YL—001 · Kawaii Diorama
Privacy Policy
Last updated 2 September 2026
Kawaii Diorama — Privacy Policy
Last updated: 1 September 2026
Kawaii Diorama is a coloring-page app for children. We have deliberately built it to collect as little as possible: there are no accounts, no advertising, no analytics, and no tracking of your child across apps or websites. This policy explains the small amount of information the app does send, and why.
Who we are
Kawaii Diorama is published by IOTech Solutions LTD, trading as YeetLabz. If you have any question about privacy, or want information deleted, email us at yeetlabz@gmail.com and we will respond within 30 days.
What the app does not do
- No sign-up, login, or account of any kind.
- No advertising, and no advertising identifiers. The app does not request the Android Advertising ID (AAID).
- No analytics or behavioural profiling. We do not measure how your child uses the app.
- No location data, contacts, microphone, or camera access.
- We never ask a child for their name, age, email address, photograph, or any other personal detail.
- We do not sell or rent information to anyone, and we do not use it for advertising.
What the app sends, and why
When your child taps "Make my picture", the app sends a short request to our server, which asks an image-generation service to draw the picture. Here is everything that request involves.
| Information | Why it is needed | Where it goes |
|---|---|---|
| The friend and adventure chosen (for example "kitten" and "baking cookies") | To draw the requested picture | Our server, then the image-generation provider |
| A random installation number created by the app | To count how many pictures have been made today, so the daily limit works and the service cannot be abused | Our database |
| An unlock code, if a grown-up has entered one | To check what the code unlocks | Our database |
| A Google Play purchase token, if a subscription is active | To confirm the subscription is genuine and still running, before unlocking subscriber features | Our database, and Google Play |
| A Firebase installation ID and an app-integrity check from Google Play | To confirm the request comes from a genuine, untampered copy of the app, and to deliver settings such as the list of characters | Google (Firebase) |
| Your device's IP address | An unavoidable part of any internet request. It is used only to deliver the response and is held briefly by our hosting provider. We do not use it to determine location. | Google Cloud, and the image provider |
The random installation number is created by the app itself. It is not your device's advertising ID, serial number, phone number, IMEI, MAC address, or any other hardware identifier — the app never reads those. It cannot be used to identify a person, and it is not linked to any name or account. It is reset if the app is reinstalled or its data is cleared.
Custom stories
The app can let a grown-up type their own friend and adventure instead of picking cards. This is switched off by default and only becomes available with an unlock code from us. When it is used, the typed text is sent to the image provider in the same way as a card choice. Please do not type personal information into these boxes.
Pictures your child makes
Finished pictures are saved on the device only. We never receive them, with one exception, described next. If your child saves a picture to the photo gallery, prints it, or shares it using the Android share button, that is handled by your device and the app you choose to share with — we are not involved.
Reporting a picture
Google Play requires apps that generate pictures with AI to give users a way to report anything upsetting or inappropriate. If the flag button is used and the report is confirmed, we receive:
- a copy of that one picture,
- which friend and adventure were chosen,
- which drawing model produced it, the app version, and the time.
We use reports only to find and fix problems with the drawings. Reports do not include the installation number, and nothing in a report identifies your child. The reported picture is also removed from the app on the device.
Children and the law
This app is intended for children, and we design it to comply with the U.S. Children's Online Privacy Protection Act (COPPA), the UK GDPR and the UK Age Appropriate Design Code, and the EU GDPR.
We do not collect personal information from children for advertising, profiling, or any commercial purpose. The installation number and integrity checks described above are used strictly to keep the service running safely and fairly — what COPPA calls "support for the internal operations of the service". Grown-up settings, unlock codes, and any purchase are placed behind a question that a young child is not expected to answer.
Parents and guardians may ask us what information relates to their child's installation, ask us to delete it, and refuse any further collection, by emailing yeetlabz@gmail.com. As we hold no names or accounts, please tell us roughly when the app was used so we can locate the records.
Who else is involved
- Google Firebase and Google Cloud host our server, database, and file storage, and provide the app-integrity check. See Firebase privacy information.
- OpenRouter passes the drawing request to the image-generation model that produces the picture. It receives the description of the picture to be drawn, not any information about your child.
These providers act on our instructions to deliver the app. They are not permitted to use the information for their own purposes.
Where information is held
Our server and database are located in the United Kingdom (London). Reported pictures are stored in the United States. Where information is transferred outside the UK or the European Economic Area, it is protected by the safeguards our providers maintain, including the UK Extension to the EU–U.S. Data Privacy Framework.
Subscriptions
Kawaii Diorama Plus is an optional subscription, bought through Google Play. It sits behind the grown-up question, so a child cannot reach it on their own.
We never see your payment details. The purchase is handled entirely by Google Play — we do not receive your card number, name, billing address, or email, and we could not charge you even if we wanted to.
When a subscription is active, the app sends us the purchase token Google Play issued for it. We check that token with Google to confirm the subscription is genuine and still running, then remember the answer for up to 12 hours so we don't have to ask again on every picture. The token is stored in a scrambled (hashed) form, alongside when the subscription expires and the random installation numbers that have used it — at most five, so one subscription covers a household rather than being shared endlessly.
A purchase token identifies a purchase, not a person. It carries no name, email address, or payment information.
To cancel, use the Play Store under Subscriptions, or the "Manage subscription" link in the app's grown-up settings.
How to delete your data
Email us at yeetlabz@gmail.com with "Delete my data" in the subject line. We hold no names or accounts, so please tell us roughly when the app was used, and include your unlock code or the email address used for the subscription if there was one — that is how we locate the records.
We will delete:
- any pictures you reported to us, and the report records
- the daily picture counts for your installation
- any subscription record held for your purchase
We will confirm within 30 days.
On the device, uninstalling Kawaii Diorama removes everything it holds, including every picture your child has made — those are stored only on the device and never sent to us. Clearing the app's data in Android settings has the same effect and also resets the random installation number.
Most of this deletes itself in any case, on the schedule below.
How long we keep it
- Daily picture counts: deleted automatically after 7 days. They only exist to count the current day's pictures.
- Subscription records: deleted automatically once unused for 60 days. If you come back, the record is simply rebuilt from Google Play.
- Reported pictures: deleted automatically after 12 months. A nightly job removes anything past that, so nothing is kept indefinitely.
- Pictures your child makes: kept on the device until deleted in the app, or the app is uninstalled. The app keeps the most recent pictures only.
Security
All communication between the app and our server uses encrypted connections (HTTPS/TLS). Our database and file storage are private and cannot be read by the app or by anyone on the internet; only our server can access them. Requests are accepted only from genuine, untampered copies of the app.
Your rights
Depending on where you live, you may have the right to ask what information we hold, to have it corrected or deleted, and to object to how it is used. Email yeetlabz@gmail.com and we will help. If you are in the UK and unhappy with our response, you may complain to the Information Commissioner's Office at ico.org.uk.
Changes to this policy
If we change how the app handles information, we will update this page and change the date at the top. Significant changes will also be mentioned in the app's "What's new" notes on Google Play.
Kawaii Diorama · Contact: yeetlabz@gmail.com