Mellow Colors

Privacy Policy

Effective date: November 8, 2026

Controller: Revolt Bots LLC

This policy explains what the Mellow Colors app for Android and iPhone, and this website, collect, why, who receives it and how long it is kept. In short: you don't need an account, there are no ads, your artwork stays on your device, and usage statistics and crash reports are optional.

1. Who we are

Mellow Colors is made by Revolt Bots LLC ("we", "us"), which is the controller of the personal data described here.

You don't need an account to use Mellow Colors, and we never ask for your name or email address. The one exception is the data request form described in section 13, where you type an email address so we can reply to you.

For general questions, write to support@mellowcolors.com.

2. What stays on your device

The app keeps these on your phone or tablet, and we don't have a copy:

  • your artwork;
  • bookmarks and recently used colors;
  • settings, including the reminder setting;
  • the categories you picked when you first opened the app;
  • pages you have downloaded;
  • your consent choice.

Uninstalling the app, or clearing its data, removes all of it from the device.

Your device's own backup can include some of it. On Android, if backup is turned on for your Google account, Android backs up your artwork, the app's database and its settings (but not downloaded pages), and can restore them when you reinstall the app. On iPhone, an iCloud backup of your device can include app data in the same way. Those backups belong to your Google or Apple account, and we cannot see them.

3. Usage statistics and crash reports (optional)

Where you allow it, the app sends usage statistics and crash reports to:

  • Google Analytics for Firebase and Firebase Crashlytics, both run by Google; and
  • our own statistics service at api.mellowcolors.com, which runs on Cloudflare.

What is sent

  • which pages, brushes, colors and screens you use, and how long you spend on a page;
  • the steps you go through when you first open the app;
  • when the subscription screen is shown, and how a purchase turns out;
  • whether page downloads succeed;
  • broad time buckets: time of day, weekday or weekend, and time since you last opened the app;
  • the app version and platform (Android or iOS);
  • crash reports, with the technical details about the crash and the device that Crashlytics adds.

There are no free-text fields. Colors are sent as the names of palette colors, and your artwork itself is never sent.

How it is identified

These statistics are tied to a random install ID that the app creates, plus a session ID that changes every time the app starts (on our service) and Google's own app instance ID (on Firebase). They are never tied to your name, email or an account. The install ID stays the same until you uninstall the app or clear its data, or until a device backup restores it.

Our statistics service does not store your IP address, country or user agent with the events. Google receives your IP address with each request, as any server does, and handles it as described in Google's own documentation.

Why

To learn which pages and features people use, to find and fix crashes, and to decide what to improve. These statistics are never used for advertising: the app always switches off Google's ad storage, ad user data and ad personalization settings.

Your control

  • Where the law requires consent, statistics and crash reports are off until you agree. Section 9 lists those places.
  • Until the app knows your choice, nothing optional is sent, and Google's analytics and crash reporting components are not started.
  • You can switch them off at any time in the app under Settings, Privacy.
  • Switching them off deletes everything that has not been sent yet.

Google explains how it handles Firebase data in Privacy and Security in Firebase and in the Google Privacy Policy.

4. App Check (necessary)

When the app starts, it asks Google Play Integrity (on Android) or Apple App Attest (on iPhone), through Firebase App Check, to confirm that it is a genuine copy of Mellow Colors. This happens whatever your privacy choices are, because it protects our servers from abuse.

The resulting token goes only to our server at api.mellowcolors.com: with the page list and page downloads, and with statistics uploads if you allowed statistics. We use it only to check that requests come from the genuine app.

5. Pages, downloads and app settings (necessary)

The app gets its list of pages, page images, thumbnails and its own settings (for example, whether this version of the app is still supported) from api.mellowcolors.com, which runs on Cloudflare. Like every internet request, these carry your IP address. The page list and downloads also carry the App Check token from section 4.

When the app downloads a page, the request also carries your RevenueCat customer ID (see section 6), so our server can ask RevenueCat whether your subscription is active. Our server may remember a "yes" for up to 10 minutes so it does not have to ask again for every page. It does not log the ID.

Apart from the statistics in section 3, if you allowed them, we keep no record of who downloaded which page.

6. Purchases

Subscriptions are sold and billed by Apple (App Store) or Google (Google Play). We never see your payment details.

We use RevenueCat to manage subscriptions. RevenueCat receives the store's purchase receipts and keeps them under an anonymous RevenueCat ID that it creates. That ID is not the app's install ID, so your purchases are not linked to the usage statistics. We can see the subscription status and purchase history for that anonymous ID, never your name, email or card details. This is needed for purchases to work, so it does not depend on your privacy choices. RevenueCat's own policy is at revenuecat.com/privacy.

7. Reminders

The daily reminder is off until you turn it on, and the app asks for notification permission only then. The reminder is scheduled on your device. Nothing is sent to a server, and the app uses no push notification service.

8. Sharing your artwork

When you share or export a page, the app saves it as a PNG image and opens your device's share sheet. The picture goes only to the app you choose there. We don't receive a copy.

Mellow Colors uses our own consent tool, served from privacy.revoltbots.com. When the app starts, it asks that service which rules apply, based on the country and region Cloudflare reports for your connection:

  • EU and EEA, United Kingdom, Switzerland, Brazil, South Korea, Israel, Turkey and Quebec: we ask first. Usage statistics and crash reports stay off unless you choose "Accept all" or turn them on. "Reject all" is offered on the same screen.
  • United States, the rest of Canada, Australia, Japan and New Zealand: usage statistics and crash reports are on by default. You can turn them off at any time in the app's settings under "Your Privacy Choices". We do not sell or share personal information.
  • Everywhere else: they are on by default and no prompt is shown.

