Privacy Policy
Last Updated: September 10, 2026
MiniPaint AI ("we", "our", or "us") is dedicated to protecting your privacy. This Privacy Policy explains how our iOS application collects, uses, and safeguards information when you use our mobile application and related services.
1. Information We Collect
We believe in minimal data collection and local-first architecture:
- Account Information (Optional): The app works without an account. You can sign in with Apple or, starting with version 1.0.1, with an email verification code. For Apple sign-in, we receive the name and email address Apple shares, including a Hide My Email relay address if selected. For email sign-in, we receive the email address you enter. We also maintain a unique user identifier. These are stored in our authentication provider, Supabase, and used only to sign you in, sync your data between your devices, and link your subscription to you.
- Miniature Photos You Scan: While signed out, colour extraction runs on your device without uploading the photo. When you are signed in and tap Analyse colours, a downscaled copy of that photo is sent over HTTPS to our server, which forwards it to OpenAI's vision API solely to detect colour zones. The image is processed in real time and is not stored by us. OpenAI does not use API data to train its models and retains it for at most 30 days for abuse monitoring. Nothing is uploaded for analysis unless you are signed in and tap Analyse colours. Cloud AI analysis requires sign-in and an internet connection. Photos attached to saved projects are stored on your device and are included in cloud backup when you use Pro sync.
- Hobby Data: Your recipes, backlog, paint inventory and painting sessions are stored on your device. If you are signed in and subscribed to Pro, recipes, colour zones, painting steps, painting sessions, backlog, paint inventory, project images and progress photos are also synced to a private, row-level-secured database hosted by Supabase so they follow you between iPhone and iPad.
- Purchases: Subscription and purchase status is processed by RevenueCat on our behalf, identified by the same user identifier, so your Pro access works on every device. We never see your payment details.
- Diagnostics: Apple may share crash reports with us if you opt in. When you permit the optional Meta advertising measurement described below, Meta's SDK may also process SDK diagnostics, app and device information to operate and maintain its service.
Email Sign-In Delivery
Supabase manages email authentication and uses Resend to deliver verification codes. Resend processes the recipient email address, email content and delivery information, such as send times, delivery status and bounce reports, to deliver and troubleshoot these messages. We use this service for authentication, not marketing, and have disabled Resend open and click tracking. Delivery records may remain with our providers for their operational and security retention periods after an account is deleted. See Resend’s Privacy Policy and Data Processing Addendum. Contact us for help with a deletion request involving these records.
2. Optional Advertising Measurement
Starting with version 1.0.1, MiniPaint AI can use Meta's Facebook SDK to measure our advertising. After onboarding, iOS asks whether you allow tracking. If you decline, tracking is restricted, or you have not made a choice, we do not initialize this SDK or send it app events. Your choice does not restrict any MiniPaint feature.
If you allow tracking, Meta receives install and app-session events, the device advertising identifier, an SDK-generated identifier, and technical app, device and network information. Meta may associate this information with activity on other companies' apps and websites to measure advertising and make ads more relevant. We do not send Meta your miniature photos, recipes, backlog, paint inventory, name or email. Automatic purchase-event logging is disabled in this integration.
You can change your choice in iOS Settings > Privacy & Security > Tracking > MiniPaint AI. Withdrawing permission stops future measurement by this integration; it does not automatically erase data already received by Meta. Meta processes and retains information under its Privacy Policy, which describes its data controls. Contact us using the address below for help with a privacy request. Version 1.0 does not include this advertising SDK.
3. Cloud Sync & Security
When authenticated, your workbench data is transmitted securely over HTTPS (TLS encryption) and stored in dedicated cloud databases protected by row-level security. API credentials stored on your device utilize the iOS Keychain.
4. Account & Data Deletion
You have full control over your data. You can delete your account and every cloud record tied to it at any time from within the app under Profile > Cloud > Delete account or Profile > Privacy & data, and you can wipe everything stored on the device from the same Privacy & data screen. You may also request deletion by emailing us at hello@minipaint.space.
5. In-App Purchases & Subscriptions
All subscription payments, free trials, and renewals are handled securely by Apple via the App Store and RevenueCat. We do not receive or store your credit card or financial billing information.
6. Children's Privacy
MiniPaint AI does not knowingly collect personal identifiable information from children under the age of 13. If you believe a child has provided us with personal information, please contact us immediately.
7. Contact Us
If you have any questions or feedback regarding this Privacy Policy, please contact our support team at:
Email: hello@minipaint.space