Privacy Policy & GDPR Notice

Effective date: 22 January 2025

1. Data Controller

The data controller is Othermynd Limited

Registered office: 5c Milton Road, London SE24 0NL

Email: privacy@colourdoodle.com

2. Personal Data We Collect

We collect the following data:

  • Email address
  • First and last name
  • Uploaded images
  • Generated colouring pages
  • Payment information (processed by Stripe; we do not store card details)
  • Essential authentication cookies

We do not use analytics, advertising pixels, or tracking cookies at this time.

3. How We Use Your Data

We use your data to:

  • Create and manage your account
  • Process images and generate colouring pages
  • Deliver purchased products
  • Provide customer support
  • Prevent fraud and misuse

4. Lawful Bases (GDPR)

We process personal data under the following lawful bases:

PurposeLawful Basis
Account creationContract
Image processingContract
Payment processingContract
Customer supportLegitimate interest
Fraud preventionLegitimate interest

If we introduce analytics or advertising tools in the future, we will rely on consent where required.

5. Image Processing & Storage

  • Images are stored securely.
  • Retained only to provide ongoing access to your content.
  • Deleted when you delete them or close your account.
  • Not used for training AI models or marketing.

6. Third-Party Processors

We use trusted third parties to operate the Service, including:

  • Supabase (authentication & database)
  • Stripe (payments)
  • Google Gemini (AI image processing)

All processors act under appropriate data protection agreements.

7. Cookies

We use essential cookies only to:

  • Maintain login sessions
  • Secure the Service

No marketing or analytics cookies are currently used.

8. Your Rights (GDPR)

You have the right to:

  • Access your data
  • Correct inaccurate data
  • Request deletion
  • Restrict or object to processing
  • Data portability
  • Lodge a complaint with the ICO (UK)

To exercise these rights, contact privacy@colourdoodle.com

9. Data Security

We use appropriate technical and organisational measures to protect your data.

10. Children

Our Service is not directed to children under 13. We do not knowingly collect their personal data.

11. Changes

We may update this policy from time to time. Material changes will be communicated via the Service.