Privacy Policy
Last updated: 25 September 2026
EasyPixel is a pixel-art and colouring app for Android that also has optional AI features (turning your drawing into AI art, writing short stories from your pictures, and explaining words in those stories). It is made for families, and many of the people who use it are children.
This policy explains, in plain language, what the app does with information, what it does not do, and what choices you (or your parent or guardian) have.
The short version
- You can draw, colour, play the puzzle modes and keep a gallery without any account and without giving us any personal information. All of that stays on your device.
- The AI features need an internet connection and a Google account. When you use them, the drawing (and any text you type) is sent to our servers and then to OpenAI, which generates the result.
- We use Google Firebase for sign-in, storage of your AI-credit balance, temporary storage of generated images, push notifications, crash reports and usage analytics.
- Analytics and crash reporting are off by default in identified form and only switch on fully after you say yes to the consent question in the app. You can change your answer at any time in Settings.
- No ads. No selling of data. No behavioural advertising. We do not build advertising profiles and we never sell or rent your information.
- Payments are handled by Google Play. We never see your card details.
- To exercise any privacy right (access, correction, deletion, objection, portability, withdrawing consent), email dev@vecheram.com. To delete your account, use vecheram.com/account-deletion.
1. Who is responsible for your data
The data controller for EasyPixel is:
Andrei Vasilev (trading as "EasyPixel" / "Vecheram")
Bustanai 12, Rehovot 7628916, Israel
Country: Israel
Email: dev@vecheram.com
The Android app is published on Google Play under the package name com.vecheram.easypixel.
2. What we collect, and what we don't
2.1 Information that stays on your device only
Everything you create in the app is stored in a local database on your phone or tablet and is not uploaded unless you use an AI feature or choose to share/export it:
- your drawings, boards, colouring progress and undo history;
- your gallery, including AI images once they have been delivered to the device, and the stories you have generated;
- your settings (theme, board size, colour favourites, recent colours, hashtags you add to pictures, recent AI prompts);
- your consent choices (analytics yes/no, whether we have already asked about notifications).
If you tap Save to gallery, Share or Set as wallpaper, the image is handed to the Android system or the app you pick; from that point it is governed by that app.
Uninstalling EasyPixel deletes this local data. It is not backed up by us.
2.2 Information the app creates or receives when you use online features
| Information | When | Where it goes |
|---|---|---|
| Anonymous account ID – a random identifier created by Firebase Authentication on first launch | First launch (needs internet) | Google Firebase (Auth, Firestore). Lets the app keep an AI-credit balance and recover images even before you sign in with Google. |
| Google account details – your Google user ID, e-mail address and display name | When you sign in with Google | Google Firebase Auth; a copy of the e-mail and name is stored in your user record in Firestore. We do not store your profile photo. |
| Your drawing / board image (PNG or JPEG) and the options you picked (style, medium, "focus on" text, orientation, quality) | When you use "AI my drawing", image description or similar AI image features | Our Cloud Functions (Google Cloud, us-central1) → OpenAI image and vision models. A short copy of the resulting text prompt (max 500 characters), the options and the generation status are kept in our database; the generated image is cached temporarily (see §5). |
| "Feeling Lucky" inputs – themes you select, optional subject text, and the subjects of your recent generations | When you use Feeling Lucky | Our Cloud Functions → OpenAI text model (no image is sent in this step). |
| Pictures for a story (up to 3 pictures, or up to 10 with a subscription), story language and reading level | When you ask for a story | Our Cloud Functions → OpenAI. Stories are returned to the device and stored only there. We do not keep the pictures or the story on the server. |
| A word and the sentence it appears in, language and reading level | When a word in a story is tapped for an explanation | Our Cloud Functions → OpenAI. Not stored on the server. |
| AI-credit balance and history ("tokens") – how many credits you have, where each batch came from (sign-up bonus, daily free credit, purchase, subscription, refund), when it expires, and one record per credit spent | Whenever you use or receive AI credits | Google Firestore (our database). |
