Privacy

Updated 23 October 2026

What we save

Pastel Studio uses a private account identifier and sign-in tokens to keep your paintings separate from other users. We store saved painting progress, generated photo-picture shapes, preferences needed by the app, and verified purchase status. Signing in adds your verified email address so the same studio can be restored on another device. We do not publish a profile or public gallery.

Email sign-in

Brevo delivers requested sign-in emails. Each code expires after ten minutes and is stored only as a protected hash. Requests and attempts are limited to prevent abuse. We retain sign-in email, challenge and session records to operate and protect account access. These emails are for sign-in, not advertising.

Your photos

Photo decoding and conversion happen on your device. Original photo files are not sent to our painting server. Generated shapes and colors can still resemble the source photo; they are stored privately when online saving is enabled. Export requests send the selected painting data to the server to make your files.

Payments

Google Play or Apple processes mobile store purchases, with RevenueCat helping verify them. These providers handle payment details under their own privacy policies. Our server uses purchase, customer and subscription identifiers and status to confirm access, restore purchases and handle refunds; it does not receive your full card number. The Pastel Studio website does not collect payment details.

Service records

Our hosting and security providers process network information such as IP addresses and request timing to deliver the service, limit abuse and diagnose failures. Credentials are excluded from application logs. We do not use advertising trackers or sell your paintings. The public website does not create a painting account or use advertising cookies.

Storage and deletion

Paintings remain in local storage and the private online copy until you delete them or remove the account. Use Settings, then Delete pictures in the app to delete the current painting account and its online paintings. This removes the account's sign-in sessions, saved painting progress, favorites and generated photo pictures; it cannot be undone. Clearing this device's storage also removes local data. To request account deletion without the app, contact [email protected] from your account email. We verify ownership before deleting an account. Payment providers may retain transaction records for their billing, tax and fraud-prevention obligations. Deletion does not cancel a subscription; cancel through the app store separately.

Grown-ups and children

Painting is designed for different ages. Purchases, account deletion and billing settings are behind a grown-up check. The check supplements the app store's authorization and is not age verification. A grown-up should manage purchases and any photos a child chooses.

Contact

For privacy and account questions, contact [email protected]. Do not include sign-in codes or private photos in a support request unless needed and explicitly requested.