Privacy Policy
The short version. Crayoo does not upload children’s drawings — whether made on screen or photographed from paper. They are saved on the device. The app has no advertising or analytics SDK. The server holds a parent's account, child profile details, device sessions, and store purchase records to provide and protect the service. This policy also covers this website.
Who this is
Crayoo is published by Conan Apps. Questions about this policy, or about anything held about your family, go to apps@dep.app.
What is stored, and where
On the device only
- Every drawing a child makes. The pictures on the fridge, and the strokes behind them, are written to the app's own storage and are never uploaded.
- Photographs of paper drawings. When a grown-up photographs a drawing made on paper, the picture is cropped down to the drawing itself on the device, and the original frame — which may have the room and the people in it — is deleted immediately afterwards. Only the crop is kept, and it is kept on the device.
On the Crayoo server
Parent account and child profile data reach the server when a parent signs in. Using Continue without an account keeps child profiles locally and does not create a server account. Network requests for the service can still expose an IP address to the server or hosting provider.
- The parent's account. The account identifier Apple or Google issues for Crayoo, and the name and email address the provider passes on with it. Crayoo has no password of its own and never receives the one used with Apple or Google. The service stores authentication information needed for sessions and an encrypted Apple authorization token when provided.
- Child profiles. A first name or nickname the family chooses, the avatar they pick, and an age band. Nothing else about a child is asked for or stored. These sync so that a family's other devices show the same children.
- Subscription state. The plan, status, renewal or expiry dates, store transaction identifiers or purchase tokens, verification responses, and store notifications. These records verify purchases, restore access, and handle renewals or refunds. Apple or Google processes payment; Crayoo does not receive card numbers.
- Signed-in devices. For each device: the platform, device label, session timestamps, and the network address used for sign-in or session refresh. A parent sees this list in the parent zone and can sign any device out; it is also what limits how often sign-ins can be attempted.
What is never done
- No advertising, of any kind.
- No analytics or measurement SDK. Nothing reports what a child taps.
- No advertising identifier or profiling for targeted advertising.
- Nothing is sold, rented, or shared for anyone else's purposes.
Who else is involved
- Apple and Google — for signing in, and for taking payment. They are the ones who handle the payment; Crayoo only asks them whether a subscription is current. Their own privacy policies cover what they do.
- The hosting provider that runs the Crayoo server, which processes service data on Conan Apps's behalf. Service providers may process network and security information to operate their infrastructure.
This website loads fonts from Google Fonts. Your browser contacts Google to load them, which exposes network information such as your IP address. The site does not embed advertising or analytics tools. Data may also be disclosed when legally required or necessary to protect the service and its users.
Apple, Google, and hosting infrastructure may process data outside your country under their own terms. See Apple’s privacy policy and Google’s privacy policy.
Children
Crayoo is made for children aged about four to eight, and it is the parent who holds the account. Child profiles are created by a grown-up, behind a grown-up check, and a child is never asked for their own details — not an email address, not a birthday, not a photograph of themselves. Everything that spends money sits behind the same grown-up check.
Deleting everything
Parent zone → Delete account. The server deletes the parent record, every child profile, every sign-in identity and every device session, and asks Apple to revoke the sign-in grant. The app then removes the drawings held on that device.
Store subscription records and notification payloads remain after deletion, with the link to the parent account removed. They still contain store purchase identifiers and are not described as anonymous. These records let later refunds and renewals be handled without recreating the deleted account. A deletion count and administrative security records may also remain. Deleting a Crayoo account does not cancel a subscription — only the family can do that, in the App Store or Google Play.
How long things are kept
Account and child records are kept until the account is deleted. Expired or revoked device sessions are cleaned up after the server’s retention window. Store purchase records, notifications, and administrative records are retained for purchase verification, security, and legal obligations; the service currently has no automatic deletion schedule for those records. Drawings remain on the device until deleted. Device backups and copies on other devices are controlled separately by the family and the device platform.
Your rights
You may ask what is held about your family, ask for it to be corrected, or ask for it to be deleted. Use the parent zone to edit child profiles or delete the account. For access, correction, deletion, or other rights available under applicable law, contact apps@dep.app. Identity verification may be needed to protect your family’s data. Requests are handled within the time required by applicable law.
Changes
If this policy changes in a way that matters, the new version appears here with a new date, and the app points at this same page.