Privacy Policy

App: Vibrant Canvas: Paint by Numbers
Developer: Edenapp (independent developer)
Contact: edenapp.contacto@gmail.com
Last updated: 2026-06-11

This Privacy Policy describes how Vibrant Canvas ("we", "our", or "the app") collects, uses, and shares information when you use the application on Android devices. Please read it carefully. By downloading or using the app you agree to the practices described here.

1. Information We Collect

1.1 Analytics data — Google Firebase

We use Google Firebase Analytics to collect anonymous usage data. Firebase automatically collects the following information when you use the app:

A randomly generated anonymous user ID (not linked to your identity)
Device model, manufacturer, and screen resolution
Android OS version and language setting
App version and build number
How you installed the app (e.g., Google Play Store)
Country and region (derived from IP address; the IP itself is not stored)
First open date and time of each session

In addition, we collect the following gameplay events to understand and improve the player experience:

Which levels you start, complete, or exit early, and how long each takes
Ratings you assign to completed levels (1–5 stars)
How long you spend on the level selection screen before choosing a level
Font size and display settings you configure in Settings
Total session duration and number of sessions
Achievements unlocked
Whether and when you interact with optional in-app purchase prompts
When an advertisement is shown or dismissed

  We never collect your name, email address, phone number, location beyond
  country level, or any information that identifies you personally.
  All analytics are tied to an anonymous ID that cannot be traced back to you.

Firebase analytics data is transmitted to and stored on Google servers, which may be located outside your country, including in the United States. See Section 6 (International Transfers) for details.

Firebase is operated by Google LLC under their Privacy Policy.

1.2 Advertising data — Google AdMob

The free version of the app displays advertisements served by Google AdMob. To serve and measure ads, AdMob may collect:

Your device's Android Advertising ID (AAID) — a resettable, non-personal identifier
Approximate location (country/region level, derived from IP address)
Device type, OS version, and language
Interactions with advertisements (views, clicks, dismissals)

AdMob shares advertising data with Google's advertising partners to serve relevant ads and measure their performance. This constitutes "sharing" of personal data under some privacy laws (see Sections 7 and 8).

You can reset your Advertising ID or opt out of personalised advertising at any time in your Android device settings under Google > Ads.

AdMob is operated by Google LLC under their Privacy Policy.

1.3 Camera and photos

The Camera Unlock feature (available as an optional paid upgrade) allows you to import a photo from your device's camera or gallery and convert it into a personalised paint-by-number canvas.

  Photos are processed entirely on your device.
  They are never uploaded to our servers, never transmitted to any third party,
  and never stored outside your device. The camera permission is requested only
  when you choose to use this feature and is not used for any other purpose.

1.4 In-app purchases and subscriptions

If you subscribe to Vibrant Canvas Basic, the transaction is processed entirely by Google Play Billing. We do not receive, store, or have access to your payment card details, billing address, or any payment information. Purchase records are maintained by Google under their Payments Privacy Notice.

1.5 Information we do NOT collect

Name, email, phone number, or any account information
Precise GPS location
Contacts, calendar, or other app data
Photos (camera images never leave your device)
Health or financial data
Background location or microphone access

2. How We Use the Information

Analytics data is used exclusively to improve the app: identifying levels with high abandon rates, measuring engagement and session quality, prioritising content updates, and diagnosing performance issues.
Advertising data is used by Google AdMob to serve ads and measure their effectiveness. We do not use advertising data for any other purpose.
Camera data is used only to generate your personal paint-by-number canvas and is never used for any other purpose.

3. Data Sharing and Third Parties

We do not sell your personal data. We share data only with the following third-party services, which are necessary for the app to function:

Service	Data Shared	Purpose	Privacy Policy
Google Firebase	Anonymous analytics events, device info	App analytics	Google Policy
Google AdMob	Advertising ID, device info	Ad serving and measurement	Google Policy
Google Play Billing	Purchase confirmation only	In-app purchases	Google Policy

4. Data Retention

Firebase Analytics events (GA4)

Gameplay events — such as which levels you play, how long you play them, ratings you give, time spent on the level selection screen, and font settings — are sent to Firebase Analytics as anonymous events. We retain these events for 14 months, after which Google deletes them automatically from their servers. We do not retain independent copies of this data.

