Calma Color

Privacy Policy

Effective from: 11 October 2026

This policy explains how data is processed when you use the Calma Color mobile app (the “app”) and the calmacolor.app website (the “website”). We wrote it to be read in a few minutes.

1. Who is responsible for your data

The data controller is Mateusz Kozłowski MiTySoft, ul. Jana III Sobieskiego 14D1, 05-083 Wierzbin, Poland, tax ID (NIP) 1181964793, REGON 541897652 (“we”, “us”).

Privacy contact: contact@calmacolor.app. We have not appointed a data protection officer, as we are not required to.

2. In short

  • Calma Color has no accounts. We never ask for your name, e-mail address or phone number.
  • Your coloring pages and progress are stored on your device — and in your phone’s own backup, if you have it turned on. They are not sent to us.
  • Photos you turn into coloring pages are processed entirely on your device. They are never uploaded.
  • Usage statistics and crash reports are off until you turn them on yourself.
  • The free version may show ads served by Google AdMob — never while you are coloring. Calma Premium removes all of them.
  • We do not sell your data.

3. What stays on your device

We have no access to this data and it is not sent to us:

  • colored fields, the order you colored them in and session time,
  • Calma Points and unlocked bonuses,
  • favourite artworks and your preferences (pace, favourite themes, chosen sounds),
  • pages created from your photos (the photos themselves are not stored),
  • reminder settings.

Camera and photos. The app uses the camera or photo library only when you choose to create a coloring page from a photo. The selected photo is processed in the device’s memory and never leaves it.

Your phone’s backup. If device backup is turned on (Google on Android; iCloud or a computer backup on iPhone), the system includes the data above in it, as it does for other apps, and can restore it on a new phone. The backup is kept in your Google or Apple account, under their terms; we have no access to it. You can turn it off in your phone’s settings.

Deleting the app deletes this data from the device. We keep no backup of it on our servers.

4. What data is processed, and why

Purpose Data Provider When Legal basis
Usage statistics In-app events (such as opening a page, finishing an artwork, viewing the Premium offer), installation ID, device model, OS version, language, approximate country Google Firebase Analytics Only after you turn on “Help improve Calma” Your consent
Crash reports Error trace, device model, OS and app version Google Firebase Crashlytics Only after you turn on “Help improve Calma” Your consent
Remote configuration Installation ID, technical request data (such as IP address) Google Firebase Remote Config At launch Our legitimate interest in running the app reliably and securely
New-artwork notifications Device notification token Google Firebase Cloud Messaging Only if you turn on “New artworks and journeys” Your consent
Premium purchase Anonymous app user ID, purchase information, technical request data (such as IP address) RevenueCat and Apple App Store / Google Play On purchase, restore and entitlement checks Performance of a contract; tax and accounting obligations
Ads (free version) Device advertising ID, IP address, device information, ad interactions, your consent choices Google AdMob and its advertising partners When consent is checked and when an ad is fetched or shown Your consent where the law requires it (including the EEA, the United Kingdom and Switzerland); elsewhere our legitimate interest in funding the free version
New illustrations Technical request data (such as IP address) Cloudflare (R2) When new content packs are downloaded Our legitimate interest in delivering content
Contact and support Your e-mail address and message, including anything you choose to tell us Our e-mail provider When you write to us Our legitimate interest in replying and handling the request; for purchase matters, performance of a contract

Analytics events never contain the content of your work, your photos, file names or contact details.

Payments are handled by Apple or Google only. We never see or store your card details.

The quiet-moment reminder is a local notification: your phone schedules it, with no server involved.

Providing data is voluntary. Without the data needed for a purchase, Calma Premium cannot be bought or restored; the rest of the app works regardless of the consents you give.

5. Ads and your choices

In the free version Calma Color may show three kinds of ads:

  • a rewarded ad — only when you choose it yourself, to open a Premium page of your choice for a set time;
  • one banner in the Library, between the illustrations, clearly marked as an advertisement;
  • an occasional full-screen ad after you finish an artwork, on the way back to the Library — at most once per session and once a day.

There are never ads on the coloring screen, in your own works, during export, in settings or when the app starts. If you own Calma Premium you see no ads at all, and the app makes no ad requests on your behalf.

If you live in the European Economic Area, the United Kingdom or Switzerland, you will see Google’s consent dialog before the first ad. You can agree to personalised ads, decline, or choose detailed settings, and change your decision at any time under Settings → Privacy → Ad privacy choices.

On iOS the system may additionally ask for permission to track (App Tracking Transparency). You can also reset or disable the advertising ID in your phone’s settings.