| Purchase records – Google Play purchase token, product ID, order ID, subscription status and expiry | When you buy AI credits or a subscription | Google Play Billing verifies the purchase; we store the record in Firestore so your credits survive reinstalls. We never receive card numbers or bank details. |
Push-notification token and your device's time-zone name (for example Europe/Berlin) |
When the app registers for notifications (removed again when you sign out or turn notifications off) | Google Firestore and Firebase Cloud Messaging. Used to tell you an image is ready and, at 11:00 local time, that a free daily generation is available. |
| Last-seen time – when the app last contacted our server | On app open (when signed in) | Google Firestore. Used only to avoid pushing notifications to people who use the app anyway, and to stop pushing after 30 days of inactivity. |
| Feedback on an AI image (thumbs up / thumbs down) | When you rate an image | Google Firestore, attached to that generation record. |
| Usage analytics events (for example "game started", "AI generation started", "purchase") and standard app/device information (app version, Android version, device model, language, country derived from IP, screen size) | While the app is used, subject to your consent choice (§4) | Google Analytics for Firebase. |
| Crash reports (stack trace, app version, device model and OS version, free memory, time of crash) | If the app crashes and you have consented (§4) | Firebase Crashlytics. |
| Server logs – timestamps, function names, your account ID, sizes of payloads, error messages, and the IP address of the request (standard Google Cloud request logging) | When the app calls our servers | Google Cloud Logging. Since September 2026 our logs contain no images, image bytes or full AI responses; text prompts may appear in truncated form. |
2.3 What we deliberately do not collect
- No advertising. The app shows no ads and contains no advertising SDK.
- No advertising profile. Google Analytics runs with all advertising signals permanently set to "denied" (see §4). We do not use the Android Advertising ID for advertising or personalisation inside the app.
- No selling or renting of personal information, ever, to anyone.
- No precise location. The app does not ask for location permission. The only location-related data is the coarse country/region Google Analytics derives from the IP address, and the time-zone name you send so the daily free credit arrives at a sensible hour.
- No contacts, photos library scan, microphone or camera. Storage permissions on older Android versions are used only to save images you explicitly export.
- No profile photo, date of birth, gender, phone number or address.
- No content from other apps. The accelerometer is read on-device only to detect how you are holding the tablet.
3. Why we use this information, and the legal basis
| Purpose | Data used | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Provide the AI features you ask for | Drawing, options, story pictures, words, account ID | Performance of a contract (Art. 6(1)(b)) |
| Keep your AI-credit balance correct and prevent double-spending or abuse (rate limits) | Credit records, deductions, rate-limit counters | Contract; legitimate interest in preventing fraud (Art. 6(1)(f)) |
| Deliver a generated image to your device even if the app was closed, and let you recover it later | Cached image (72 hours), generation record | Contract |
| Process purchases and subscriptions and restore them on a new device | Purchase records | Contract; legal obligation to keep accounting records |
| Send push notifications ("image ready", "free daily generation") | Notification token, time-zone, last-seen time | Consent (the Android notification permission); you can switch it off at any time |
| Understand how the app is used and improve it; fix crashes | Analytics events, crash reports | Consent (Art. 6(1)(a)); before you decide, only identifier-free aggregate measurement based on our legitimate interest |
| Security, debugging and keeping our services running | Server logs | Legitimate interest (Art. 6(1)(f)) |
| Answer your requests and comply with the law | Your e-mail and message | Legal obligation; legitimate interest |
We do not make automated decisions with legal or similarly significant effects about you.
4. Analytics, crash reports and consent
EasyPixel uses Google Analytics for Firebase and Firebase Crashlytics.
- Before you make a choice the app runs Google's "Consent Mode" in the denied state: a limited set of usage events is sent without device or user identifiers (no analytics ID, no advertising ID) and is used only for aggregate, modelled statistics. No profile of you is built. Crash reports are not sent.
