Privacy

Privacy policy

Last updated: 19 October 2026

Colour Within is an adult paint by numbers app for iPad, developed by the Colour Within team. This policy explains what information is collected when you use the app, and when you visit this website, and why.

No accounts

Colour Within has no sign-in, no account creation, and no social login. We never ask for your name, email address, or password. Your subscription status comes from Apple's App Store, not from an account with us.

What we collect

Each item below corresponds to a row in our App Privacy declaration on the App Store. Most of it is collected by third-party SDKs: Google Mobile Ads and the Google User Messaging Platform on the ad-supported tier, TelemetryDeck for privacy-first analytics, and the Meta SDK for advertising measurement. Each one is described in its own section below.

• Coarse location: an approximate geographic area (not precise GPS coordinates) used by Google Mobile Ads to serve regionally appropriate advertisements.
• Performance data: metrics about how the app performs on your device, such as load times, frame rates and memory use, used to improve app quality.
• Crash data: summaries of crashes and unexpected exits, used to find and fix problems. See Crashes and diagnostics below.
• Other diagnostic data: supplementary technical data, such as device model and system version, collected alongside crash and performance signals.
• Advertising data: identifiers and signals used by Google Mobile Ads to measure ad delivery and effectiveness, collected only on the ad-supported tier.
• Product interaction: records of in-app actions (such as opening a page, finishing a page, or sharing a timelapse) used to understand which features are most useful, via TelemetryDeck.
• Purchase history: when you buy or renew the ad-free subscription, TelemetryDeck records the product, its price, the currency and your App Store country, so we can see how the subscription is doing. It does not receive your name, Apple ID or payment details.
• Device ID: your iPad's advertising identifier (IDFA), only if you allow tracking through App Tracking Transparency (ATT). Google Mobile Ads uses it to limit how often you see an ad and to attribute conversions, and the Meta SDK uses it to measure our advertising.
• Other data: basic device and app information the Meta SDK collects for advertising measurement, as described below.

What stays on your device

Your drawings and colouring sessions are stored entirely on your iPad. Colour Within does not send your artwork, colouring progress, or drawing strokes to any server. Timelapse videos are made on your iPad and only leave it when you choose to save or share one.

Your settings, including your highlight style, label size and theme, are stored on your iPad. Two of them are also reported to TelemetryDeck, as described below.

Artwork and music downloads

All artwork, and the music used in timelapses, is downloaded from our content server. These requests ask only for the files the app needs. They do not include an advertising identifier, analytics identifier or any information about you or your colouring.

Ad-supported tier

When you use the free, ad-supported tier of Colour Within, Google Mobile Ads and the Google User Messaging Platform are active. Ads appear in the Library, when you start or stop colouring a page, before sharing from My Work, and sometimes when you return to the app.

Before iOS asks whether you allow tracking, the app shows a short screen explaining why. If you decline ATT, personalised advertising is not served and your advertising identifier (IDFA) is not collected. Google Mobile Ads may still collect Coarse Location and Advertising Data to serve and measure non-personalised ads.

We use the Google User Messaging Platform (UMP) to present the required consent dialogue in regions where GDPR or equivalent regulations apply. Your consent choices are stored on your iPad and respected by both the Google Mobile Ads SDK and the Meta SDK. You can review them at any time from Ad & Data Privacy Choices in Settings.

Subscription tier

When you have an active Colour Within subscription, ads are fully suppressed and the Google Mobile Ads SDK is not loaded. Subscribers are never asked for tracking permission, and Google does not collect Advertising Data, Device ID or Coarse Location. TelemetryDeck analytics remain active to help improve the app, and the Meta SDK remains active for advertising measurement, as described below.

Meta advertising measurement

Since version 1.0.4, Colour Within has included the Meta (Facebook) SDK. We use it for one purpose: to measure whether our advertising for the app leads to installs, using Apple's privacy-preserving SKAdNetwork framework. It is active on both the ad-supported and subscription tiers.

We have configured this SDK to collect as little as possible. Automatic event logging is switched off. If you allow tracking through App Tracking Transparency, the SDK can read your advertising identifier (IDFA) to link an install to the ad that led to it. If you do not allow tracking, iOS does not give the SDK your advertising identifier, and Meta relies on SKAdNetwork alone. The app sends Meta just two events: one when the app is opened, and one, once per install, when you finish your first page. That second event tells us whether our advertising reaches people who actually enjoy colouring, and it does not include the page or your artwork.

