate limiting. Short-lived rate-limit counters keyed by network address expire within 48 hours.
- No account required — Kid Canvas does not require a login, name, email, birthday, or phone number to use.
- No advertising or tracking identifiers — we do not collect the advertising identifier (IDFA), include ad networks, or use third-party behavioral analytics. RevenueCat's limited purchase reporting is described below.
What we do NOT collect
- We do not collect your child's name, contacts, location, photos, or microphone audio for our own use. (Speech typed by voice is turned into text on the device using Apple's speech recognition; we do not store the audio.)
- We do not use advertising SDKs or behavioral analytics services. Kid Canvas does not measure a child's engagement for advertising, profiling, or cross-app tracking.
- We do not build profiles, do not target ads, and do not sell or share personal information for marketing.
AI features — how they work
Kid Canvas can turn a child's idea into an original coloring page in two ways:
- On-device (private, free). On supported iPads, pages are generated directly on the device using Apple's Image Playground. Nothing leaves the device.
- Cloud (for other devices / higher quality). The short text idea, selected age band, and page settings are sent over an encrypted connection to our processing service (a Cloudflare Worker). The Worker sends OpenAI only the filtered idea and generation instructions needed to create the page. Your child's drawing is never sent.
Before any idea is used, it is filtered for safety: ideas mentioning real people, brands, personal details (like an address, phone number, or school name), or anything unsafe are blocked, and each idea is screened by an automated content-safety check. Our Worker does not persist the text idea or generated image. It receives an anonymous install-scoped app ID for usage limits, but that ID is not forwarded to OpenAI. OpenAI may retain API abuse-monitoring logs for up to 30 days and does not use API inputs or outputs to train its models by default.
Parental control of cloud AI. Because the cloud feature sends a text idea off the device, it can be controlled in the Parent Area. Parents can prefer the private on-device option where their device supports it.
Service providers
We use a small number of service providers only where needed to operate Kid Canvas:
- Apple — App Store payments and optional private family sync through iCloud/CloudKit. Apple handles payment details; we do not receive card information. Apple Privacy Policy
- RevenueCat — purchase validation, purchase restoration, and subscription/content-pack entitlement delivery using an anonymous App User ID and App Store purchase records. We do not send RevenueCat names, emails, artwork, AI prompts, microphone audio, location, or IDFA. RevenueCat Privacy Policy
- Cloudflare — encrypted request delivery, security, abuse prevention, and rate limiting for optional cloud AI. Our Worker does not persist AI ideas or generated images; short-lived network rate-limit counters expire within 48 hours. Cloudflare Privacy Policy
- OpenAI — content-safety screening and generation of an optional coloring page from the filtered text idea and page instructions. OpenAI does not receive the child's name, email, artwork, photo, microphone audio, RevenueCat ID, or direct device identifier. OpenAI Privacy Policy
Family sync (iCloud)
If you enable syncing, artwork and settings sync through Apple iCloud (CloudKit) within your own Apple family. This data lives in your private Apple account, protected by Apple's security — not on our servers. Deleting a creation on one device removes it across your synced devices.
Children under 13 & parental consent (COPPA)
Kid Canvas is designed for families and is intended to be set up and supervised by a parent or guardian. We take the U.S. Children's Online Privacy Protection Act (COPPA) seriously.
- Nothing is required to use the app. A child can draw, color, solve mazes, and use magic reveals without providing any personal information and without an account.
- The cloud AI feature is off by default and gated by a parent. The only feature that sends a child's creative input off the device is "AI Generated Coloring Pages." It stays disabled until a parent enables it in the Parent Area after an on-screen disclosure explains what is sent and why.
- What is sent, and only then. When a parent enables cloud AI, the child's short text idea and page settings are processed solely to generate that coloring page and enforce usage limits. They are not used to build a child profile, are not used for advertising, and are not shared with other users. Your child's drawing is never sent.
- Parents stay in control. A parent can turn the cloud AI feature off at any time, prefer the on-device option that sends nothing to the cloud, and contact us to review or delete any information associated with your use.
- No behavioral advertising, ever. We include no advertising SDKs or behavioral analytics services and do not sell or share a child's personal information for marketing or tracking.
If you believe a child under 13 has provided us information without your consent, contact us at the support address below and we will delete it.
Purchases
Any purchases (a subscription or content packs) are handled by Apple through the App Store and are presented only behind the parental gate. RevenueCat processes anonymous receipt, purchase, and entitlement records so purchases can be validated, restored, and unlocked. Payment details are handled by Apple; we do not receive card information. We never place advertising in front of your child.
Data retention & security
Your child's artwork is retained by you, on your device and in your iCloud, until you delete it. Our Worker does not persist AI text ideas or generated images. Cloudflare network rate-limit counters expire within 48 hours. OpenAI may retain API abuse-monitoring logs for up to 30 days. RevenueCat retains anonymous purchase and entitlement records under its privacy policy. Data in transit is encrypted using HTTPS.
Changes to this policy
If we change how the app handles data, we will update this page and the "last updated" date above. Material changes affecting children's data will be reflected before the feature ships.
Contact us
Questions, concerns, or a request about your data? Email support@garritsonapps.com. We aim to respond within 1–2 business days.