- If you allow analytics, collection is enabled with Google's standard app-instance identifier so we can measure usage and performance in more detail, and crash reporting is switched on.
- If you decline, analytics and crash collection are switched off entirely, the analytics identifier is reset, and any unsent crash reports are discarded. Nothing further is sent, not even the identifier-free pings.
- Advertising signals (
ad_storage,ad_user_data,ad_personalization) are set to denied at all times, regardless of your choice. The app runs no ads. - The consent question is shown in the app; you can change your answer at any time in Settings.
- The app does not set a user ID in Analytics or Crashlytics. Data is processed by Google under Google's Privacy Policy and is never sold.
5. How long we keep information
| Data | Retention |
|---|---|
| Drawings, gallery, stories, settings on your device | Until you delete them or uninstall the app |
| Generated image cache on our servers | Deleted automatically 72 hours after generation (daily clean-up). An image that finished generating but was never delivered to your device is kept until the app fetches it, so you don't lose a credit you paid for. |
| Uploaded input image and partial frames used during generation | Deleted with the generation record in the same clean-up |
| Generation records (prompt excerpt, options, status, feedback) | Deleted in the same clean-up once the image has been delivered; a generation stuck for more than 15 minutes is marked failed and refunded |
| AI credits | Sign-up bonus and refund credits expire after 365 days; the daily free credit expires after 24 hours; subscription credits expire with the billing period. Expired credit records currently remain in the database for bookkeeping (we intend to purge them after about 400 days). |
| Purchase records | Kept for as long as the account exists, and afterwards only as long as accounting and tax law require |
| Notification token, time-zone, last-seen time | Until you sign out, turn notifications off, or the account is deleted |
| Account (Google account ID, e-mail, name) | Until you ask us to delete it (§7). Deletion is scheduled with a 7-day grace period during which it can be cancelled, then the account and its server data are purged. |
| Analytics data at Google | No longer than 14 months (the maximum Google Analytics allows) |
| Crash reports at Google | 90 days (Crashlytics default) |
| Server logs | 30 days (Google Cloud Logging default) (confirm in the Google Cloud console) |
| Data at OpenAI | OpenAI states that content sent through its API is not used to train its models and is retained for up to 30 days for abuse monitoring, then deleted. See OpenAI's policies linked below. |
6. Who else receives data (processors)
We use the following companies as processors. They act on our instructions under their own data-processing terms. We do not share personal information with anyone else, except where the law requires it (§9).
| Provider | What it does for EasyPixel | Data involved | Privacy policy |
|---|---|---|---|
| Google LLC – Firebase / Google Cloud (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Tasks, Cloud Messaging, Cloud Logging) | Sign-in, our database, temporary image cache, the servers that talk to OpenAI, push notifications, server logs. Hosted in the us-central1 region (Iowa, USA). | Account ID, e-mail, name, credit and purchase records, images during generation, notification token, time-zone, logs | policies.google.com/privacy · firebase.google.com/support/privacy |
| Google – Analytics for Firebase & Crashlytics | Usage analytics and crash reporting, subject to your consent (§4) | Usage events, device and app info, crash traces | policies.google.com/privacy · firebase.google.com/support/privacy |
| Google – Sign in with Google | Lets you sign in with your Google account | Google user ID, e-mail, name | policies.google.com/privacy |
| Google Play Billing | Takes payment for AI credits and subscriptions; we verify purchases with the Google Play Developer API | Purchase token, product, order ID, subscription status | policies.google.com/privacy |
| OpenAI, L.L.C. (USA) | Generates AI images from your drawing, describes images, writes stories and explains words. Models currently used: gpt-image family (image generation and editing), gpt-4o / gpt-4o-mini (vision, stories, word explanations), gpt-5-mini (Feeling Lucky prompt writing). |
Your drawing / pictures, text you typed, chosen options | openai.com/policies/privacy-policy · openai.com/enterprise-privacy |
No other analytics, advertising, error-tracking or social SDKs are included in the app.