Advertising data (AdMob)

Google AdMob retains advertising signals, including your Advertising ID and ad interaction data, for approximately 9 months for measurement and fraud prevention purposes, after which it is aggregated or deleted. This is controlled by Google and is subject to their data retention policies.

Local device data

Your level progress, gallery of completed paintings, streak counter, and settings are stored locally on your device only. This data is deleted automatically when you uninstall the app. It is not backed up to any server.

5. Security

All data transmitted to Firebase and AdMob is encrypted in transit using HTTPS/TLS. Local save data is stored in your device's protected application storage and is not accessible to other apps. No payment data passes through our systems.

6. International Data Transfers

Google Firebase and Google AdMob servers are operated globally, including in the United States. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, your analytics and advertising data will be transferred to and processed in the United States.

Google LLC participates in and has certified its compliance with the EU-U.S. Data Privacy Framework, providing an appropriate safeguard for these transfers under GDPR Article 46. For more information, see Google's Privacy Policy.

7. Your Rights Under GDPR (European Users)

If you are located in the European Economic Area, you have the following rights regarding your personal data under the General Data Protection Regulation (GDPR):

Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
Right to object — You may object to processing of your advertising data for personalised ads.
Right to restrict processing — You may request that we limit processing of your personal data where applicable.

Legal bases for processing:

Analytics: Consent — Firebase Analytics is initialised only after the consent decision for your region is resolved. No analytics data is collected before that point.
Advertising: Consent — AdMob is initialised only after you have had the opportunity to review and respond to the consent form (where required by law). You may also opt out at any time via Android device settings under Google > Ads.

Important note on data access and erasure requests:
Firebase Analytics stores gameplay events under a randomly generated anonymous identifier that is never linked to your name, email address, or any other information that would allow us to identify you. Because we have no way to match an email request to an anonymous record, we cannot retrieve, correct, or delete your individual analytics records on request.

If you wish to stop future analytics collection, you can disable analytics in your Android device settings or reset your Google Advertising ID (Android Settings > Google > Ads > Reset advertising ID). Firebase auto-deletes all events after 14 months.

For advertising data (Advertising ID) held by Google AdMob, you can manage, reset, or opt out directly via your Android device settings under Google > Ads, or by submitting a request to Google at policies.google.com/privacy.

You also have the right to lodge a complaint with your local data protection supervisory authority. In the EU, you can find your authority at edpb.europa.eu.

8. Your Rights Under CCPA (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:

Right to know — What personal information we collect and how it is used. We do not collect personal information that identifies you directly. Firebase Analytics uses a random anonymous ID; photos are processed on-device only.
Right to opt out of sale/sharing — Google AdMob shares your Advertising ID with Google's advertising partners. To opt out, disable ad personalisation in your Android settings under Google > Ads.
Right to non-discrimination — Exercising your CCPA rights will not affect your access to the app.

Deletion requests: Because we store analytics data only under a random anonymous identifier — with no link to your name, email, or identity — we are unable to locate or delete your individual records. To stop future data collection, reset your Android Advertising ID (Settings > Google > Ads). To request deletion of AdMob advertising data, contact Google directly at policies.google.com/privacy.

9. Children's Privacy

Vibrant Canvas is directed at users aged 18 and older and is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has used this app, please contact us at edenapp.contacto@gmail.com and we will promptly delete any associated data.

10. Changes to This Policy

We may update this Privacy Policy when we add features that affect data collection. We will update the "Last updated" date at the top and, for material changes, provide notice within the app. Continued use after an update constitutes acceptance of the revised policy.

11. Contact

Privacy questions or requests:
Email: edenapp.contacto@gmail.com
Response time: Within 30 days