Privacy Policy
Neverending Coloring Book is a free coloring app for children made by Nick Saulino. Last updated 12 October 2026.
The short version
The app has no accounts, no ads, no analytics and no third-party tracking of any kind. We never ask for a name, an email address, a photo or a location, and we have no way to work out who is using the app.
What leaves the device
- Magic pages. When a child asks for a new page, the words they typed or said are sent to our server, which passes only those words to Google's Gemini API to draw the page. Nothing that identifies the child or the device goes with them. Each drawing is made for the one device that asked for it and is never shown to anyone else.
- A random number for the device. The app invents a random number the first time it runs and sends it with each magic request, purely so we can cap how many new pages one device asks for in a day. It is not an account, an advertising ID or any hardware identifier, and it is not stored with the drawings. The daily count is deleted after 48 hours. The number itself is never kept beyond that. Beside the words of each request we keep a scrambled tag made from it, which shows us that two requests came from the same device and nothing else: it cannot be turned back into the number, and it does not tell us whose device it is.
- Voice. If a child speaks their request, the speech is turned into text by the device's own speech service (Apple's on iOS, Google's on Android). Depending on the device and its settings, that service may send the audio to Apple or Google to transcribe it, under their privacy policies rather than this one. The audio never reaches us; we only ever see the resulting text.
- Connection details. Like any website, our hosts see the IP address and device type of each request as a necessary part of delivering a reply. We do not use these to build a profile or identify anyone.
Where the drawings live
Finished pages are stored as image files at ordinary public web addresses, because the app has to be able to fetch them without logging in. Anyone who knows or guesses an address can view that drawing. The files contain nothing but the drawing itself: no name, no device number, no hidden data.
Who else handles it
We use three companies to run the service, and only for that purpose. None of them are given anything that identifies a child.
- Google: the Gemini API draws each new page from the words sent to it. We use Google's paid Gemini API, under whose terms Google does not use those words to improve its products; it may keep them for a limited time only to detect misuse.
- Vercel: hosts the website and the server, and stores the finished drawings.
- Upstash: stores the words of each request, and the daily counts.
How long things are kept
- The words of a request
- In two places. For 30 days beside the address of the drawing they produced, so a reported drawing can be traced back to its wording. And for about a year in a list of what was asked for, each entry holding the words, the date, the app's language, what happened (a page was drawn, our word list refused it and which word did, the drawing service declined it, something failed, or the day's pages were used up), the address of the drawing if one was made, and the scrambled device tag described above. Each month's list is deleted a year later. We cannot tell who asked. We read this list to make the app draw better pages, which includes looking at the drawings, to take innocent words off the word list, and to see how many pages a device asks for so the daily limit is set sensibly.
- The drawing
- Stays at its web address. It holds nothing but the picture.
- The daily count for a device
- 48 hours.
- Reported pages
- The most recent 200 reports, each holding only the words, the drawing's address and the date.
- Usage totals
- Daily counts of how many pages were made, kept 40 days. These are plain numbers with nothing attached.
What never leaves the device
Every colored page, the child's book and all settings are stored only on the device itself. We cannot see them. Deleting the app deletes them. Saving a page puts a copy in the device's own photos; it is not sent anywhere.
Children
This app is made for children. It collects no personal information from anyone, children included, so there is nothing about a child for us to sell, share or use for advertising, and we do none of those things. Settings meant for grown-ups, the report button and every link out of the app sit behind a parental gate.
Reporting a page
Any generated page can be reported from inside the app, behind the parental gate. A report records the words, the drawing's address and the date, so the wording can be blocked for everyone in future.
Removing something
Because nothing is tied to an identity, there is no account to delete. If you want a particular drawing or phrase taken out, email the address below with the page's address and we will remove it.
This website
This website (neverending.nicksaulino.com) uses Google Analytics to count visits: which pages are opened, roughly from which country, and on what kind of device. Google Analytics sets cookies in your browser for this. Google signals and ad personalization are turned off, so none of it is used for advertising. Nothing you draw is part of it. The Android and iOS apps contain no analytics at all.
Changes
If this policy changes, the date at the top changes with it and the new version appears at this address.
Contact
nicksaulino@gmail.com
App · Privacy · Support