Summary
Pufi does not ask for a name, email address, phone number or photo. The app signs in with an anonymous ID so that your drawings, credits and subscription stay together. There are no ads, no tracking across other apps or websites and no analytics tool.
When you ask Pufi to draw something, the text of the request is sent to our server and to OpenAI, which makes the coloring page. Pages you color, whiteboard drawings and costumes stay on your device.
Data we process
Anonymous user ID
Purpose
Keeping your drawings, credits and subscription together without an account
Where
Google Firebase Authentication
Text of a drawing request (typed, or turned into text from speech)
Purpose
Making the coloring page and checking that it is safe for children
Where
Our server (Google Cloud, EU) and OpenAI
Pages Pufi drew for you: image, small preview, request text, date, credits used
Purpose
Showing them under “Pufi’s drawings” and opening them again
Where
Private storage on Google Cloud (EU), reachable only through short-lived links
Credits and subscription status: plan, renewal date, store product and transaction ID
Purpose
Giving you the drawings you paid for and restoring purchases
Where
Our server and RevenueCat
Crash reports: device model, system and app version, anonymous user ID, technical error details
Purpose
Finding and fixing crashes
Where
Google Firebase Crashlytics
Reports of an unsuitable drawing: the drawing, its request text and the reason
Purpose
Reviewing the report and improving safety
Where
Our server (Google Cloud, EU)
Colored pages, whiteboard drawings, costumes, settings
Purpose
Running the app
Where
On your device only
Like every web service, our server sees the IP address of each request. It is kept in technical logs for security and troubleshooting and deleted automatically after about 30 days.
We do not collect: name, email, phone number, location, contacts, photos, audio recordings, the advertising ID or usage analytics. The app does not show ads and does not send push notifications.
Legal basis (GDPR art. 6 and KVKK art. 5): providing the service you asked for (contract), keeping it safe and working (legitimate interest), and keeping purchase records where the law requires it (legal obligation).
Talking to Pufi
If you tap the microphone, your device’s own speech recognition (Apple on iOS, Google on Android) turns the speech into text. When the device supports it, this happens on the device; otherwise Apple or Google may process the audio on their servers under their own privacy policies.
Pufi never receives or stores audio. Only the resulting text is used, in the same way as typed text. The microphone listens only after you tap it, stops when you finish speaking, and is used only if you allow it.
AI drawings and safety
Coloring pages are made by OpenAI’s image model. OpenAI receives the request text and returns the image; both are checked by OpenAI’s moderation model before the page is shown. Under OpenAI’s API terms this data is not used to train its models and may be kept for up to 30 days to detect abuse.
Please teach children not to type their own name, address or other personal details into a drawing request. We do not use request texts for anything other than making, showing and checking drawings.
If a drawing is unsuitable, a grown-up can report it in the app. The report is reviewed by a person at Otagia.
Purchases
Subscriptions are sold by the Apple App Store or Google Play. They take the payment; we never see your card or payment details. RevenueCat tells our server which subscription is active for your anonymous ID, so that the right number of drawings is available.
Third parties and transfers abroad
- Google Cloud and Firebase (Authentication, Firestore, Cloud Storage, Cloud Run, Crashlytics): our server and storage, located in the EU (Belgium). Firebase privacy
- OpenAI (USA): making and checking coloring pages. OpenAI privacy policy
- RevenueCat (USA): subscription status. RevenueCat privacy policy
- Apple App Store and Google Play: payments and app delivery, under their own policies.
Some of these services process data outside Türkiye and the EU. Such transfers rely on the providers’ standard contractual clauses and, for Türkiye, on KVKK art. 9.
Retention and deletion
Your drawings and credits are kept until you delete them. A single drawing can be deleted from “Pufi’s drawings”. Settings → Delete account (behind the grown-up check) removes the drawings and their files, the credits, the subscription record at RevenueCat and the anonymous ID at once. This cannot be undone.
Deleting the account or the app does not cancel a subscription: cancel it in the App Store or Google Play settings.
If you remove the app without deleting the account, we can no longer link the data on our server to you. Write to us and we will help. Data stored only on the device is removed with the app. Reports are kept as long as needed to review them and to keep the service safe.
Children and parents
Pufi is made for young children to use with a parent or guardian, who installs the app and makes the purchases. The app has no ads, no tracking, no chat and no sharing with other users. Purchases, links that leave the app, settings and account deletion sit behind a question that only a grown-up can answer.
We do not knowingly ask children for personal information. Parents can ask to see or delete the information linked to their child’s use of Pufi at any time by writing to info@otagia.com, in line with COPPA, GDPR and KVKK.
Your rights
You can ask for information, access, correction, deletion, restriction, objection or a copy of your data (GDPR art. 15–21, KVKK art. 11) by writing to info@otagia.com. Most of it you can also do yourself in the app. We reply within 30 days.
You may also complain to your data protection authority: in Türkiye the Personal Data Protection Board (KVKK), in the EU the authority of your country.
Data controller: Otagia, info@otagia.com.
Changes
We may update this policy when the app changes. The “Last updated” date above is renewed every time.