Privacy Policy

Effective date: September 24, 2026

This Privacy Policy explains what the Zupzi Art app for iPhone and iPad collects, what stays on your device, what goes to our servers and for how long, and how you delete it. It is written for the parent or legal guardian who holds the account.

Who we are

Zupzi Art is made by Zupzi, the same team behind the Zupzi Play app (“Zupzi”, “we”, “us”). Zupzi is operated in the United States. You can reach a person at support@zupzi.io.

The short version

• Your artwork is yours, and it lives with you. Drawings you capture or make are stored on your device and in your own iCloud account, not on our servers. They stay there if you stop using Zupzi Art or delete your Zupzi account, and you can export the original file of any artwork, or all of them at once, at any time.
• The child’s voice never leaves the device. Speech is turned into text on the device, and recordings of a child telling the story of a drawing are kept with the drawing in your own iCloud.
• AI creations are made on our own servers, only when you ask for one. What we receive is kept only until the creation is made, and the result is deleted 24 hours after it is made.
• No ads, no tracking, nothing sold. The app has no advertising, no third-party analytics or tracking software, and no advertising identifiers. We never sell or rent personal information, and we never use your drawings, photos or requests to train AI models.

What we collect

Your Zupzi account

Zupzi Art uses the same Zupzi account as Zupzi Play. You sign in with Apple, with Google, or with an e-mail address and password. We receive:

• Your e-mail address (with Sign in with Apple, this can be Apple’s private relay address).
• Your name, if Apple or Google shares it when you first sign in, or if you type one.
• An account ID that our sign-in system creates for you.

We use these to run your account, keep your family together, answer you when you write to us, and make sure each AI creation goes back to the family that asked for it.

Your family and your children’s profiles

Your Zupzi family is shared between Zupzi Art and Zupzi Play: the same children appear in both apps. When you create a family or add or edit a child in Zupzi Art, the following is sent to our server and kept with your family:

• the family name and, if you give it, your first name;
• each child’s first name or nickname;
• each child’s birthday, only if you add it (the app uses it to show the child’s age in the book; you can skip it);
• each child’s portrait: either a picture from our built-in gallery, or a photo you choose, which is kept in private storage that only your family can reach;
• a four-digit PIN the child uses to open their side of the app. We do not store the digits, only a salted, one-way hash;
• the date and time you confirmed you are the child’s parent or legal guardian and agreed to this policy;
• the devices you paired for your children, so you can turn any of them off later.

A copy of each child’s name, birthday and portrait is also kept in the app on your device and in your iCloud, so the app works offline.

Messages you send us

If you use Report a problem in the app, we receive what you write, your account’s e-mail address (so we can reply), the app version, the iOS or iPadOS version and the device model, plus your family’s internal ID. The form shows your account e-mail before you send it. It never includes your children’s names or IDs. The message is delivered to our support inbox by e-mail and is used only to answer you and fix problems. If you e-mail support@zupzi.io directly, we receive whatever you choose to include.

Notifications

When you ask for an AI creation, the app can ask for permission to send you a notification when it is ready. If you allow it, your device’s notification token travels with that request to our servers, which use it once, through Apple’s Push Notification service, to tell you the creation is ready. We do not use it for anything else. If you do not allow notifications, nothing breaks: the creation waits for you in the app.

What stays on your device (and in your own iCloud)

These things are processed by the app on your iPhone or iPad, using Apple’s on-device technology. We never receive them.

• Capturing a drawing with the camera: finding the paper, straightening it, removing shadows and correcting colors all happen on the device. Reading a title written on the drawing (text recognition) happens on the device too.
• “Find drawings in my photos”: the app looks through your photo library on the device to suggest photos of drawings. Your photo library is never uploaded.
• Speech: when a child speaks an idea in “Imagine it”, the recording is turned into text on the device and then deleted. The child’s voice is never sent to us or to anyone else.
• Story recordings: when a child records the story of a drawing, the recording is saved with that drawing on your device and in your iCloud. We do not receive it. It is also used on the device to make the “Bring it to life” video, which is created on your device and only leaves it if you share it.
• “Bring it to life” with a ready-made scene happens entirely on the device.
• The book: the printable PDF of the year’s book is made on the device. It only leaves if you export or share it.
• Face ID or your device passcode, used so only a grown-up can leave Kid Mode, are checked by iOS. The app never sees your face data or passcode.
• Siri: if you use the app’s Siri shortcuts, your children’s first names are offered to Siri on your device so you can say, for example, “Add a drawing for Mia in Zupzi Art”. Siri is Apple’s service and follows Apple’s privacy policy.

Your artwork and iCloud

Your children’s artwork (the photo or drawing, its title and date, and any story recording) is stored by the app on your device and synced through Apple’s iCloud to your own private iCloud account. Zupzi cannot open your iCloud data. If iCloud is not available on the device, the artwork is kept on that device only (the Family tab says which). iCloud storage is provided by Apple under Apple’s terms and counts toward your iCloud storage.

Results of AI creations (a restyled picture, a 3D toy, a magic scene, an “Imagine it” page) are saved in the app on the device that asked for them. A coloring page your child paints and saves becomes an artwork like any other and syncs to your iCloud.

