YL—001 · Kawaii Diorama
Privacy Policy
Last updated 31 August 2026
Kawaii Diorama — Privacy Policy
Last updated: 31 August 2026
Kawaii Diorama is a coloring-page app for children. We have deliberately built it to collect as little as possible: there are no accounts, no advertising, no analytics, and no tracking of your child across apps or websites. This policy explains the small amount of information the app does send, and why.
Who we are
Kawaii Diorama is published by IOTech Solutions LTD, trading as YeetLabz. If you have any question about privacy, or want information deleted, email us at yeetlabz@gmail.com and we will respond within 30 days.
What the app does not do
- No sign-up, login, or account of any kind.
- No advertising, and no advertising identifiers. The app does not request the Android Advertising ID (AAID).
- No analytics or behavioural profiling. We do not measure how your child uses the app.
- No location data, contacts, microphone, or camera access.
- We never ask a child for their name, age, email address, photograph, or any other personal detail.
- We do not sell or rent information to anyone, and we do not use it for advertising.
What the app sends, and why
When your child taps "Make my picture", the app sends a short request to our server, which asks an image-generation service to draw the picture. Here is everything that request involves.
| Information | Why it is needed | Where it goes |
|---|---|---|
| The friend and adventure chosen (for example "kitten" and "baking cookies") | To draw the requested picture | Our server, then the image-generation provider |
| A random installation number created by the app | To count how many pictures have been made today, so the daily limit works and the service cannot be abused | Our database |
| An unlock code, if a grown-up has entered one | To check what the code unlocks | Our database |
| A Firebase installation ID and an app-integrity check from Google Play | To confirm the request comes from a genuine, untampered copy of the app, and to deliver settings such as the list of characters | Google (Firebase) |
| Your device's IP address | An unavoidable part of any internet request. It is used only to deliver the response and is held briefly by our hosting provider. We do not use it to determine location. | Google Cloud, and the image provider |
The random installation number is created by the app itself. It is not your device's advertising ID, serial number, phone number, IMEI, MAC address, or any other hardware identifier — the app never reads those. It cannot be used to identify a person, and it is not linked to any name or account. It is reset if the app is reinstalled or its data is cleared.
Custom stories
The app can let a grown-up type their own friend and adventure instead of picking cards. This is switched off by default and only becomes available with an unlock code from us. When it is used, the typed text is sent to the image provider in the same way as a card choice. Please do not type personal information into these boxes.
Pictures your child makes
Finished pictures are saved on the device only. We never receive them, with one exception, described next. If your child saves a picture to the photo gallery, prints it, or shares it using the Android share button, that is handled by your device and the app you choose to share with — we are not involved.
Reporting a picture
Google Play requires apps that generate pictures with AI to give users a way to report anything upsetting or inappropriate. If the flag button is used and the report is confirmed, we receive:
- a copy of that one picture,
- which friend and adventure were chosen,
- which drawing model produced it, the app version, and the time.
We use reports only to find and fix problems with the drawings. Reports do not include the installation number, and nothing in a report identifies your child. The reported picture is also removed from the app on the device.
Children and the law
This app is intended for children, and we design it to comply with the U.S. Children's Online Privacy Protection Act (COPPA), the UK GDPR and the UK Age Appropriate Design Code, and the EU GDPR.
We do not collect personal information from children for advertising, profiling, or any commercial purpose. The installation number and integrity checks described above are used strictly to keep the service running safely and fairly — what COPPA calls "support for the internal operations of the service". Grown-up settings, unlock codes, and any purchase are placed behind a question that a young child is not expected to answer.
Parents and guardians may ask us what information relates to their child's installation, ask us to delete it, and refuse any further collection, by emailing yeetlabz@gmail.com. As we hold no names or accounts, please tell us roughly when the app was used so we can locate the records.
Who else is involved
- Google Firebase and Google Cloud host our server, database, and file storage, and provide the app-integrity check. See Firebase privacy information.
- OpenRouter passes the drawing request to the image-generation model that produces the picture. It receives the description of the picture to be drawn, not any information about your child.
These providers act on our instructions to deliver the app. They are not permitted to use the information for their own purposes.
Where information is held
Our server and database are located in the United Kingdom (London). Reported pictures are stored in the United States. Where information is transferred outside the UK or the European Economic Area, it is protected by the safeguards our providers maintain, including the UK Extension to the EU–U.S. Data Privacy Framework.
How long we keep it
- Daily picture counts: deleted automatically after 7 days. They only exist to count the current day's pictures.
- Reported pictures: deleted automatically after 12 months. A nightly job removes anything past that, so nothing is kept indefinitely.
- Pictures your child makes: kept on the device until deleted in the app, or the app is uninstalled. The app keeps the most recent pictures only.
Security
All communication between the app and our server uses encrypted connections (HTTPS/TLS). Our database and file storage are private and cannot be read by the app or by anyone on the internet; only our server can access them. Requests are accepted only from genuine, untampered copies of the app.
Your rights
Depending on where you live, you may have the right to ask what information we hold, to have it corrected or deleted, and to object to how it is used. Email yeetlabz@gmail.com and we will help. If you are in the UK and unhappy with our response, you may complain to the Information Commissioner's Office at ico.org.uk.
Changes to this policy
If we change how the app handles information, we will update this page and change the date at the top. Significant changes will also be mentioned in the app's "What's new" notes on Google Play.
Kawaii Diorama · Contact: yeetlabz@gmail.com