7. Your rights and how to use them
Wherever you live, you can ask us to:
- access the personal information we hold about you and receive a copy;
- correct it;
- delete it (including your account – see below);
- restrict or object to certain processing;
- port it to another service in a machine-readable form;
- withdraw consent at any time (analytics in Settings; notifications in Settings or Android system settings; you can also sign out or uninstall).
One mechanism for all of this: e-mail dev@vecheram.com from the Google account you use in the app (or describe the account so we can find it). We may ask you to confirm you control the account. We answer within one month (GDPR / UK GDPR), 45 days (California) or the period your local law sets, whichever is shorter. Exercising your rights is free.
Deleting your account. You can delete your account yourself at vecheram.com/account-deletion: sign in with the same Google account and confirm. You can also e-mail us and we will do it for you. Either way the account is marked for deletion, you have 7 days to change your mind, and it is then purged (Google sign-in link, e-mail, name, credit and purchase records, notification token, cached images). Unused paid credits are lost when the account is deleted. Content on your device is not affected; uninstall the app to remove it.
Complaints. You can also complain to your data-protection authority. In the EU this is the authority of your country (list at edpb.europa.eu); in the UK the ICO (ico.org.uk); in Israel the Privacy Protection Authority (gov.il/en/departments/the_privacy_protection_authority).
7.1 European Economic Area and United Kingdom (GDPR / UK GDPR)
You have all the rights listed above under Articles 15–22 GDPR / UK GDPR. Legal bases are set out in §3. Where we rely on consent you may withdraw it at any time without affecting earlier processing. Data is transferred to the United States as described in §8.
7.2 California (CCPA / CPRA)
We do not sell personal information and we do not share it for cross-context behavioural advertising, and have not done so in the preceding 12 months. We do not use or disclose sensitive personal information for purposes that would trigger a right to limit. Because we neither sell nor share, no "Do Not Sell or Share" link is needed; we also do not respond to Global Privacy Control signals because there is nothing to opt out of. California residents have the rights to know, delete, correct and to non-discrimination; use the e-mail above. The categories of personal information we collect are: identifiers (account ID, e-mail, name), commercial information (purchases), internet/electronic activity (usage events, server logs), inferences (none), and user-generated content (drawings and text sent to the AI features). Sources: you, your device, Google. Purposes and recipients: §3 and §6.
7.3 Canada (PIPEDA and Quebec Law 25)
We collect, use and disclose personal information only with your knowledge and consent, for the purposes described here. You may withdraw consent (subject to legal or contractual restrictions) and request access or correction. Your information is stored and processed in the United States (§8). Our person responsible for the protection of personal information is Andrei Vasilev, reachable at dev@vecheram.com. Quebec residents may also request that we stop disseminating their personal information and may complain to the Commission d'accès à l'information.
7.4 Israel (Privacy Protection Law, 5741-1981)
Under the Privacy Protection Law and its 2024 amendment you have the right to inspect information held about you in our database and to request correction or deletion of information that is incorrect, incomplete or out of date. Information is collected with your consent for the purposes stated here and is transferred abroad (to Google and OpenAI in the United States) only under the conditions of the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001. Contact dev@vecheram.com.
7.5 Brazil (LGPD)
You have the rights in Article 18 LGPD: confirmation of processing, access, correction, anonymisation or deletion of unnecessary data, portability, information about sharing, and revocation of consent. International transfer to the United States is described in §8. You may also contact the Autoridade Nacional de Proteção de Dados (ANPD). Our contact (encarregado) is dev@vecheram.com.
7.6 Australia and New Zealand
We handle personal information in accordance with the Australian Privacy Principles and the New Zealand Privacy Act 2020. You can request access to and correction of your personal information via the e-mail above; disclosure to overseas recipients (Google and OpenAI, USA) is described in §8. Complaints can be made to us first, then to the OAIC (Australia) or the Office of the Privacy Commissioner (New Zealand).
7.7 Other countries
The same rights mechanism applies. If your local law grants additional rights, we will honour them.