Along with these events, the SDK sends Meta basic device and app information (such as device model, operating system version and app version) and its own diagnostic signals. It never receives your artwork, your colouring progress or your location.

In regions where consent is required, the consent dialogue presented in the app applies to Meta as well as Google. Meta processes this information as described in the Meta Privacy Policy.

TelemetryDeck analytics

Colour Within uses TelemetryDeck for privacy-first analytics, on both tiers. TelemetryDeck does not collect names, email addresses, advertising identifiers or location. To count users without knowing who they are, the app gives TelemetryDeck a device identifier that belongs to Colour Within alone (not the advertising identifier), and TelemetryDeck hashes it before storing it.

Signals include actions such as opening, finishing or sharing a page, which page it was, whether you have the ad-free subscription, and how the app is performing. If you answer the question “Did you enjoy this page?”, your answer is sent along with the page's title, so we can choose future artwork. When you close the highlight editor, the app reports the highlight settings you chose (such as border style, pattern and opacity, with colours described only by type, never as exact values), and when a page opens it reports the label size in use. This tells us whether the defaults suit most people. TelemetryDeck's privacy policy is available at telemetrydeck.com/privacy.

Crashes and diagnostics

Colour Within deliberately does not embed Firebase Crashlytics or any other third-party crash reporter. Instead, it uses Apple's MetricKit. iPadOS gives this to apps only if you chose to share analytics with app developers. If you did, the app sends a short summary to TelemetryDeck when iPadOS reports a crash or unexpected exit. The summary contains the type of crash, how many times the app exited and why, peak memory use, the device model, the iPadOS version and the app version. It never includes your artwork, stack traces or anything you have typed.

The app also tells TelemetryDeck when it cannot save your progress, or when a page or timelapse fails to open or build. These reports describe what went wrong, such as an error code, and which page was affected.

The Google Mobile Ads SDK separately collects its own crash and performance data on the ad-supported tier, to keep ad delivery reliable.

Ratings

Colour Within occasionally asks iOS to show Apple's rating prompt, and Settings includes a Rate Colour Within link to the App Store. Apple handles any rating or review you leave, under Apple's privacy policy. The app records on your iPad when it last asked, so it does not ask too often, and tells TelemetryDeck that it asked. It cannot see whether you left a rating.

This website

This website, colourwithin.app, is a static site hosted on Cloudflare. It has no sign-in and sets no cookies of its own. Three third parties receive requests when you view a page:

• Cloudflare serves the pages. Cloudflare processes the IP address of each visitor to deliver the site and protect it from abuse, under the Cloudflare Privacy Policy.
• TelemetryDeck counts page views. Its web analytics use no cookies or fingerprinting. To tell visitors apart within a single day, it combines your IP address, your browser's user agent and a salt that changes daily, then hashes the result, so it cannot recognise you across days or across other websites. Each page view records the page address, the referring site, your approximate country, and your browser and device type. TelemetryDeck's privacy policy is at telemetrydeck.com/privacy.
• Google Fonts supplies the Nunito typeface. Your browser requests the font files from Google's servers, so Google receives that request, including your IP address, under Google's privacy policy.

Links to the App Store and Instagram take you to Apple's and Meta's own sites, which have their own privacy policies.

Children

Colour Within is a general-audience app. It is not directed at children under 13 and is not listed in the App Store's Kids Category. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

Data retention and deletion

To delete your drawings, timelapses and colouring sessions, use Clear My Work in Settings, or remove the app. Diagnostic data the Google Mobile Ads SDK collects (Crash Data, Performance Data, Other Diagnostic Data) is retained by Google in line with Google's own data retention policies. TelemetryDeck keeps signals for the period described in its privacy policy. Information the Meta SDK collects is retained by Meta in line with the Meta Privacy Policy.

Your rights

Depending on your jurisdiction, you may have rights to access, correct or delete personal data held about you. To exercise these rights, or to ask us to delete any data associated with your use of the app, please contact us at the address below. We will respond within 30 days.

Contact

If you have questions about this privacy policy or would like to exercise your data rights, please contact:

Colour Within Team
team@colourwithin.app

Changes to this policy

We may update this privacy policy from time to time. Changes will be reflected by the "Last updated" date at the top of the page. Continued use of the app after changes are posted constitutes acceptance of the updated policy.