Hushcolor · Terms of Use · Support
Effective date: 10 November 2026
This policy explains what personal information the Hushcolor color-by-number app ("Hushcolor", "the app", "we", "us") and the website hushcolor.app process, why, who receives it, how long it is kept, and the choices and rights you have. It applies to the app on Android and, where it is offered there, on iPhone.
Hushcolor is provided by QUIETWEFT LLC, a Wyoming limited liability company, 30 N Gould St, PMB N, Sheridan, WY 82801, USA, which publishes it on Google Play (and, where offered, the App Store). QUIETWEFT LLC is the controller of the personal information described here. For any privacy question or request, write to support@hushcolor.app.
The app stores your coloring progress, finished pictures, hint balance, settings, privacy choices and a record that you agreed to the Terms of Use when you first opened the app on your device. Downloaded pictures are kept in an encrypted cache. We do not receive this information. It is deleted when you uninstall the app or clear its data, and it is not backed up to a cloud service by us.
When you tap Save, the picture (or, with VIP, the time-lapse video) is written to your phone's photo library; on older Android versions the app asks for storage permission to do this. When you tap Share, the file is handed to the app you choose. We do not receive files you save or share.
So that only genuine copies of the app can download artwork, the app signs in anonymously with Google Firebase Authentication. Firebase creates a random user ID for your installation and short-lived sign-in tokens. No name, email or phone number is involved. To protect sign-in against abuse, Google also processes your IP address and device user agent and keeps logged IP addresses for a few weeks.
The app uses Firebase App Check with Google Play Integrity (on Android) to confirm that requests come from an unmodified copy of the app on a genuine device. Google processes device and app integrity information for this check under its own terms.
Pictures are delivered by our content service, which runs on Cloudflare. With each request it receives your anonymous installation ID, a separate random number the app creates for this installation (used only inside the download permission and not stored), the picture requested, your IP address and standard request details such as the time of the request.
VIP subscriptions and Remove Ads are sold through Google Play or the App Store, which handle payment, billing details and receipts under their own privacy policies. We use RevenueCat to validate purchases, keep track of what your installation owns and restore it after a reinstall. RevenueCat receives the store's purchase record (product, price, currency, dates and transaction identifiers) together with your anonymous installation ID. We have switched off RevenueCat's automatic collection of device identifiers. Our content service asks RevenueCat whether your installation ID has an active VIP subscription before unlocking VIP pictures.
Players without VIP or Remove Ads see a banner, an occasional ad between pictures, and optional reward videos (for hints, or to save your next picture without the watermark). Ads are mediated by Unity LevelPlay and served by Unity Ads and Google AdMob. To deliver ads, cap how often you see them, measure them and protect them against fraud, these companies may collect:
Hushcolor asks its ad partners to show ads that are not personalised, for every player, and tells them to treat every player as opted out of the sale or sharing of personal information. In the EEA, the UK and Switzerland, Google's consent form records whether information may be stored on or read from your device for advertising and measurement. If you do not give that consent, the app shows no ads at all and does not initialise its ad partners' services or request ads from them. If Google's consent tool has saved no record on your phone of whether European consent rules apply to you, the app checks which country your mobile network, SIM card or phone settings show (on iPhone, only your phone's region setting). If that country is in the EEA, the UK or Switzerland, the app shows no ads without your consent. If Google's consent tool has saved such a record, the app follows it. On Android the app also reads the same country information, together with that record, to decide whether it must ask your permission before sending crash reports (section 4.9). The country is used only for these checks on your phone; it is not stored or sent to us or anyone else. If you buy VIP, the app shows no ads and stops requesting them; Remove Ads stops banners and ads between pictures, and reward videos are then shown only when you ask for one.
Hushcolor is intended for adults. The app never asks your age. Where your phone provides it, the app reads only an age range from Google Play Age Signals or Apple's Declared Age Range, on the device, to choose the right ad and purchase treatment (section 9) and, on Android, to make sure the app sends no crash reports for players under 18 (section 4.9). We do not send this range to our servers or include it in crash reports; ad partners receive only the resulting settings, such as a flag that ads must be child-appropriate.
If you email us, we receive your email address, your message and anything you attach, and use them only to answer you and handle your request. An email started from Settings → Feedback & support also includes your Support ID (your anonymous installation ID, section 4.1), the app version and your phone model, so we can find your records and look into problems. You can see these details in the email before you send it.
