Privacy Policy

Last updated: 27 September 2026

This policy explains what information the Brushee app collects, why, who we share it with, and the choices you have. Brushee is operated by Ralph Ordanza ("Brushee", "we", "us"). If anything here is unclear, email support@paintwithbrushee.com.

The short version: you can paint without an account, and your paintings stay on your device. We only collect what a feature you choose needs. Ads keep Brushee free, and you decide whether they can be personalised. We never sell your personal information.

1. What we collect, and why

Your account

You can sign in with Apple or with Google. Sign-in is handled by our authentication provider, Supabase. We receive an account identifier and your email address. With Sign in with Apple you can choose to hide your email, in which case Apple gives us a private relay address instead. We use this to create and secure your account and to link your purchases, AI Studio canvases and Pro backups to it.

Painting progress and Gallery backup (Brushee Pro)

If you have Brushee Pro and an account, Brushee backs up your painting progress and your Gallery so they follow you across devices. They are sent through our own server and stored in our Supabase database and in Cloudflare R2 storage, tied to your account. Our server checks your subscription with RevenueCat before it accepts a backup.

AI Studio photos

If you use AI Studio, you choose a photo and Brushee uploads it so it can be turned into a picture you can paint:

The photo is checked for content that breaks the rules and restyled into an illustration using OpenAI's API.
The illustration is turned into shapes by vectorizer.ai, and the paint-by-numbers canvas is built on our processing service running on Google Cloud.
The photo and the canvases made from it are stored in Cloudflare R2, in an area tied to your account, so you can come back to them. We also keep a record of each canvas and a monthly usage count for AI Studio's limits.

These providers process your photo only to provide this feature. OpenAI does not use data sent through its API to train its models by default. Your photos are never shown to other people or used for advertising. To delete a photo, delete its canvas in the app: that removes the canvas and its stored files.

Purchases

Brushee Pro is sold through Apple's App Store, and we use RevenueCat to manage subscriptions. RevenueCat receives your purchase status from Apple (such as the product, and when it started, renews or expires) together with an app user ID: an anonymous ID, or your Brushee account ID if you are signed in. Apple handles the payment itself; we never see your card or payment details.

If you use Brushee for free, you see ads served by Google AdMob. To serve, measure and limit ads, Google may receive your device's advertising identifier (IDFA, only if you allow tracking), your coarse location (based on your IP address), device information (such as model and operating system) and usage and diagnostic data (such as which ads you saw or tapped, and crashes or errors).

Your choice. Brushee asks your permission through Apple's App Tracking Transparency before ads may track you, and, where the law requires it (for example in the EEA, the UK and Switzerland), asks for your consent through Google's User Messaging Platform. Ads are personalised only if you agree. If you say no, you still see ads, but they aren't personalised.
Changing your mind. You can change tracking at any time in Settings → Privacy & Security → Tracking on your device.

Notifications

If you allow notifications, Brushee stores your device's push notification token with your account so we can let you know, for example, when an AI Studio canvas is ready. You can turn notifications off at any time in Settings → Notifications → Brushee.

On your device

Your paintings, settings and, if you don't have Pro, your painting progress are stored only on your device. Brushee downloads pictures from our content service (cdn.paintwithbrushee.com). Like any web server, it sees your IP address when it delivers them, and our hosting provider, Cloudflare, may keep short-lived logs for security and reliability.

2. What we don't do

We don't sell your personal information, and we don't share it for anyone else's marketing.
We don't track you across other companies' apps and websites, except for ads you have agreed to through App Tracking Transparency.
We don't use your photos or paintings for advertising.

3. Who we share it with

We share information only with the service providers that run Brushee for us, and only what each one needs, or when the law requires it:

Supabase: sign-in and our database.
Cloudflare: our servers, content delivery and R2 storage.
RevenueCat: subscription management.
Google: AdMob ads, ad consent (User Messaging Platform), Sign in with Google, and AI Studio processing on Google Cloud.
OpenAI: AI Studio content checks and image generation.
vectorizer.ai: AI Studio shape conversion.
Apple: payments, Sign in with Apple and push notifications.

Each has its own privacy policy:

4. Where your data is stored

Our providers store and process data on servers in the United States and the European Union, and may process it in other countries where they operate. When data moves between countries, they use the safeguards the law requires, such as the European Commission's Standard Contractual Clauses.

5. How long we keep it

We keep your account information, Pro backups and AI Studio canvases for as long as your account exists, or until you delete them. AI Studio canvases you delete in the app are removed straight away, together with their stored files.

6. Deleting your account and data

You can ask us to delete your account and everything stored with it at any time:

In the app: Profile → Delete account (coming soon).
By email: write to support@paintwithbrushee.com from the address linked to your account, or tell us which sign-in you used.

We delete your data within 30 days, except records the law requires us to keep. Purchase records held by Apple and RevenueCat follow their own rules. Deleting your account does not cancel a subscription: cancel it in your Apple ID settings (Settings → your name → Subscriptions). Deleting the app removes the paintings stored on your device.

7. Your rights

Depending on where you live (for example under the GDPR in Europe and the UK, or the CCPA in California), you have the right to:

access the personal information we hold about you and get a copy of it;
correct it if it's wrong;
delete it;
object to or restrict how we use it, and withdraw any consent you gave (for ads, change it in Settings or the in-app consent form);
complain to your local data protection authority.

To use any of these rights, email support@paintwithbrushee.com. We will answer within 30 days, and we won't treat you differently for asking.

8. Children

Brushee is not directed at children under 13, and we don't knowingly collect personal information from them. If you are a parent or guardian and believe your child has given us personal information, email us and we will delete it.

9. Security

All traffic between Brushee and our servers is encrypted with HTTPS. Your account's data on our servers can only be reached with your sign-in, and our servers only read or write the data of the account that made the request. No system is perfectly secure, but we work to protect your information and keep what we collect to a minimum.

10. Changes to this policy

If we change this policy, we will post the new version here and update the date at the top. If a change is significant, we will also tell you in the app.

11. Contact

Brushee, operated by Ralph Ordanza. Questions about privacy? Email support@paintwithbrushee.com.