Privacy Policy
Private by design.Clear by policy.
Living Paintings creates, converts, and plays paintings on your devices. Prompt generation and deterministic painting run locally; the app does not send your pictures or prompts to an operator-run AI service.
Last updated September 5, 2026
On-device by default
Prompts, source pictures, generation, painting programs, and playback stay local unless you choose an Apple sync or sharing feature.
Private iCloud is optional
Approved paintings and explicit same-account transfers can use private Apple storage when that feature is enabled.
No tracking or advertising
The app has no advertising SDK, cross-app tracking, or public profile. TestFlight beta diagnostics are explained below.
This is a researched pre-release draft, not legal advice or the release-final policy. Before App Store submission, it must name the App Provider and verified public contact, be reviewed against the exact signed build and service configuration, and receive appropriate legal review.
1. Scope and the App Provider
This policy covers the Living Paintings app, its website, and support interactions. “Living Paintings,” “we,” and “us” refer to the developer identified as the App Provider on the App Store listing. The App Provider's verified legal identity remains required before this draft is treated as final. For privacy questions, contact corbensorenson@yahoo.com.
2. What the app handles
Creation inputs and results
Pictures you choose from Photos, take with Camera, or import from an HTTPS address; prompts; masks; seeds; ratios; treatment choices; temporary generated rasters; painting programs; posters; and review state are processed on the device. Nothing is permanently added to your Library until you approve it. When you save a personal painting, the exact prompt and source needed to regenerate it may remain in its private local sidecar until you delete that painting or all personal data.
Library and playback choices
Favourites, playlists, painting duration, canvas colour, playback position, generation preferences, purchases already unlocked, and other library choices are stored locally. Compact choices may sync through your Apple account when iCloud is available.
Apple Music and your media library
If you grant media-library permission and select a song, the app stores a limited library reference and display metadata so the same selection can be found later. Living Paintings asks Apple's system player to play the track. It does not copy, upload, analyze, or embed the protected audio in exported videos. You can remove the selection and revoke media-library permission in system Settings.
Optional private iCloud and CloudKit
Approved personal paintings, compact library choices, and one explicit same-account Create-source transfer can use private iCloud or CloudKit storage. Private database content is tied to your Apple account and is not a public or shared gallery. The product is designed so the App Provider does not receive or browse those private painting contents through an operator account. Apple processes the service under your Apple account.
Purchases
Apple processes purchases, refunds, Family Sharing, and restore operations. The app reads Apple-provided entitlement results to unlock collections. The App Provider may receive App Store sales and performance reports from Apple, but the app does not run its own payment account or receive your full payment-card details.
Diagnostics and support
Optional support diagnostics are a bounded, allowlisted trace stored on the device. They exclude prompts, images, URLs, music identifiers, titles, file paths, and raw error text, and are never uploaded automatically. If you deliberately contact support, we will handle the contact details and material you choose to send for support, safety, and legal follow-up.
TestFlight beta testing
When you use a TestFlight build, Apple automatically shares crash logs and usage data with Apple and the developer. This collection cannot be turned off within TestFlight. It is separate from the app's optional support trace. Feedback you choose to submit can include screenshots, comments, and personal information. We use beta data and feedback to investigate problems, improve the app, and respond to you. Review Apple's TestFlight terms before joining, and share only material you are comfortable sending. You can stop participating by deleting the beta app; preserve any paintings you want to keep first.
3. Permissions and user-directed network requests
Photos and Camera
Used only when you choose or capture an image for a painting. You can limit or revoke access in system Settings.
Media library
Used only after you choose to add music from your library. The app does not request it to create or play a silent painting.
Notifications
Used, if allowed, for a local notice that a long on-device creation is ready to review. Prompt or picture content is not placed in the notification.
Image links
When you paste and submit an HTTPS image address, your device contacts that third-party host to download the file. The host and network providers can receive ordinary request information, such as your IP address and the requested URL, under their own policies. Living Paintings does not proxy the request through an operator server.
Sharing and export
An image, video, painting package, or other item leaves the app only when you choose a system share, export, same-account transfer, or import action. The destination you select then handles it under its own terms and privacy policy.
4. Why data is used
Data is used to provide creation, playback, regeneration, library, optional continuity, purchases, security, deletion, and support; to comply with law; and to protect the app and its users. Where applicable, the legal basis is performance of the service you request, your permission or consent, legitimate interests in security and support, or a legal obligation. You can withdraw a device permission without affecting processing that lawfully occurred before withdrawal.
5. When information is disclosed
Living Paintings does not sell personal information, share it for cross-context behavioural advertising, or use it for targeted advertising. Data may be processed by Apple for iCloud, CloudKit, StoreKit, media-library playback, notifications, distribution, crash reports, and App Store services; by the website hosting provider for delivery and security; by a destination you choose through Share or export; or when required by law or necessary to protect rights, safety, and security. Service providers are limited to the work they perform and their applicable terms.
6. This website
The website has no advertising tracker, account form, or custom analytics SDK. Its hosting platform necessarily processes network request data such as IP address, user agent, requested page, and request time to deliver and secure the site, and may provide aggregate traffic counts. Demonstration media is site content and contains no visitor-submitted pictures or prompts.
7. Retention and deletion
Local personal paintings, prompts, private sources, playlists, preferences, and bounded diagnostics remain until you remove the relevant item, use Delete Personal Data, or uninstall the app, subject to operating-system backups and transactional recovery. The app excludes designated private caches and sources from ordinary backup. If private iCloud content exists, deletion is not reported complete until server-confirmed removal of the exact record; an offline request stays visibly pending and retries. Apple controls purchase records and some App Store records under its policies. Support correspondence and legally required records are retained only as reasonably needed for support, security, disputes, and legal obligations. Final retention periods will be audited and published before release.
8. Security
The app uses platform data protection, private application storage, bounded inputs, integrity checks, transactional writes, and authenticated private painting packages. No system can guarantee absolute security. Keep your device and Apple account protected, and report suspected security issues through the support contact listed on this page.
9. Children
Living Paintings is not directed to children under 13 and is not designated as a Kids Category app. A parent or guardian should supervise use by a minor and review prompts, imported media, and exported results. If the App Provider learns that personal data was received from a child contrary to applicable law, it will be deleted as required.
10. Your privacy choices and rights
You can decline or revoke Photos, Camera, media-library, iCloud, and notification access; remove a song association; delete a painting or playlist; use Delete Personal Data; and choose whether to export or share. Depending on where you live, you may also have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal data handled by the App Provider, and to appeal or complain to a regulator. Because most creation data stays on your device or in your private Apple storage, the App Provider may not possess a server-side copy to return. Identity will be verified before fulfilling a request.
11. International processing, changes, and contact
Apple, the website host, and support providers may process data in countries other than yours, subject to their safeguards and applicable law. Material policy changes will be dated and, when required, presented in the app before they take effect. Before launch, this section will publish the App Provider's legal name and any jurisdiction-specific notices. Email corbensorenson@yahoo.com with privacy questions, visit Living Paintings Support for release status, or read the Terms of Use.