The website sets no cookies, uses no analytics or advertising, and loads its fonts and images from our own domain. It is hosted by Cloudflare, which processes your IP address and request details, including network error reports your browser may send, to deliver pages and protect the site against attacks.
To find and fix problems, the Android app can send crash reports to Google Firebase Crashlytics, which processes them on our behalf. The iPhone app does not send crash reports.
In the EEA, the UK and Switzerland, only with your permission. After you accept the Terms of Use, the app asks you once whether it may send crash reports. Until you choose Allow there, or turn on Settings → Send crash reports (which asks the same question), the app does not start Crashlytics and stores nothing on your phone for crash reports, and it deletes any crash-report files an earlier version left. If you choose Don't allow or close the question, the app does not ask again. The app asks for your permission if Google's consent tool has recorded that European privacy rules apply to you, if your mobile network, SIM card or phone settings show a country in the EEA, the UK or Switzerland, or if neither Google's consent tool nor your phone tells the app where you are (section 4.5).
Elsewhere, on unless you turn it off. Crash reporting starts after you accept the Terms of Use, once the app has checked your age range. You can turn it off at any time in Settings → Send crash reports.
Never for players under 18. If Google Play gives the app an age range for you that is under 18, or that does not show you are 18 or over, the app sends no crash reports, wherever you are (section 4.6).
Turning crash reports off. When you turn off Settings → Send crash reports, the app stops crash reporting from the next time you open it: Crashlytics is not started, and its files, its ID and any reports not yet sent are deleted from your phone. If you had given permission, this withdraws it; reports sent before are not affected.
When the app crashes, stops responding or records a serious error, a report can include:
Google also processes your IP address to receive the report. Crash reports are not linked to your Support ID. The app is set up to leave out your advertising ID, consent choices, age range, purchase details and pictures, and it removes sign-in tokens, web address parameters and file locations from the error messages it passes on. We use crash reports only to keep the app working, not for advertising or to build a profile of you. Google Analytics, which comes with Crashlytics, is switched off.
The app keeps a record of your crash-report choice on your phone: your answer, the version of the question you answered, the app language, the time, the app version and which of the rules above applied. It is not sent to us or anyone else.
We share information only with the companies needed to run Hushcolor, each under its own privacy terms. Google (Firebase, Play Integrity), Cloudflare and RevenueCat process it on our behalf. Google (AdMob), Unity and their ad partners receive advertising data as independent controllers under their own policies. App stores process your purchases under their own policies.
We may also disclose information where the law requires it, to protect the safety of users or the service, or as part of a transfer of the app to a new owner, who would be bound by this policy.
Depending on where you live, you may have the right to access your personal information, receive a copy of it, have it corrected or deleted, restrict or object to its use, withdraw consent, and, under US state laws, opt out of the sale or sharing of personal information or of targeted advertising. We will not treat you differently for using these rights.
Your right to object. Where we rely on legitimate interests (section 5), you may object at any time for reasons relating to your situation; email support@hushcolor.app.
To use any of these rights, email support@hushcolor.app. Because you never register with a name or email, we hold no details that let us find your records on our own:
We answer within one month (EEA/UK) or 45 days (US states), and we may need to confirm that a request relates to records you control. You may also complain to your local data protection authority.
You do not have to give us any information. The anonymous installation ID is needed to download pictures; without it the app cannot load artwork. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.
Hushcolor is intended for adults (18 and over) and is not directed to children. We do not knowingly collect personal information from children. If the age range your phone provides places you under 18, the app treats you as a minor: ads are limited to child-appropriate formats, or not shown, and a grown-up check appears before purchases and subscription links. If you believe a child has given us personal information, contact us and we will delete it.
Our providers process information in the United States and other countries outside your own. Where data leaves the EEA, the UK or Switzerland, they rely on recognised safeguards such as the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.
Connections between the app and our services use encryption in transit. On Android, downloaded pictures are stored encrypted with a key kept in the device's secure key store, and access to artwork requires short-lived signed tokens. No system is perfectly secure, but we limit what we collect so there is little to expose.
When this policy changes, we post the new version here with a new effective date. If a change materially affects how we use your information, we will also tell you in the app before it applies and, where required, ask for your consent.