Brushee Privacy Policy

Last updated: 6 October 2026

This policy explains what information the Brushee app collects, why, who we share it with, and the choices you have. This policy uses "Brushee", "we" and "us" for Brushee and the people who run it. If anything here is unclear, email support@paintwithbrushee.com.

The short version: you can paint without an account, and your paintings stay on your device. We only collect what a feature you choose needs. Ads keep Brushee free, and you decide whether they can be personalised. We never sell your personal information.

1. What we collect, and why

Your account

You can sign in with Apple or with Google. Sign-in is handled by our authentication provider, Supabase. We receive an account identifier and your email address. With Sign in with Apple you can choose to hide your email, in which case Apple gives us a private relay address instead. We use this to create and secure your account and to link your purchases, AI Studio canvases and Pro backups to it.

Painting progress and Gallery backup (Brushee Pro)

If you have Brushee Pro and an account, Brushee backs up your painting progress and your Gallery so they follow you across devices. They are sent through our own server and stored in our Supabase database and in Cloudflare R2 storage, tied to your account. Our server checks your subscription with RevenueCat before it accepts a backup.

AI Studio photos

If you use AI Studio, you choose a photo and Brushee uploads it so it can be turned into a picture you can paint:

These providers process your photo only to provide this feature. Your photos are never shown to other people or used for advertising. To delete a photo, delete its canvas in the app: that removes the canvas and its stored files.

Purchases

Brushee Pro is sold through Apple's App Store, and we use RevenueCat to manage subscriptions. RevenueCat receives your purchase status from Apple (such as the product, and when it started, renews or expires) together with an app user ID: an anonymous ID, or your Brushee account ID if you are signed in. Apple handles the payment itself; we never see your card or payment details.

Ads

If you use Brushee for free, you see ads served by Google AdMob. To serve, measure and limit ads, Google may receive your device's advertising identifier (IDFA, only if you allow tracking), your coarse location (based on your IP address), device information (such as model and operating system) and usage and diagnostic data (such as which ads you saw or tapped, and crashes or errors).

Notifications

If you allow notifications, Brushee stores your device's push notification token with your account so we can let you know, for example, when an AI Studio canvas is ready. The daily painting reminder is scheduled on your device itself and sends us nothing. You choose which notifications you get in Brushee's Profile → Notifications, and you can turn them all off at any time in Settings → Notifications → Brushee.

Usage analytics

To understand which features people use and how to improve Brushee, the app sends usage events to PostHog, our analytics provider. For example: which screens you open, when you start or finish a painting, when you use a hint, when you see the Brushee Pro offer and whether a purchase went through (never your payment details). Each event carries your app version, device type and whether you have Pro. If you're signed in, events are linked to your account's anonymous ID, never to your name or email. We never send your photos, paintings or your device's advertising identifier, and we ask PostHog not to keep your IP address. Analytics is not used to track you across other companies' apps. You can turn it off at any time in Brushee's Profile → Share usage analytics.

Crash reports

If Brushee crashes or a key feature fails (for example an AI Studio canvas, a backup or a purchase), the app sends a crash report to Google's Firebase Crashlytics so we can fix it. A report contains technical details such as the error, your device model, iOS version and app version, and, if you're signed in, your account's anonymous ID. It never contains your name, email, photos or paintings.

The website waitlist

If you join the waitlist on paintwithbrushee.com, we store your email address so we can email you when Brushee launches. It is kept in our Supabase database, together with where on the page you signed up, the date, your browser's user agent and the country your connection comes from (worked out by Cloudflare from your IP address; we don't store the IP address itself). We never sell it or use it for anything else. To be taken off the list, email support@paintwithbrushee.com and we will delete it.

To keep bots off the list, the form uses Cloudflare Turnstile, which checks your browser when you use the form and may set a short-lived cookie. Turnstile only loads once you start using the form.

On your device

Your paintings, settings and, if you don't have Pro, your painting progress are stored only on your device. Brushee downloads pictures from our content service (cdn.paintwithbrushee.com). Like any web server, it sees your IP address when it delivers them, and our hosting provider, Cloudflare, may keep short-lived logs for security and reliability.

2. What we don't do

3. Who we share it with

We share information only with the service providers that run Brushee for us, and only what each one needs, or when the law requires it:

Each has its own privacy policy:

4. Where your data is stored

Our providers store and process data on servers in the United States and the European Union, and may process it in other countries where they operate. When data moves between countries, they use the safeguards the law requires, such as the European Commission's Standard Contractual Clauses.

5. How long we keep it

We keep your account information, Pro backups and AI Studio canvases for as long as your account exists, or until you delete them. AI Studio canvases you delete in the app are removed straight away, together with their stored files. Waitlist emails are kept until Brushee has launched and we've sent the launch email, then deleted, or sooner if you ask.

6. Deleting your account and data

You can delete your account and everything stored with it at any time:

When you ask by email, we delete your data within 30 days, except records the law requires us to keep. Purchase records held by Apple and RevenueCat follow their own rules. Deleting your account does not cancel a subscription: cancel it in your Apple ID settings (Settings → your name → Subscriptions). Deleting the app removes the paintings stored on your device.

7. Your rights

Depending on where you live (for example under the GDPR in Europe and the UK, or the CCPA in California), you have the right to:

To use any of these rights, email support@paintwithbrushee.com. We will answer within 30 days, and we won't treat you differently for asking.

8. Children

Brushee is not directed at children under 13, and we don't knowingly collect personal information from them. If you are a parent or guardian and believe your child has given us personal information, email us and we will delete it.

9. Security

All traffic between Brushee and our servers is encrypted with HTTPS. Your account's data on our servers can only be reached with your sign-in, and our servers only read or write the data of the account that made the request. No system is perfectly secure, but we work to protect your information and keep what we collect to a minimum.

10. Changes to this policy

If we change this policy, we will post the new version here and update the date at the top. If a change is significant, we will also tell you in the app.

11. Contact

Questions about privacy? Email support@paintwithbrushee.com.

See also our Terms of Use.