Ad content is supplied by advertisers through Google; we do not control individual ads. How Google handles data is described in How Google uses information from sites or apps that use its services.

6. Who receives data

We do not sell personal data. Data goes only to the providers a given feature cannot work without:

  • Google Ireland Limited and Google LLC — Firebase (statistics, crash reports, configuration, notifications) and AdMob (ads); Google Privacy Policy;
  • RevenueCat, Inc. — handling and verifying the Premium purchase; RevenueCat Privacy Policy;
  • Apple Distribution International Ltd. and Google Commerce Limited — stores and payments; they act as independent controllers under their own terms;
  • Cloudflare, Inc. — hosting of new illustration packs; Cloudflare Privacy Policy;
  • Vercel Inc. — hosting of the website; Vercel Privacy Policy;
  • our e-mail provider, when you write to us.

We may also disclose data where the law or a binding request from an authority requires it, and where necessary to establish, exercise or defend legal claims.

7. Transfers outside the EEA

Some providers process data in the United States and other countries outside the European Economic Area. Transfers rely on the European Commission’s adequacy decision for the EU–US Data Privacy Framework where the provider is certified, and otherwise on standard contractual clauses approved by the European Commission. You can ask for a copy of the safeguards at contact@calmacolor.app.

8. How long data is kept

  • Data on your device — until you delete the app or clear its data. Your phone’s backup is managed in your phone’s settings and your Google or Apple account.
  • Usage statistics — user-level and event-level data for no longer than 14 months.
  • Crash reports — 90 days.
  • Installation ID and notification token — until you uninstall the app or turn the feature off, and then for the period set by Google’s policies.
  • Advertising data — for the period set by Google’s policies and your consent choices.
  • Purchase data — for as long as handling the purchase requires, and tax and accounting records for 5 years from the end of the year in which the tax obligation arose.
  • Correspondence — for as long as it takes to resolve the matter, and then until any related claims become time-barred.

9. Your rights

You have the right to:

  • access your data and receive a copy of it,
  • have it corrected, deleted or its processing restricted,
  • data portability,
  • object to processing based on our legitimate interest,
  • withdraw consent at any time; this does not affect the lawfulness of processing before the withdrawal,
  • complain to the President of the Personal Data Protection Office in Poland (ul. Stawki 2, 00-193 Warszawa) or to the supervisory authority in the country where you live.

Because there are no accounts, you control most of this yourself:

  • turn statistics and crash reports on or off: Settings → Privacy → Help improve Calma,
  • change ad consent: Settings → Privacy → Ad privacy choices,
  • turn off notifications: Settings → Ritual,
  • delete local data: uninstall the app.

For anything else, write to contact@calmacolor.app. We reply without undue delay and within one month at the latest. We do not know who the app’s users are, so for purchase data please include the “support ID” shown under Settings → About — without it we may be unable to find the data that relates to you.

We do not make decisions about you based solely on automated processing that would produce legal effects or similarly significantly affect you.

10. Children

Calma Color is made for adults and is not directed at children. We do not knowingly collect data from children under 16, or under any other age at which a person can consent to data processing on their own in a given country. If you believe a child has given us data, write to contact@calmacolor.app and we will delete it.

11. Residents of the United Kingdom and the United States

United Kingdom. You have the rights described in section 9 under UK data protection law. You may complain to the Information Commissioner’s Office (ICO).

United States. We do not sell personal information for money. If you allow personalised ads, passing the advertising ID to advertising partners may be treated in some states as “sharing” or “selling” data for targeted advertising. You can opt out at any time under Settings → Privacy → Ad privacy choices and in your phone’s ad settings. To the extent state privacy laws apply to us, you have the right to know what data we process, to have it corrected or deleted, and not to be treated worse for exercising these rights. Write to contact@calmacolor.app.

12. Security

We use reasonable technical and organisational measures suited to the nature of the app, and data is encrypted in transit. No method of storing or transmitting data can be guaranteed to be completely secure, however. You are responsible for securing your phone, its backups and the files you export.

13. This website

The calmacolor.app website uses no cookies and no analytics. If you pick a language for the site, that choice is remembered in your browser’s own storage; it is not sent anywhere and is not used for tracking. The support form sends nothing to a server: it opens your own e-mail app with the message filled in, and you send it yourself. Fonts, images and sounds are served from the same domain. The hosting provider (Vercel Inc.) processes standard network request data, including your IP address, to deliver the site and protect it from abuse. Links to the stores and other services lead to sites with their own privacy rules.

14. Changes

We may change this policy when the app, the list of providers or the law changes. The new version will appear on this page with a new effective date, and we will also announce material changes in the app.

15. Contact

Privacy questions: contact@calmacolor.app.