Documents
Privacy Policy
Last updated: 2026-09-20
ColorMist is published by Darya Dziamidava. Questions about this policy go to support@colormist.pl.
The short version
ColorMist works on your phone, but it can only be used with an account, and everything you put into it is copied under that account to Darya Dziamidava's side - so that a new phone, or a second one, shows the same shelf. The copy is held in the European Union, with Google (Firebase). It is seen by whoever is signed in to your account, and by Darya Dziamidava exactly as far as keeping the service running requires. Beyond that, the app downloads the catalogue of coloring books, which is the same for everybody, and, when you ask it to, sends requests to add a coloring book to that catalogue or to correct one. There is still no analytics, no advertising and no crash reporting.
The account
The app cannot be used without an account. There are three ways to sign in:
- Google. Google learns that you are signing in to ColorMist and passes the app your email address, your name and an identifier. Google receives nothing else from the app.
- Apple. The same with Apple; you may hide your address, in which case the app receives a relay address that Apple creates for you.
- Email and password. The address and the password are taken by the Firebase sign-in service. The password is stored there only as a hash, and Darya Dziamidava never sees it. The email that asks you to verify your address is sent by that service, not by Darya Dziamidava, and the address has to be verified before the app opens.
None of the three receives what you put into the app: not your coloring books, not your photographs, not your statistics. Each receives a sign-in, and nothing else.
The account holds your email address, the name the sign-in method passed on, and an identifier. Sign-in methods can be linked to one account, from the profile.
What the app keeps
Everything you enter, in a database on your device, and a copy of every row under your account on Darya Dziamidava's side:
- your coloring books, their pages and the colour codes on them
- photographs you add as covers, as page previews, or as your profile picture
- what you own on your shelf of supplies, and the palettes you build from it
- your name, if you give one, and your profile picture
- how long you have spent colouring, and which days you were active
Alongside those, Darya Dziamidava's side holds sync metadata: the identifier of the install a row came from, the time it was changed, and the version of the data schema. Phones use these to tell their own rows from each other's; they say nothing about you beyond the fact that you have a phone.
Phone settings - the theme, the language, the reminder hour - stay on the device and are not copied anywhere.
Where it is held
The copy is held by Google: rows in Cloud Firestore in the "eur3" multi-region, photographs in Cloud Storage in the "europe-west1" region. Both are in the European Union, in a Firebase project that Darya Dziamidava administers. The data travels over an encrypted connection and is stored encrypted, as Google stores it for all of its customers.
Through the app, your data can be read only by whoever is signed in to your account. Darya Dziamidava can reach it through the administrator console and uses that for one thing: keeping the service running and answering a request from you. Darya Dziamidava does not read your shelf out of curiosity, does not show it to anybody, and publishes nothing from it.
Where it goes
Under your account, as described above - and nowhere else. There is no analytics, no crash reporting, no advertising, and no third-party component that collects anything.
The app reaches the network for three things. The first is downloading the catalogue of coloring books, and the cover pictures in it, from a public address; as before, that request carries nothing but the address your device is connecting from. The second is signing in to the account and exchanging rows and photographs with it. The third is sending a catalogue request, if you have written one.
Data on the device
The copy on Darya Dziamidava's side does not replace the one on the phone: the app reads and writes its database on the device, and the exchange with the account happens in the background. Signing out leaves the database on the phone, so that signing back in is quick and works offline. "Remove my data from this phone" on the profile erases the database and the photographs from this device - and only from this device: the account and its copy remain, and the next sign-in brings them back.
Catalogue requests
You can ask for a coloring book to be added to the shared catalogue, or for what it says about one to be corrected. A request carries the title, the author, the ISBN, the page count, a photograph of the cover, your comment and the identifier of your account - plus the moment it was sent, the app version and the language. It is read by the person who maintains the catalogue, not by a program: they decide whether to accept or decline it, and you see their decision on the profile.
An accepted request becomes part of the catalogue and its history: the title, the author, the ISBN, the page count and the cover go into the catalogue that every user receives, and remain in its history after your account is deleted. Neither your name, nor your address, nor your identifier goes into the catalogue - it does not say who sent what. The request record itself is kept for as long as your account exists, so that its status can be shown to you.
Photographs
Choosing a photograph opens your phone's own picker, or the app's gallery to the extent you have allowed it access. The app receives only the pictures you pick, copies them into its own storage and, like everything else, under your account. It has no access to the rest of your library.
Notifications
Reminders are worked out on your device and raised by your phone. Nothing is sent to or from a notification server, and no identifier is registered anywhere.
How long it is kept
For as long as your account exists. When you delete it, everything that was held under it on Darya Dziamidava's side - rows and photographs - is erased by an automated job that the deletion itself starts. It cannot be brought back.
Deleting your data
The account can be deleted in the app: Profile → Delete account. The app asks you to confirm and may ask you to sign in again - the sign-in service requires that. With the account goes everything that was held under it by Darya Dziamidava, and the database on this phone.
If you no longer have the app, write to support@colormist.pl from the address the account was created with, and the deletion is done for you.
Uninstalling the app without deleting the account erases the data from the phone but not the copy held by Darya Dziamidava: that waits for the next sign-in.
Your rights
The data is held in the European Union and European data protection law applies to it. The controller is Darya Dziamidava. You can ask what is held about you, ask for it to be corrected, receive it in a portable form or have it deleted, object to the processing, and withdraw your consent - all at support@colormist.pl. If you believe your data is being handled wrongly, you have the right to complain to a data protection supervisory authority.
Sub-processors
Storage and sign-in are provided by Google - Google LLC and Google Ireland Limited - through its Firebase platform: Authentication, Cloud Firestore and Cloud Storage. Google processes the data on Darya Dziamidava's instructions and on the terms Google offers all of its customers. The data is passed to nobody else.
Children
ColorMist is not directed at children under 13. An account may only be created by somebody who is 13 or older - the same condition stands in the terms of use.
Changes
If this policy changes, the app will ask you to read it again before you carry on using it.