Privacy policy · Kids Coloring Fun

Last updated: 21 October 2026

Publisher: Hussain Al-saady. Privacy contact: tergnaids@gmail.com.

Kids Coloring Fun lets an account holder turn a chosen family photo into a printable coloring page. This policy describes the Kids Coloring Fun app and its API at me-in-color.indexrai.cc.

Information we handle

Account details: your email address; a salted password hash for password accounts; and a provider subject identifier for Google or Apple sign-in. We store access-token hashes rather than the bearer tokens themselves.
Profile name: if Google or Apple provides your name during sign-in, the app stores it on your device to show in the profile menu. The name is not sent to our API.
Page and credit activity: generation job IDs and status, selected scene and style, model, timestamps, and credit ledger entries.
Photos and coloring pages: the photo you select for a generation, the generated image, and page information needed to restore your library.
Connection information: the API uses the connecting IP address briefly for login and deletion-form rate limits. We do not use it to infer your physical location or save it in your account records. Cloudflare processes IP addresses and traffic-routing/security metadata to deliver and protect API traffic; its handling is described in Cloudflare’s privacy policy.
Error logs: a small automatic error log is kept on your device to help troubleshoot failures. The app does not send or share this log.
Deletion requests: the email address entered on the public deletion form, encrypted on the API host while the request is pending verification.

We do not use advertising or analytics SDKs in the app.

How photos are processed

The app keeps a temporary, metadata-stripped copy of your selected photo in private app storage while preparing and submitting it, then removes that copy after the API accepts the job. A pending copy may remain briefly if needed to recover an uncertain upload; your original photo in Photos is not deleted. The API stores the source photo encrypted while a job is queued or running and removes the live copy when processing ends. Encrypted backup copies may remain for up to seven days. The app saves generated pages in its local library, and the API keeps an encrypted server copy until you delete the page or account so the library can be restored on another device. Deleted files may remain in encrypted backups until those backups expire.

API image files are encrypted at rest using AES-256-GCM with a server-held key. The encrypted files are not directly viewable as images, but the API uses the key to process source photos and return generated pages; a server operator with access to the key can decrypt them. During generation, temporary plaintext working files are created on the API host and removed when the job worker exits.

To create the page, our API sends a prepared version of the selected photo, optional face-reference crops, and generation instructions to OpenAI’s Images API. Kids Coloring Fun’s OpenAI API configuration has data sharing for model training disabled. OpenAI says API customer content is not used to train or improve its models by default unless a customer opts in. Retention: OpenAI’s standard API abuse-monitoring logs may contain request and response content for up to 30 days. OpenAI says these logs support enforcement of its Usage Policies and agreements and mitigation of harmful uses; its terms also allow processing as needed to provide the service and comply with law. This default cannot be turned off in Kids Coloring Fun. OpenAI offers Zero Data Retention and Modified Abuse Monitoring controls to eligible customers with prior approval; we have not verified that either control is enabled for this API project, so assume standard retention applies. OpenAI may retain data longer when required by law or reasonably necessary to protect its services or others from harm. Certain flagged image inputs may be retained for manual review even when retention controls apply. These logs are not exposed as a Kids Coloring Fun user history; OpenAI may use authorized personnel and, for flagged content, relevant service providers for safety review. See OpenAI API data controls, OpenAI Business Terms, and OpenAI’s sub-processor list.

Why we use information

create and secure your account, sign you in, and prevent unauthorized access;
submit and restore coloring-page jobs and keep your credit balance accurate;
operate, secure, troubleshoot, and maintain the API; and
verify and process account-deletion requests.

Service providers

We use OpenAI to process the photo for image generation, Google or Apple when you choose its sign-in option, and Cloudflare to provide DNS, HTTPS delivery, and the tunnel to the API host. These providers process information to provide their services under their own terms and privacy policies. We do not sell account information or family photos.

Storage and security

The API database and encrypted image files are held on the operator-managed Windows server. Email addresses are encrypted in the database; passwords are stored as salted hashes; API image files are encrypted at rest using AES-256-GCM. The server can decrypt image files using its protected data key; this is encryption at rest, not end-to-end encryption. Production app builds require HTTPS for API connections. Cloudflare terminates public HTTPS before forwarding requests through the private tunnel to the server.

We keep daily server backups for up to seven days. After account deletion, a deleted record may remain in an existing backup until that backup expires. OpenAI’s separate retention practices are described above. No system can promise absolute security.

Account and data deletion

In the app, open the account menu and choose Delete account. This disables sign-in and removes the account, provider links, credits, server-side jobs, source photos, and generated pages. Pages saved on the current device are also removed. A running image request is cancelled where possible; a request that has already reached OpenAI cannot be recalled.

If you no longer have the app, use the Kids Coloring Fun account-deletion request page. Web requests are recorded and the operator verifies account ownership before deleting data. Pending requests are removed after 30 days if they are not verified. For help, contact tergnaids@gmail.com.

Children and family photos

Kids Coloring Fun does not ask for a child’s name, age, or other profile details. A photo may depict a child or other family member. Only submit a photo that you are allowed to use and that you are comfortable sending to our API and OpenAI for this generation.

Changes and contact

We will update this page when our data practices change. For privacy questions or deletion help, contact tergnaids@gmail.com.