Privacy Policy

Color It Up is operated by Helix Media LLC, located in San Antonio, Texas, United States. In this policy, “Color It Up,” “we,” “us,” and “our” refer to Helix Media LLC.

Privacy questions and requests may be sent to nathan.hovatter@helixmediafx.com or made by phone at 210-902-9150.

Depending on how an adult uses the service, we may collect:

• Account information: email address, display name, authentication identifiers, account creation date, and basic profile information received from Google or another sign-in provider.
• Family settings: adult-studio locks, kid permissions, spending limits, and a protected cryptographic version of a parent PIN. We do not store the readable PIN.
• Account choices and authorization records: whether the adult selected personal or family use, confirmation that the account holder is at least 18, accepted policy versions and dates, family-notice acknowledgments, and feature permission or revocation events.
• Creative content: prompts, magic words, sketches, uploaded images, coloring pages, generated images, vector artwork, titles, edits, revisions, and coloring activity. Source inputs are processed for the request; generated projects and later edits may be saved to the adult-owned library.
• Community submissions: artwork, project titles, and captions that an adult intentionally submits for moderation and public sharing. Submissions remain nonpublic until approved.
• Purchase and credit information: plan, subscription status, point balance and history, generation costs, and Stripe customer or subscription identifiers. We do not receive full payment-card numbers.
• Technical information: IP address, browser and device information, security events, request logs, session cookies, error information, and service performance data.
• Support information: messages, attachments, and contact information provided when an adult requests help.

We use information to:

• create and secure adult accounts and keep users signed in;
• generate, vectorize, save, sync, display, export, and recover artwork;
• operate points, subscriptions, purchases, and account controls;
• apply family settings and enforce adult-controlled permissions;
• moderate community submissions and prevent abusive or illegal content;
• provide support and send account, security, billing, and service messages;
• detect fraud, troubleshoot failures, protect the service, and comply with law; and
• improve reliability and understand feature use without targeted advertising.

We currently use email for transactional and service-related messages. If we later introduce promotional email, we will provide required notices and a way to unsubscribe.

Prompts, sketches, uploaded images, and generated content may be sent to OpenAI to create or transform images and suggest project titles. Generated images may also be sent to our vectorization service to create editable SVG line art. These providers process content for us under their service terms and security controls.

OpenAI states that API inputs and outputs are not used to train its models by default unless the API customer opts in. We do not intend to opt in. OpenAI may retain API abuse-monitoring data for up to 30 days, and content associated with suspected child sexual abuse material or other serious safety issues may be retained or reviewed as required for safety or law.

An adult must have permission to upload every image. Do not upload a photograph that identifies a child unless you are that child's parent or legal guardian, have authority to provide it, and understand that it will be processed to provide the requested feature.

We use service providers that may process information on our behalf:

• Supabase for accounts, databases, and private project storage;
• OpenAI for AI image and title processing and safety controls;
• Vercel for website and server hosting;
• Stripe for subscriptions, checkout, and billing records;
• Google when an adult chooses Google sign-in;
• Cloudflare R2 or another S3-compatible provider for encrypted-access artwork backups; and
• Fly.io-hosted infrastructure for vectorization services.

We may also disclose information when reasonably necessary to comply with law, protect a person from harm, investigate abuse, enforce our Terms, or complete a merger, financing, acquisition, or sale. If ownership changes, this policy continues to apply unless users receive notice of a change.

Color It Up is designed for creative families, but the account holder must be an adult. A parent or legal guardian controls the account, purchases, uploads, AI generation, privacy settings, and community submissions for a child using the service.

Adults may use either Kids Studio or Adult Studio without enabling Family Controls. When an adult intentionally activates Kids Only Mode to hand over the device, Adult Studio, purchases, sharing, and account settings are protected by the parent PIN. AI sketches, photo uploads, Magic Words, and 3D Magic begin disabled. Enabling one requires the adult to review its data use and provide a recorded authorization from the signed-in adult account. The adult may revoke any permission later. A paid membership is not required to manage these permissions.

The parent PIN protects leaving Kids Only Mode and reaching adult account controls after the adult hands over the device. It is not requested again for each permission while the adult is already managing Family Settings.

We do not knowingly ask a child for a legal name, email address, precise location, or payment information. We do not use children's information for targeted advertising or sell it. A child's artwork and image can still be personal information, particularly when it includes a face, voice, name, or other identifier. Parents should minimize such information.

A parent may ask us to review, correct, export, or delete information associated with the family account; revoke permission for further child use; or withdraw a community submission. We will verify the requesting adult's account or identity before fulfilling the request.

We are not launching a child-controlled community, messaging, comments, or child profile feature under this policy. Any future children's community will require a separate safety, consent, moderation, and privacy review before launch.

Projects are private by default. When an adult enables community sharing and intentionally submits a project, its artwork, title, and caption may become publicly available after moderation. Public content can be viewed, copied, or reshared by others outside our control.

Under the current service, only Adult Studio projects may be submitted. Kids Studio projects cannot be submitted to the community, even by an adult, until the separate child-community safeguards are ready.

We may reject, hide, or remove submissions for safety, privacy, legal, or community-guideline reasons. Contact us to request removal. We will stop displaying approved content after processing the request, although cached or backup copies may take additional time to expire.

We use cookies and similar local storage that are necessary for sign-in, security, account preferences, and core application operation. We do not sell personal information, use sign-in information for targeted ads, or allow third-party behavioral advertising in the service.

Helix Media LLC may advertise Color It Up using general or contextual campaigns. Those campaigns will not use Color It Up account or child data to target individual users.

• Accounts and private projects: retained while the account is active or until the adult deletes the project or requests account deletion. We aim to remove active account content within 30 days after a verified deletion request, unless retention is legally required.
• Backups: backup copies are rotated and scheduled to expire within 30 days.
• AI processing: OpenAI API abuse-monitoring content may be retained for up to 30 days, subject to safety and legal exceptions.
• Operational and security logs: generally retained for no more than 30 days unless needed to investigate fraud, abuse, security, or a legal claim.
• Community content: retained until withdrawn, removed, or the associated project/account is deleted, followed by normal cache and backup expiration.
• Billing and transaction records: retained as reasonably necessary for accounting, taxes, disputes, fraud prevention, and law.

We use access controls, private storage, encrypted network connections, protected credentials, row-level database restrictions, moderation, and backup controls designed to protect information. No system is completely secure, and we cannot promise that unauthorized access will never occur.

An adult account holder may request access, correction, deletion, or a copy of account information by contacting us. Users may also manage projects, family permissions, subscriptions, and community sharing from the service where those controls are available.

We do not sell personal information or process it for targeted advertising, so there is no sale or targeted-ad opt-out needed for our current practices. We will not discriminate against a user for making a privacy request.

We may update this policy as the service or law changes. If a change materially affects how we use information, we will provide appropriate notice and obtain new consent when required before applying the new practice.

Contact Helix Media LLC at nathan.hovatter@helixmediafx.com or 210-902-9150.