App Privacy

Effective date: June 29th, 2026

This Privacy Policy applies to the Color My Life iOS app, Android app, and web app (collectively, the "App").

We take privacy seriously and have a few principles that we follow.

We don’t ask you for personal information unless we truly need it
We don't share your personal information with anyone, with limited exceptions. One exception today: we run a small, separate online shop hosted on Shopify that sells Color My Life branded merchandise such as stickers. That shop is not part of the App, and this Privacy Policy does not cover it — purchases there are handled by Shopify and its payment, shipping, and email providers under their own privacy practices, and nothing you do in the App is shared with the Shopify shop or vice versa.
No personally identifiable data is ever sold to other companies for any reason.
We don’t store personal information on our server unless required for the on-going operation of our app.

Color My Life, Inc., a Delaware Corporation (referenced as "we", "us", "our" or "I" in this document) operates the Color My Life iOS, Android, and web apps. It's our policy to respect your privacy regarding any information we may collect while operating our app. By using our app, you agree to be held to the details outlined here.

What We Collect

Our app will request an e-mail address and name only for specific operations. Outlined below are the times when we request your information and why. We try and limit this only to when it’s absolutely required to achieve the operation or when required by the software and services we use.

When you create an account, an e-mail address is required as part of the signup process. When you signup, you will be sent an e-mail to continue the account creation process. Your real name is optional.
To the email address used for the account, we will be sent periodic email updates and information. You can unsubscribe from these emails.
The email address used for the account will be sent notifications for account management purposes; those emails are required as part of maintaining an account with the Color My Life app.
Diagnostic data (errors and crashes). When the App encounters an error or crash, we automatically collect technical diagnostic information to help us identify and fix the problem. This includes the device model, operating system and version, app version, the screen or action that triggered the error, a stack trace, and a coarse identifier so we can tell whether one user is hitting the same error repeatedly versus many users hitting it once. This data is described in more detail under "3rd Party Services Used" below.

What We Do With App Data

We store and retrieve data as required for the app operation. Without the information, the action you are requesting (creating an account, searching for items, etc.), we would not be able to do what you request. The data you enter in the app is also stored on a server so that it is backed up and you can synchronize between devices. We have access to the data so that we can manage the account, but the personally identifiable information is not shared unless it is for software development or data management. We maintain contracts and confidentiality agreements with anyone working on the system and they cannot use your data for anything other than software development or data management. We use the data to manage accounts and to improve the app. We reserve the right to share consolidated information that is not personally identifiable, such as which items are being added, wishlist content, etc. We do not share creative work, such as Projects unless you specifically authorize it.

User Barcodes (New)

We are introducing a feature called User Barcodes. Color My Life maintains a shared barcode catalog that helps every user identify and add items more easily. With User Barcodes, items you add to your own collection — including the barcode, item image, item name, category, and manufacturer — may be added to that shared catalog so other users benefit from your contribution.

What we do not share to the catalog:

Your name, email, or any account identifier
Quantity, location, tags, value, notes, wishlist status, projects, or any other private fields you keep about the item
Any link, public or private, between a catalog entry and you

Catalog contributions are fully anonymous publicly. Other users will not be able to tell who contributed an entry. We may retain an internal record of contributions for moderation, deduplication, and abuse prevention, but that record is not exposed in the App or shared with third parties.

Image screening. Because product images can occasionally include incidental background (for example, a hand, a face in the distance, or a piece of mail on a shelf), we screen each candidate image before it is added to the shared catalog. Screening uses a combination of a third-party AI vision service (see "3rd Party Services Used" below) and human review of flagged or edge-case items. The goal is to keep the catalog focused on the product itself and to exclude personally identifiable information that may have been captured unintentionally. The AI provider receives the image only for the brief period needed to score it, under terms that prohibit training on the data; see "3rd Party Services Used" below.

Sharing is on by default. You can turn it off at any time in Settings → Item Management → Contribute Barcodes. If you turn sharing off, items you add or modify after that point will not be contributed to the catalog. Items previously contributed remain in the catalog because, once anonymized and merged with other users' data, they are not individually attributable; if you want a specific past contribution removed, contact us at the address below and we will use reasonable efforts to remove it from the catalog going forward.

Take-down does not reach copies already in other users' collections. Once another user has used a catalog entry to add an item to ther own personal collection in the App, that copy belongs to that user's data. Removing the entry from the shared catalog will prevent further users from finding and copying it.

You retain rights in your original creative work. By contributing to the User Barcodes catalog you grant Color My Life and other users of the App a non-exclusive, worldwide, royalty-free license to display, copy, and use the contributed barcode, image, name, category, and manufacturer so that other users can catalog their own supplies within their own collections in the App, and so that Color My Life can operate, maintain, and improve the catalog.

Where Your Data Is Stored

The majority of your information is stored on our systems with our hosting provider, Amazon Web Services (AWS). AWS does not access any of your information.

If you are located outside the United States, including in the European Economic Area, the United Kingdom, or other regions, please be aware that your information will be transferred to, stored, and processed in the United States. Where required, we rely on appropriate transfer mechanisms, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, to protect your information when it is transferred internationally.

