Everyone Paints
Privacy Policy
Last updated 28 August 2026
Everyone Paints is a collaborative art app. People leave comments on a shared picture, and on a timer those comments are turned into an edit that repaints it. This policy describes what the app stores, why, and how to get rid of it.
What we collect
- Your account. The email address you sign up with, and a one-way hash of your password. We never store the password itself.
- Your profile. A username, an optional display name, and an optional profile picture. All three are public.
- What you write. Your comments, which of them are replies to somebody else's, the comments you like, and the groups you join. Comments on a public canvas are public, and paint comments are used to generate the artwork.
- Notifications. If you allow them, a push token for your device and the platform it belongs to, so a canvas can tell you it repainted.
- Photos. If you set a profile picture from your photo library, only the single image you pick is uploaded. The app never reads your library otherwise.
- What you buy. If you buy credits, we record the purchase against your account: which pack, when, and the payment processor's or Apple's identifier for it. We never see or store your card number.
- Ordinary server logs. Requests to the API are logged with an IP address and a timestamp by our hosting provider, for security and debugging.
There is no third-party analytics SDK in Everyone Paints, and nothing here is sold or shared with data brokers. There is advertising, in exactly one place, and it is described below.
Advertising, and the one place it happens
Credits pay for a canvas to repaint, and one of the ways to get them is to watch a short video advert. That is the only advertising in the app, and it only happens on iPhone and iPad — there are no adverts in the Android app or on the website.
The adverts are served by Google AdMob. Nothing is requested from Google, and Google's advertising software does not start, until the moment you press the button to watch one. If you never watch an advert, no advertising company hears about you through this app at all.
When you do, you will be asked twice, once each: a consent form where the law requires one, and then iOS's own “Allow tracking?” prompt. Saying yes lets the advert be matched to you using your device's advertising identifier, which usually means it pays more — and since an advert pays you in credits sized by what it earned, that is money in your pocket rather than only ours. Saying no is a complete answer: you still get the advert and you still get the credits, and we ask Google for an unmatched one. You can change your mind at any time, in iOS Settings under Privacy & Security → Tracking, and where a consent form applies, under Profile → Privacy → Ad privacy choices.
How the artwork uses what you write
Paint comments are the point of the app, so it is worth being exact about where they go. When a canvas repaints, the paint comments left since the last repaint are sent, together with their like counts, to a language model that combines them into one edit instruction. That instruction and the current image are sent to an image model, which produces the next version. Your username is attached to your contribution so the canvas can show who shaped it.
Images produced this way are generated by a model from a crowd's instructions. They can be unexpected, and they are not a photograph of anything.
Who else sees it
We use a small number of service providers, and only ever send them what the feature needs:
- Cloudflare — hosting, the database, and image storage.
- Anthropic or OpenAI — combining paint comments into a single edit instruction, and computing the similarity scores that group related comments together.
- fal.ai (which serves Google's image model) or OpenAI — generating and editing the canvas images.
- An email provider (Resend or SendGrid) — sending verification and password-reset mail.
- Expo — delivering push notifications to your device.
- Google AdMob — serving the rewarded video advert, and only once you have asked for one. See the section above.
- Apple — only if you ask Apple to refund a credit purchase, and only if you have turned it on. See below.
Refunds, and what we tell Apple
If you buy credits on an iPhone or iPad and later ask Apple for a refund, Apple asks us what you actually received — specifically, how much of that purchase you had already spent. Our answer helps Apple decide.
We do not answer unless you have told us we may. The switch is under Profile → Privacy → Help Apple review your refunds, it is off until you turn it on, and you can turn it off again whenever you like. With it off, we say nothing to Apple and your refund is decided without us.
With it on, we tell Apple whether the credits reached your account, what percentage of them had been spent, and whether we would prefer the refund granted, prorated or declined. That last part is not one-sided: when you have bought credits and not spent them, what we send asks Apple to refund you in full.
We also disclose information where the law requires it, or where it is necessary to investigate abuse or protect someone's safety. One of those disclosures is not discretionary and is worth naming: where we become aware of apparent child sexual exploitation, United States law (18 U.S.C. § 2258A) requires us to report it to the National Center for Missing & Exploited Children, and that report includes the content and the account information behind it. NCMEC forwards reports to law enforcement. See Content & Safety.
Deleting your account
You can delete your account from inside the app: Profile → Delete account. It takes effect immediately and needs no email to us.
Deleting removes your email address, your password, your display name, your profile picture, your sessions, your registered devices and your group memberships. Your address is released, so you can sign up again with it later.
Your past comments are kept, permanently detached from you and shown under an anonymous handle. This is deliberate and we would rather say so plainly: those comments are the record of how each picture came to look the way it does, and other people's contributions are recorded in terms of them. What is removed is everything that connects them to you.
Retention
Account and content data is kept while your account exists. Sessions expire after thirty days, and verification and password-reset links after hours. Server logs are kept on our hosting provider's own schedule.
Your choices
- Edit your username, display name and picture at any time from your profile.
- Turn notifications off in your device settings.
- Decide whether adverts may be matched to you, and whether Apple may be told what a purchase was spent on — both under Profile → Privacy, and the first also in iOS Settings.
- Block anyone whose comments you do not want to see.
- Delete your account, as described above.
- Ask us for a copy of your data, or for a correction, at support@everyonepaints.com.
Children
Everyone Paints is not intended for children under 13, and accounts are not knowingly created for them. Because the artwork is generated from what a crowd writes, it is not suitable for young children. If you believe a child has created an account, write to us and we will remove it.
If you believe any content on Everyone Paints sexualises a child, report it in the app and to us, or directly to NCMEC at report.cybertip.org. What we do about it, including the report we are required to file, is set out in Content & Safety.
Changes
If this policy changes in a way that matters, the date at the top changes with it and the new version is posted here before it takes effect.