Squiggloo — Privacy Policy

Last updated: 19 March 2026

1. About This Policy

This policy applies to Squiggloo, a coloring app for all ages on iPhone and iPad, published by Appfide Private Limited ("Appfide," "we," "us," or "our"), a company incorporated under the laws of India with its registered office at XXI/152 Panadans, Cochin University Post, Ernakulam – 682022, Kerala, India. Appfide is the controller (and, under India's Digital Personal Data Protection Act, the data fiduciary) for the data described here.

It sits alongside our company-wide Privacy Policy. Where the two differ, this app-specific policy prevails for Squiggloo. Sections of the company policy about user accounts, sign-in, profile data, analytics, advertising and web payments do not apply to Squiggloo.

2. In Short

  • No accounts, no sign-in, no names or email addresses.
  • No ads, no analytics, no tracking and no third-party SDKs.
  • The app creates a random identifier on the device and sends it to our server to load coloring pages and to check a PRO subscription. It is not tied to your child, to you, to your Apple ID or to any advertising identifier.
  • Photos used in Make Your Own are converted on the device and never uploaded. Saved artwork stays on the device.
  • Settings, purchases and links that leave the app are behind a parental gate.

3. What Stays on the Device

  • Photos. Make Your Own turns a photo into a coloring page on the device. The photo is never uploaded.
  • Artwork. Pictures your child colors are kept in the app's My Art gallery on the device. We never receive them.
  • Save to Photos. Saving a picture only adds it to your photo library.

4. What Our Server Receives

Our server runs on Cloudflare (Cloudflare Workers, with a Cloudflare D1 database). It receives:

  • A random identifier. The app creates it on the device the first time it runs and sends it to open a session and deliver coloring pages. It is not derived from anything about your child, you, your Apple ID or your device's hardware, and it is not an advertising identifier. Our server keeps a record of it, when it was first seen, and whether PRO is active.
  • Subscription details from Apple. Squiggloo PRO is bought and managed through the App Store. To know whether PRO is active, our server receives Apple-signed transaction data — the product, its dates, the country of the App Store (storefront) and the price — and links it to the random identifier. Apple also tells our server when a subscription renews, is cancelled or is refunded. We do not receive payment details, names or email addresses.

Like any internet service, our server sees your device's IP address when the app connects. We use it only to limit abusive request rates and do not store it in our database.

5. Internal Alerts

When a subscription event happens (for example a new subscription, a renewal or a refund), our server sends a short message to the company's internal Telegram chat so our team can run the service. It contains the plan, price, country and a shortened transaction ID, and no personal data.

6. What We Do Not Do

Squiggloo has no ads, no analytics, no tracking and no third-party SDKs, and no accounts. We do not sell or share data for advertising, and never will.

7. Who Processes Data

  • Apple: the purchase itself, under its own privacy policy.
  • Cloudflare: runs our server and database.
  • Telegram: carries the internal alerts in section 5.

8. Children

Squiggloo is for all ages and many of its users are young children, so it is designed with the US Children's Online Privacy Protection Act (COPPA) and the GDPR's rules for children in mind. We do not collect personal information from children: there are no accounts, no chat, no ads, no analytics and no tracking, and photos and artwork stay on the device. A parental gate protects purchases, settings and links that leave the app. We follow the App Store's rules for apps used by children and India's Digital Personal Data Protection Act, 2023.

9. Why We Use This Data (Legal Bases)

  • To provide the app (performance of our contract): delivering coloring pages, checking a PRO subscription and answering support requests.
  • Our legitimate interests, balanced against yours: keeping the service secure and running it (rate limiting, internal subscription alerts).

We make no decisions about anyone based solely on automated processing.

10. Data Retention

The record of the random identifier, and the subscription details linked to it, are kept while Squiggloo is in use and are deleted when you ask us to (section 11). Photos and artwork are never on our server.

11. Deleting Your Data

  • On the device: deleting the app removes the artwork and other data stored in it. The random identifier is kept in the iOS Keychain, which iOS keeps after an app is deleted, so a reinstall on the same device reuses it.
  • On our server: email [email protected] with the ID shown at the bottom of Squiggloo's Settings (tap it to copy) or the order ID from your App Store receipt, and we will delete the identifier record and the subscription details linked to it.
  • Deleting data does not cancel a subscription: cancel it in Settings → your name → Subscriptions.

12. Security

Traffic between the app and our server is encrypted (HTTPS), and access to our systems is limited to the people who need it.

13. Your Rights

Parents and guardians can ask us at any time to see or delete the data linked to their device. Wherever you live, email [email protected] with the ID from Squiggloo's Settings or your App Store order ID. We will not ask for more information than we need to verify your request, we respond within 30 days (or sooner where the law requires it), and we will not treat you differently for using your rights. These include your rights under the GDPR, UK GDPR and Swiss law (access, correction, erasure, restriction, portability and objection), US state laws such as the CCPA, India's Digital Personal Data Protection Act and Brazil's LGPD. You may also complain to your local data protection authority, or in India to the Data Protection Board of India.

14. International Transfers

Appfide is based in India. Cloudflare runs our server on its global network, so data may be processed outside your country, including in the United States. Where the law requires it, we rely on appropriate safeguards such as our providers' data processing agreements and standard contractual clauses.

15. Changes

We may update this policy. Changes will be posted here with a new "last updated" date. If we ever wanted to collect anything more, this policy would say so here first.

16. Contact

Privacy questions and requests: [email protected]
Anything else: [email protected]
Appfide Private Limited, XXI/152 Panadans, Cochin University Post, Ernakulam – 682022, Kerala, India.

See also the Squiggloo Terms of Use and Squiggloo Support.