8. Where data is stored and international transfers
Our servers (Google Cloud / Firebase) run in the us-central1 region in the United States. OpenAI processes AI requests in the United States. Google Analytics and Crashlytics data is processed by Google on servers that may be located in the United States or elsewhere.
If you are in the EEA, UK or Switzerland, transfers to Google and OpenAI are covered by the EU-U.S. Data Privacy Framework (both companies are certified) and, as a fallback, by the European Commission's Standard Contractual Clauses (with the UK Addendum where applicable) contained in their data-processing terms. For other countries we rely on the recipients' contractual commitments to protect your data to the standard described in this policy. Contact us if you would like more information about the safeguards.
9. When we may disclose data to others
Beyond the processors in §6, we disclose personal information only:
- if required by law, a court order or a public authority with lawful power;
- to protect the rights, safety or property of users, the public or EasyPixel (for example to investigate abuse of the AI features);
- to a successor if EasyPixel is transferred to another owner — we will tell you before your data becomes subject to a different privacy policy.
We do not have "business partners" or "affiliates" that receive your data.
10. Children
EasyPixel is designed to be suitable for children and is listed on Google Play for a family audience, including children under 13. We therefore keep data collection to the minimum needed for the features a child actually uses. Parents and guardians, please read this section.
Without a Google account (the default when the app is installed), a child can draw, colour, play the puzzle modes, keep a gallery, save and share pictures. All of that stays on the device. The only online data is a random anonymous account identifier created by Firebase and, until a consent choice is made, identifier-free aggregate analytics pings (§4). No name, e-mail or other contact details are collected.
The AI features send content off the device. Turning a drawing into AI art, making a story from pictures or asking what a word means sends that drawing/picture/word to our servers and to OpenAI (§2.2, §6). The results are returned to the device. We do not use children's drawings for anything other than producing the requested result, and OpenAI does not use them to train its models (§5).
A Google account is required for AI image generation. Google does not allow children under 13 (or the applicable age in your country) to create their own Google account; a child under that age can only sign in with a Google account that a parent or guardian created and manages for them, for example through Google Family Link. By signing a child in with such an account, the parent or guardian is agreeing to this policy on the child's behalf and can withdraw that consent at any time by signing out and e-mailing us to delete the account. AI credits are bought through the parent's Google Play account and are subject to the parental purchase controls that Google Play provides.
What we do not do: we show no advertising, we do not build behavioural profiles, we never sell children's information, and advertising signals in Google Analytics are permanently switched off. Identified analytics and crash reports are only collected after a "yes" to the in-app consent question; a parent can decline or change that answer at any time in Settings.
What the app does not have: the app does not ask for the user's age and does not have its own parental-consent screen. We rely on Google's account rules (Family Link for under-13s) and on the parent's control of the device. If you believe a child has provided us with personal information without a parent's consent, e-mail dev@vecheram.com and we will delete it.
11. Security
All traffic between the app, our servers, Google and OpenAI is encrypted in transit (TLS). Our database rules only allow you to read your own account record; credits, purchases and generation records can be written by our server code only, never directly by the app. AI-provider API keys are held in Google Secret Manager, not in the app. Cached images are stored in a private bucket and are deleted automatically (§5). No method of transmission or storage is completely secure; if we learn of a breach affecting your data we will notify you and the relevant authority as the law requires.
12. Changes to this policy
When we change this policy we will update the date at the top and, for material changes, show a notice in the app or on this page before the change takes effect. The current version is always available at https://vecheram.com/privacy-policy/.
What changed in this version (September 2026): rewritten to describe the app's actual data flows — the AI features and OpenAI, the analytics consent behaviour, the daily free generation and push notifications, retention periods, the children's section, and the removal of template language about advertising, affiliates, business partners and age verification that did not apply to EasyPixel.
13. Contact
Andrei Vasilev
Bustanai 12, Rehovot 7628916, Israel
E-mail: dev@vecheram.com
Website: https://vecheram.com