Privacy Notice

1. Who we are

All My Paint ("All My Paint", "we", "us", "our") provides the All My Paint service ("Service"). This notice explains what personal data we collect, why we collect it, and the choices you have. For personal data we handle to provide the Service to you, All My Paint acts as the data controller.

2. Data we collect

• Account data: email address, authentication identifiers, and password credentials (hashed) needed to sign in.
• Content you upload: photos of paint cans and labels, plus fields like brand, color, formula, room, job, store, and notes you enter.
• Support communications: messages and attachments you send us.
• Usage & device data: IP address, device and browser type, pages visited, and basic diagnostic/telemetry needed to run the Service and prevent abuse.
• Billing metadata: a subscription ID, plan, and status returned by our payment provider. Payment card details are collected and processed by Paddle; we never see or store them.

3. How we use your data

• Provide the Service — create your account, store your paint inventory, run label extraction, and let you search and manage your content. Legal basis: performance of a contract.
• Security & fraud prevention — detect abuse, protect accounts, investigate incidents. Legal basis: legitimate interests.
• Customer support — respond to your questions and troubleshoot issues. Legal basis: performance of a contract / legitimate interests.
• Service improvement — aggregated and diagnostic analytics used to improve reliability and features. Legal basis: legitimate interests.
• Legal compliance — meet obligations, respond to lawful requests, enforce our Terms. Legal basis: legal obligation / legitimate interests.

4. Who we share data with

• Service providers / subprocessors who host our infrastructure, store data, provide authentication, run label extraction, and help us operate analytics and support tooling.
• Paddle, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance, and invoicing.
• Professional advisers such as lawyers and accountants where needed.
• Authorities where required by law or to protect rights and safety.

We do not sell your personal data.

5. International transfers

Our providers may process data outside your country, including outside the UK/EEA. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions.

6. How long we keep data

We keep account and content data for as long as your account is active. If you delete your account, we delete or anonymize your data within a reasonable period, except where we need to keep specific records for legal, tax, security, or dispute-resolution purposes.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your personal data, to port your data, and to withdraw consent. UK/EEA residents may also lodge a complaint with a supervisory authority. We will respond to verified requests within the time required by applicable law (typically within one month for GDPR).

To exercise your rights, contact us through the app's support channel.

8. Security

We use appropriate technical and organizational measures — including encryption in transit, access controls, and least-privilege service credentials — to protect your data. No system is perfectly secure, and you're responsible for keeping your account credentials safe.

9. Cookies

We use a small number of cookies and similar technologies that are essential for signing in, keeping you signed in, and maintaining security. We may also use limited analytics to understand aggregate usage. You can manage cookies through your browser; disabling essential cookies will prevent the Service from working correctly.

10. Children

The Service is not directed to children under the age required for consent in their country.

11. Changes

We may update this notice from time to time. Material changes will be communicated in-app or by email. See related terms in our Terms & Conditions.

12. Contact

Contact All My Paint via the app's support channel for any privacy questions.