BrushPopPrivacy Policy for BrushPop
Effective Date: October 2, 2026
BrushPop ("we," "us," or "our") is committed to protecting the privacy of our users ("you" or "your"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, iPhone and iPad app, and BrushPop in ChatGPT, which allow users to sign up, generate black and white coloring page stencils from text prompts, and paint and share the generated stencils (the "Service"). Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.
1. Information We Collect
1.1 Personal Information:
When you sign up for BrushPop, we may collect personal information such as your name, email address, and username.
1.2 User-Generated Content:
When you use the Service to generate, paint, and share stencils, we collect and store the content you create and share.
1.3 Usage Information:
We may collect information about how you access and use the Service, including your IP address, browser type, operating system, and referring URLs.
In the iPhone and iPad app, we record app sessions, onboarding steps, sign-in outcomes, coloring milestones, saves, sharing actions, collaboration activity, and paywall interactions to understand where people encounter problems and improve BrushPop. A random installation identifier lets us observe the first screens before you sign in. If you sign in, we may associate those observations with your BrushPop account. These measurement records do not include your artwork, coloring-page descriptions, name, email address, or invitation links.
We also record verified in-app purchase observations, including the product, transaction identifier, purchase date, price, currency, and whether an offer is a free trial. Apple processes your App Store payment; we do not receive your payment card details.
1.4 BrushPop in ChatGPT:
When you create and color a page in ChatGPT, BrushPop receives your coloring-page description and stores the generated artwork, your colors, and a temporary session identifier. We use session and usage identifiers to keep your page available and apply creation limits. Creating and coloring as a guest does not create a BrushPop account. If you choose to save, we ask you to connect a BrushPop account using Sign in with Apple.
1.5 Optional Advertising Measurement:
If you allow tracking through the iPhone or iPad permission prompt, BrushPop uses Meta's software development kit (SDK) to share its installation and activation signal, standard app session activity and duration, and selected actions that happen after permission: completing onboarding, coloring five distinct regions, starting a verified free trial, and making a verified paid purchase. Purchase events can include the amount and currency. Earlier BrushPop actions are not replayed to Meta when you give permission.
Meta's SDK also processes device identifiers, including the advertising identifier, and technical information about the app, device, and network connection, such as your IP address. The event fields we add do not include your artwork, coloring-page descriptions, name, email address, BrushPop account identifier, transaction identifier, or invitation links.
2. How We Use Your Information
2.1 Providing and Improving the Service:
We use the information we collect to provide, maintain, and improve the Service.
2.2 Communication:
We may use your email address to send you service-related notifications and promotional messages. You can opt-out of receiving promotional messages at any time.
2.3 Aggregated Data:
We may aggregate and anonymize data collected through the Service for statistical purposes and to improve our services.
2.4 Temporary ChatGPT Drafts:
Guest access normally expires 24 hours after the temporary session is created. Starting Save can extend access to allow time to connect your account, up to a maximum of 26 hours from session creation. After expiry, background cleanup removes unsaved artwork files and their creation and coloring records. Removal is not immediate: active processing may finish first, and failed cleanup is retried.
Artwork saved to your BrushPop account, including its description and colors, is retained in your library and is not removed by guest expiry. These time limits describe BrushPop's temporary drafts, not the retention of your ChatGPT conversation or data processed by other providers under their own policies.
3. Sharing Your Information
3.1 Third-Party Service Providers:
We may share your information with third-party service providers who assist us in operating the Service and conducting our business. We send coloring-page descriptions and a session or account identifier to OpenAI to generate pages. Our hosting, database, storage, and sign-in providers process the content and account information needed to operate BrushPop. ChatGPT also processes information under its own policies.
3.2 Legal Requirements:
We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to comply with legal obligations or to protect our rights, property, or safety, or that of our users or the public.
3.3 Saved ChatGPT Artwork:
Saving from ChatGPT links your page and coloring progress to the account you connect. Saved pages start private and do not appear in the public gallery. If you invite people to color together, active participants can access the shared painting. Choosing Publish makes the artwork public; saving or finishing a private page does not publish it.
3.4 Meta Advertising and Your Choices:
We use the optional information described in section 1.5 to measure and improve BrushPop advertising. Meta may combine it with information from Meta services and other apps and websites to measure, personalize, and deliver advertising and improve its services, as described in Meta's Privacy Policy.
You can decline tracking and continue using BrushPop. You can also withdraw permission in your device's Settings under Privacy & Security > Tracking > BrushPop. If you decline, BrushPop does not start Meta measurement. If you withdraw permission, BrushPop stops starting new Meta event submissions and accessing your advertising identifier. Withdrawal does not erase information previously shared or cancel data already queued or in transit after earlier permission. Neither choice turns off our internal product measurement described in section 1.3. You can also manage your advertising choices through Meta's settings.
Apple may provide aggregate advertising attribution independently of tracking permission. That aggregate measurement does not give BrushPop or Meta your advertising identifier.
4. Data Security
We take reasonable measures to protect your information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
5. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this Privacy Policy.
6. Contact Us
If you have any questions about this Privacy Policy, please contact us at jack@brushpop.app.
By using the Service, you signify your acceptance of this Privacy Policy. If you do not agree to this Privacy Policy, please do not use the Service.