Privacy Policy

1. Scope

This Privacy Policy applies to the FillJoy mobile application, its supporting online services, and these support and legal pages (together, the “Service”). “FillJoy,” “we,” “us,” and “our” refer to the developer and operator of the Service.

FillJoy can be used without creating a named profile or providing a name, email address, phone number, social-media login, or payment information. The Service automatically establishes an anonymous guest profile so the app can securely request and download coloring content.

2. Information we process

Anonymous guest and device information

On first use, the app generates a random installation identifier and stores it in the iOS Keychain. The identifier is transmitted over an encrypted connection when the app establishes a guest session. The server stores only a SHA-256 hash of that installation identifier, together with a server-generated guest ID. Access credentials are also protected: the app stores the active token in the Keychain and the server stores only a hash of the token.

The guest-session request also includes the platform, FillJoy version, general device model, and iOS version. We process creation and last-active times to operate, secure, and troubleshoot the session.

Coloring-content activity

When you use online content, the Service may record the anonymous guest ID, artwork identifier, calendar date, and whether the artwork was viewed, downloaded, started, or completed. These events support content delivery, prevent duplicate daily counts, and produce popular-artwork rankings. They are not used for advertising or tracking you across other companies’ apps or websites.

Feedback and reports you choose to submit

If you send in-app feedback or report artwork, we receive the message, the relevant artwork identifier when applicable, submission time, anonymous guest ID, and a snapshot of the platform, app version, device model, and iOS version. Do not include sensitive personal information that is not needed to resolve the issue.

Support email

If you contact us by email, we receive your email address, message, attachments, and any information you choose to include. Email support is optional and is used to respond to your request and maintain an appropriate support record.

Technical request information

Our hosting and content-delivery infrastructure may process ordinary network information such as IP address, request time, requested endpoint, response status, and security or error logs. This information is used for delivery, reliability, fraud and abuse prevention, and service security.

Information kept on your device

Coloring progress, favorites, downloaded coloring packages, generated previews, preferences, and caches are primarily stored locally on your device. FillJoy does not currently provide cloud synchronization for this local work.

When you choose Save, FillJoy requests add-only Photos permission and sends the completed image to the iOS photo library. It does not read or upload your existing photo library. When you choose Share, iOS presents its share sheet; the destination you select processes the image under its own terms and privacy practices. FillJoy deletes its temporary share file after the share sheet completes.

3. How we use information

We use the information described above to:

• create and authenticate the anonymous guest session;
• show, download, version, and protect coloring content;
• operate discovery and popular-artwork features;
• receive, investigate, and respond to feedback and content reports;
• maintain reliability, diagnose failures, secure the Service, and prevent abuse;
• understand aggregate feature use and improve FillJoy; and
• comply with legal obligations and enforce applicable terms.

We do not sell or rent personal information, and we do not use the information processed by FillJoy for cross-context behavioral advertising.

4. Sharing and service providers

We disclose information only in the following limited circumstances:

• Infrastructure providers. Hosting, database, object-storage, and content-delivery providers, including Amazon Web Services, process information needed to run and secure the Service.
• At your direction. A completed image is provided to the Photos library or destination you select only when you choose Save or Share.
• Legal and safety reasons. We may disclose information when reasonably necessary to comply with law, respond to valid legal process, protect rights and safety, or investigate abuse.
• Business changes. Information may be transferred as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to this Policy and applicable law.

Service providers are permitted to process information only to provide services for us and must protect it with the same or an equivalent level of protection described in this Policy.

5. Retention and deletion

We retain guest-session metadata, content-activity records, and technical logs only for as long as reasonably necessary to operate, secure, troubleshoot, and improve the Service, or to meet legal obligations. Access tokens are time-limited and can be revoked. Feedback and content reports may be kept longer when needed to resolve the matter, document moderation decisions, prevent repeated abuse, or meet legal requirements.

You can remove individual works and favorites using the controls in FillJoy. Removing the app generally removes its local database and caches, although iOS may retain Keychain items according to system behavior. Local deletion does not automatically delete records already processed by the server.

To request deletion of server-side guest data, send “Delete my guest data” through FillJoy → Settings → Feedback or email 597868403@qq.com. Because the profile is anonymous, we may request limited technical information to locate and verify the correct record. We will process verified requests within a reasonable period and any period required by applicable law. We may retain limited information where the law requires or permits it, including for security, fraud prevention, legal claims, or proof that a request was completed.

6. Your choices and rights

• Photos: decline or revoke add-only access at any time in iOS Settings.
• Feedback: do not submit optional feedback, reports, or support email.
• Local data: delete works or favorites in the app, or remove the app from your device.
• Privacy requests: contact us to request access, correction, deletion, restriction, or objection where applicable.

Your rights depend on where you live. We will not discriminate against you for making a privacy request. We may need to verify a request and may be unable to identify a particular record if it cannot reasonably be linked to your anonymous guest profile.

7. Security

We use reasonable administrative, technical, and organizational safeguards, including encrypted network transport, hashed installation identifiers and server credentials, time-limited access tokens, and access controls. No storage or transmission method can be guaranteed completely secure, so absolute security cannot be promised.

8. Children

FillJoy is a general-audience creativity app and is not directed to children under 13. We do not knowingly request direct identifiers from children. If you are a parent or guardian and believe a child has provided personal information through feedback or support, contact us so we can review and delete it as required.

9. International processing

FillJoy and its providers may process information in countries other than the country where you live, including the United States. Those countries may have different data-protection laws. Where required, we use appropriate safeguards for international processing.

10. Changes and contact

We may update this Policy when the Service or legal requirements change. We will post the revised Policy here and change the effective date. If a change is material, we will provide additional notice when reasonably appropriate.