Without a connection on first start, nothing optional runs until the app can ask.

Your choice is kept on your device, with a random consent ID, for 365 days.

When you make a choice, we keep a consent record: the random consent ID, your choice, the time, the country and region, the app's name and platform, the language shown, and your IP address in encrypted form. We keep these records for 365 days as proof of consent. Where no prompt is shown, we keep one record per install of which rule applied, without your IP address. We also count installs once per year by country and region, as a number only, to know which state laws apply to us. In the app's settings, "View or delete my consent history" shows your records and lets you delete them.

If you are in the EU, EEA, UK, Switzerland, Brazil, South Korea, Israel, Turkey, Canada or New Zealand, you can ask for a copy of your data or for its deletion in the app's settings, under "Request your data". We reply by email within one month.

To stop abuse, our servers count requests per IP address for a minute at a time. That count is kept only in memory and the address is not stored.

10. Ads and tracking

Mellow Colors has no ads and contains no advertising SDK. It does not use your device's advertising ID, and we do not track you across other companies' apps or websites. That is why the app never shows Apple's tracking permission prompt or Google's ad consent message.

11. Service providers

These companies process data for the purposes above:

  • Google: Google Analytics for Firebase, Firebase Crashlytics, Firebase App Check and Play Integrity, and Google Play billing.
  • Apple: App Attest and App Store billing.
  • Cloudflare: runs api.mellowcolors.com (our statistics service and page delivery) and hosts this website.
  • RevenueCat: subscription management.

Apple and Google also handle purchases under their own terms and privacy policies. These providers may process data in the United States and in other countries.

12. How long we keep data

  • Our statistics service (Cloudflare Analytics Engine): 3 months, then the events expire.
  • Google Analytics: 2 months.
  • Firebase Crashlytics crash reports: 90 days.
  • Consent records: 365 days.
  • Subscription check on page downloads: a "yes" from RevenueCat is remembered for up to 10 minutes.
  • Request counts for abuse prevention: one minute, in memory only.
  • Data on your device: until you delete it, clear the app's data or uninstall the app.

13. Your choices and rights

  • Statistics and crash reports: switch them off at any time under Settings, Privacy. This deletes anything not yet sent.
  • Data on your device: uninstall the app or clear its data.
  • Consent records: view and delete them in the app under "View or delete my consent history".
  • Statistics already sent to our service: these are tied only to a random install ID, so we cannot single out one person's events. They expire after 3 months.

Depending on where you live, the law may give you the right to ask for a copy of your personal data, to have it corrected or deleted, and to object to or restrict how it is used. If you are in the EU, EEA, UK, Switzerland, Brazil, South Korea, Israel, Turkey, Canada or New Zealand, you can make an access or deletion request in the app's settings under "Request your data", or with the form below. The form appears here only in those places. We reply by email within one month.

If you are in the EU, EEA or UK, we rely on your consent for usage statistics and crash reports where we ask for it, and you can withdraw it at any time. Elsewhere, and for App Check, page delivery, purchases, consent records and abuse prevention, we rely on our legitimate interest in running a secure, working app, and on what is needed to provide the subscription you bought. You can also complain to the data protection authority where you live.

14. Children

Mellow Colors is not directed at children and has no features made for them. It is for people aged 13 and older (16 and older in the EU and EEA). We do not knowingly collect personal data from anyone younger. If you believe a child below those ages has used the app and data was sent, tell us at support@mellowcolors.com.

15. This website

mellowcolors.com uses no analytics and no advertising, and sets no cookies of its own. Its fonts and images are served from the site itself. It is hosted on Cloudflare, which handles your IP address to deliver the pages.

Our consent tool, served from privacy.revoltbots.com, runs on every page. It works out which privacy rules apply from the country and region Cloudflare reports for your connection, and shows a choice where the law asks for one. Because this site loads nothing optional, nothing changes on the site whichever choice you make.

  • Your choice is kept in your browser (an rb-consent cookie and local storage, with a random consent ID) for 365 days. These are necessary for the consent tool to work.
  • When you make a choice, or when the default for your region is applied, we keep a consent record: the random consent ID, your choice, the time, the country and region, your browser's user agent, the language shown, whether a Global Privacy Control signal was sent, and your IP address in encrypted form. We keep these records for 365 days as proof of consent. "View or delete my consent history" in the consent preferences shows the records for your consent ID and lets you delete them.
  • Where no banner is shown, we keep one record per browser of which rule applied: a random ID, the time, and the country, region and network provider Cloudflare reports, but not your IP address. We also count visits once per browser per year by country and region, as a number only, to know which state laws apply to us.
  • To stop abuse, our servers count requests per IP address for a minute at a time. That count is kept only in memory and the address is not stored.
  • We honor Global Privacy Control signals. We do not respond to "Do Not Track" signals, because there is no common standard for them.

The data request form in section 13 works for this website too.

16. Changes to this policy

When we change this policy, we will post the new version here with a new effective date. For significant changes, we will also tell you in the app, or ask for your consent again where the law requires it.

17. Contact

Revolt Bots LLC
General questions: support@mellowcolors.com
Data access and deletion requests: use the form in section 13 or "Request your data" in the app.