How Tinkerhue: 3D Coloring Book handles artwork, accounts, memberships and the information it needs to run.
Tinkerhue: 3D Coloring Book ("Tinkerhue", the "app") is published by Calling Moonshots Inc. ("Calling Moonshots", "we", "us"). We are the data controller for the personal information described here. This policy covers the Tinkerhue app for iPhone and iPad and the account, membership, catalog and support services behind it. It replaces the general Calling Moonshots privacy policy for Tinkerhue; that general policy still covers callingmoonshots.com.
These are stored on your iPhone or iPad and are not sent to us:
We do not receive your paint strokes, saved paintings or exported pictures and videos. Signing in does not upload or back up your paintings in this version of the app. If you share an image or video, the app passes it to the app or service you pick in the share sheet, and that destination handles its copy.
The first time you open Tinkerhue, our service creates a guest account: a random account identifier and a session credential, with no name or email address. The session credential is kept in your device's Keychain, on that device only. Our servers store the account record and session records, which can include an IP address, the app's user agent, creation time and expiry. We use them to authenticate the app, tie membership access to your account, and prevent abuse.
Signing in with Apple is optional. If you do, we receive an Apple user identifier and the name and email address you allow Apple to share (this can be Apple's private relay address). We use them to sign you back into the same account on another device and to link your guest account. We never receive your Apple password. Apple authorization tokens needed to keep or revoke the connection are stored encrypted.
Apple processes payment. We never see your card number. We use Superwall, Inc. ("Superwall") to show membership screens and to manage subscriptions. When you open a membership screen, buy or restore, Superwall and we process:
Superwall sends subscription events to our server so that membership can follow your account. We use this information to show the right options, check access, restore purchases and see whether the purchase flow works.
If you answer "how did you hear about Tinkerhue?" during setup, that one answer is sent to Superwall and linked to your account identifier, so that we can tell which channels bring people to the app. It is not sent if you chose the under-18 age range. The other setup answers are never sent to us or to any provider.
When you browse the shelf, search, or open an object that is not yet on your device, the app requests it from our catalog service (hosted at littlewonders.callingmoonshots.com, a name from the app's development) on Cloudflare. A request includes what you type in search, the objects and collections requested, and the usual network details: IP address, user agent and time. Catalog requests do not carry your account identifier. Cloudflare handles these requests to deliver and secure the service, and we use them to keep the catalog working.
If you write to us we receive your email address and what you send. Please do not send passwords, Apple sign-in codes or payment card details.
The app does not ask for your camera, microphone, contacts, precise location or tracking permission.
We share information only with providers that help us run Tinkerhue, and only as needed:
Better Auth, the open-source authentication software that our service runs, is not a separate company that receives your data. We may also disclose information when the law requires it, to protect people or the service from fraud or abuse, or in a merger or sale of the business, in which case this policy continues to apply to the information unless you are told otherwise.
We do not sell your personal information or share it for cross-context behavioural advertising. Tinkerhue has no advertising networks and does not track you across other companies' apps and websites, so it does not show Apple's tracking prompt.
We are based in the United States. Our providers can process information in the United States and other countries. Where the law of your country limits transfers, we rely on the safeguards our providers offer, such as standard contractual clauses.
Delete your account in the app. Open ••• menu → Settings → Account & membership and choose Delete account (or Delete guest account). You may be asked to sign in again to confirm it is you. For an account linked to Apple, we revoke Tinkerhue's Apple authorization as part of deletion. The app only shows deletion as complete after our server confirms it.
Deletion removes the account profile, sessions and ownership links from our account database. It does not remove: (a) subscription and transaction records that we keep so that a later restore can be verified, and to meet tax, accounting, fraud-prevention and legal obligations; (b) information held by Apple, which has its own policies; and (c) information held by Superwall, whose handling is described in its policy. To ask us to request deletion of your Superwall data, email privacy@callingmoonshots.com.
Session credentials expire; expiry on its own does not delete an account. Catalog request logs held by Cloudflare are kept under Cloudflare's own retention schedule. Deleting your account does not delete paintings on your device and does not cancel an Apple subscription: cancel in Settings → your name → Subscriptions. Deleting the app removes its on-device paintings, so export anything you want to keep.
Otherwise we keep account information for as long as the account is active or as needed to provide the service and meet our legal obligations.
Traffic between the app and our services uses TLS. Session credentials are stored in the iOS Keychain, and Apple authorization tokens are encrypted in our database. No system is perfectly secure, so we cannot guarantee absolute security.
You can use Tinkerhue without signing in, skip the setup questions, decline notifications, and decide what you share. In the app you can delete your account and manage your subscription. Depending on where you live, you may have the right to access, correct, delete or receive a copy of personal information, to object to or restrict some processing, to withdraw consent where we rely on it, and to complain to your data-protection authority. Residents of California and other U.S. states may have similar rights, including to know the categories of information collected and to not be discriminated against for using these rights. We do not sell or share personal information for advertising.
To make a request, email privacy@callingmoonshots.com from the address linked to your account, or from Apple's private relay address if you signed in with Apple. If you use a guest account, tell us you are a guest and we will explain how to confirm ownership from the app. We may need to verify who you are before we act, and we reply within the time the law requires, generally 30 days.
Where European or UK law applies, we process information to perform our agreement with you (accounts, membership, restoring purchases), for our legitimate interests in running and securing the service and understanding whether it works, to comply with legal duties, and, where needed, with your consent.
Tinkerhue is a general-audience creative app and is not in the App Store Kids category. Families, including children painting with a parent, can use it. The setup questions may ask for an age range and whether you are painting with children; the answers are optional and stay on the device. If you choose the under-18 age range, nothing you answered in setup leaves the device.
We do not knowingly ask children for their name, email or other contact details, and the app works with a guest account. If a child under 13 (or under the age of digital consent where you live) uses the app, the guest-account, membership, catalog and Superwall processing described above still applies, and is used only to run the app, never for advertising or tracking. Parents and guardians can use Apple's Ask to Buy and Screen Time to manage purchases, can delete the account in the app, and can email privacy@callingmoonshots.com to review or delete anything a child has provided.
If we change how Tinkerhue handles personal information we will update this page and its date, and we will give notice in the app when a change materially affects how we use your information.
Calling Moonshots Inc. is the controller for Tinkerhue.