How Long We Keep Your Data

We keep your account information for as long as your account is active. You can delete your account yourself at any time from the iOS or Android app at Settings → My Profile → Delete Account, which removes your personal information from our systems. Web users can request deletion by emailing us at the address below. When you delete your account or ask to be forgotten, we remove or anonymize your personal information within a reasonable period, except where we are required to retain certain records for legal, tax, security, or fraud-prevention purposes.

Diagnostic data (errors and crashes) is retained for up to 90 days and then deleted or aggregated.

3rd Party Services Used

Emails are sent using services called MailGun and MailChimp. They will store your name and e-mail in order to send you emails.

We use Sentry (sentry.io), an error and crash reporting service operated by Functional Software, Inc., to help us detect, diagnose, and fix problems in the App. Sentry receives errors, and if enabled for monitoring purposed on a specific account, sync transactions. When the App encounters an error or crash, Sentry receives technical information about the event, including device model, operating system and version, app version, the action or screen that triggered the error, a stack trace, and a coarse identifier so we can group related events. Sentry may also receive limited details about the in-app transaction that was in progress at the time of the error (for example, the type of operation being performed) so we can reproduce the problem. We do not enable Sentry's session-replay features, and we do not send Sentry your name, email, or password. Sentry processes this information on our behalf as a data processor under a Data Processing Agreement.

We use third-party AI vision services to help screen images submitted to the User Barcodes catalog. The provider used at any given time is typically OpenAI (api.openai.com, operated by OpenAI, OpCo, LLC) or Anthropic(api.anthropic.com, operated by Anthropic, PBC). Each provider receives only the product image submitted for screening and a screening prompt; we do not send your name, email, account identifier, or any other field from your collection. We use each provider under API/enterprise terms that prohibit the provider from using submitted data to train its models. Each provider processes this information on our behalf as a data processor under a Data Processing Agreement. We will update this Privacy Policy if we add or change vendors in a way that materially affects this practice.

Sharing

We do not share any data with any advertising or information networks. We do not sell or "share" (as that term is defined under the California Consumer Privacy Act) your personal information.

Your Rights

Depending on where you live, you have rights regarding your personal information. We honor these rights for all users of the App regardless of location, but specific frameworks include:

If you are in the European Economic Area or the United Kingdom (GDPR / UK GDPR). You have the right to access the personal data we hold about you, to ask us to correct it, to ask us to delete it, to ask us to restrict or object to processing, and to ask for a portable copy. The lawful basis on which we process your personal data is: performance of our contract with you (to operate your account and the App), our legitimate interests (to keep the App secure, to fix errors via Sentry, to maintain the shared barcode catalog in a way that benefits users, and to screen User Barcodes submissions to exclude incidental personal information), your consent (where we ask for it, for example for marketing emails you can unsubscribe from), and legal obligation (where the law requires us to keep certain records). You can withdraw consent at any time. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects within the meaning of Article 22 GDPR; the AI-assisted image screening described above includes human review of flagged and edge-case items. You also have the right to lodge a complaint with your local supervisory authority. We aim to respond to requests within 30 days.

If you are a California resident (CCPA / CPRA). You have the right to know what personal information we collect, use, and disclose; the right to delete your personal information; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information (we do not sell or share, but you have this right regardless); the right to limit the use of sensitive personal information; and the right not to be discriminated against for exercising these rights. We will acknowledge your request within 10 business days and respond substantively within 45 calendar days, with one 45-day extension if reasonably necessary.

If you live in another U.S. state with a privacy law (such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon, or others as they take effect), you have substantially similar rights, and we will honor them under the framework that applies to you.

To exercise any of these rights, email us at the address in "How to Contact Us." We may need to verify your identity before responding, using reasonable measures proportionate to the sensitivity of the request.

Children's Privacy (COPPA)

The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and you believe your child has provided us with personal information without your consent, please contact us and we will delete the information and the associated account. If we learn that we have collected personal information from a child under 13 without verified parental consent, we will delete it.

Security

We use reasonable administrative, technical, and physical safeguards to protect your information, including encryption in transit, access controls on our systems, and confidentiality agreements with people who work on the App. No system is perfectly secure, but we work to keep yours as safe as we reasonably can. If we ever experience a personal data breach that is likely to affect you, we will notify the appropriate supervisory authority and, where required by law, notify you directly.

Privacy Policy Changes

Although most changes are likely to be minor, we may change this Privacy Policy from time to time, and at our sole discretion. We encourage visitors to frequently check this page for any changes to our Privacy Policy. Material changes (for example, a change to what we share to the User Barcodes catalog, or a new third-party service that processes your personal data) will be highlighted in the App or sent to your account email before they take effect. Your continued use of the App after any change in this Privacy Policy will constitute your acceptance of such change.

How to Contact Us

If you would like to contact us with any questions, please do so by emailing support at support@colormylife.com.

Version history

June 29, 2026 — Added disclosure of Sentry for error and crash reporting. Added the User Barcodes feature (default-on contribution of item barcode, image, name, category, and manufacturer to a public shared catalog; opt-out in Settings; contributions anonymous publicly). Expanded scope to cover iOS, Android, and web apps. Added GDPR / UK GDPR, CCPA / CPRA, and COPPA disclosures, retention, international transfer, and security sections. Clarified that the separate Shopify merchandise store is outside the scope of this policy.
March 1, 2019 — Initial version.