AI features: what leaves the device, and what happens to it

Some creations are too big for a phone, so they are made on our own servers (hardware we operate ourselves, not a third-party AI service). This only happens when someone taps to create one. For every feature below:

• what we receive is used only to make that creation;
• it is not used to train any AI model, not sold, not shared for advertising and not used to track anyone;
• the request is tied to your family’s internal ID (so the result goes back to you and daily limits can be applied), never to a child’s name;
• the picture or text you sent is deleted once the creation is made; the result is kept for 24 hours so your device can collect it, and is then deleted automatically;
• our server logs record only the type of creation, a shortened family ID and how long it took, never the picture or the words of the request.

If our servers are temporarily unavailable, the request (including the drawing, if the feature needs it) waits on your device and is sent when the servers are back, while the app is open.

Bring it to life: Magic scene

The drawing does not leave the device. The app writes a short description of a place (for example, “a cozy dinosaur valley with ferns”) on the device, and only that text is sent to our servers, which paint a background. Your child’s drawing is placed on top of it on the device.

Transform it (styles)

The drawing you choose is sent as a picture to our servers, which redraw it in the style you picked (such as Pixel Art, Plush Toy, Cartoon, Claymation or 3D Toy).

Make it 3D

The “3D Toy” version of the drawing is sent to our servers, which turn it into a 3D model that you can view, and place on your table in augmented reality, on your device.

Imagine it

A child says or types an idea for a coloring page. The voice is turned into text on the device (see above). Before anything is sent, the request is checked for words that are not suitable and, on devices with Apple Intelligence, rewritten on the device as one short English sentence that leaves out names of people, schools, streets and anything personal. Only that cleaned-up text is sent to our servers, which check it again and draw the page.

Photo to color

A photo taken with the camera, or one photo chosen from your library, becomes a coloring page. Before it leaves the device:

• the photo is reduced to at most 1024 pixels on its longest side and re-drawn without any metadata (no location, no date, no device information);
• if Apple’s Sensitive Content protection is turned on for the device (it is on by default for child accounts in Family Sharing), Apple’s on-device check looks at it first, and a photo it flags is never sent.

On our servers, before the photo is accepted or stored, an automatic nudity classifier running on our own hardware checks it. If it fails the check, or if the check cannot run, the photo is refused and deleted immediately. An accepted photo is kept only until the page is made, then deleted. The coloring page is kept for 24 hours and then deleted. In Kid Mode on a grown-up’s device, choosing a photo from the library needs Face ID or the device passcode.

Limits and safety

Each family has a daily limit on AI creations, and a family can have a few creations in progress at once. Requests with unsuitable words are refused on the device and again on our servers. No automatic filter is perfect: if something inappropriate ever gets through, please use Report a problem or write to support@zupzi.io.

Family sharing through iCloud

Zupzi Art uses Apple’s iCloud (CloudKit) sharing for two things. In both, the data goes between Apple accounts through Apple’s iCloud; it does not pass through or get stored on Zupzi’s servers.

• The family album. Nothing is shared automatically. You choose each artwork to add (“Share with family”), and only the people you invite can see it. For each shared artwork, the album holds the picture, its title, the child’s first name and the date. Story recordings are not shared. You can take any single artwork out of the album (open it and tap Remove from family album), or stop sharing the whole album through the iCloud sharing controls.
• Drawings from a child’s own iPad. If you invite your child’s device, drawings made there are delivered through a private iCloud space to your collection, and removed from that space once your device has received them. They are not added to the family album unless you choose to.

Children’s privacy

Zupzi Art is used by families with children, including children under 13. We follow the Children’s Online Privacy Protection Act (COPPA) in the United States and article 14 of Brazil’s LGPD.

• Children never create an account. The account holder is a parent or legal guardian, who must be at least 18.
• Only a parent or guardian creates a child profile. When you add a child, you set the child’s PIN and confirm that you are the child’s parent or legal guardian and agree to this policy for the information we keep about that child. We record when you agreed. Each Zupzi app asks for its own consent: agreeing in Zupzi Play does not count for Zupzi Art, or the other way around. If your child’s profile was created in another Zupzi app, Zupzi Art asks you once, on the child’s card in the Family tab, before it makes any AI creation for that child.
• What we hold about a child is listed above: first name or nickname, optional birthday, portrait, PIN hash, and the pictures or text sent for AI creations (kept only as described in the AI section).
• A child’s own device is connected only with a six-digit code that a parent creates in the app. On that device the child picks their profile and types their PIN, which is checked on the device.
• No ads, no chat, no public sharing. Children cannot message anyone through Zupzi Art, and their artwork is only shared with the people a parent invites to the family album.
• Your rights as a parent. You can review your child’s profile in the app, change it, and delete it, and you can withdraw consent at any time by removing the child or by deleting your account. To remove a child, open the Family tab, tap the … next to the child and choose Remove from family (or do it in Zupzi Play, under Family). Their profile, PIN and Zupzi Play data are deleted from our servers for both apps; their artwork stays in your iCloud until you delete it. You can also ask us to review or delete your child’s information at support@zupzi.io.

How long we keep things, and how to delete them

Deleting your account

In the app, go to the Family tab, then Your Zupzi account, then Delete account. The app asks you to type a word to confirm. Because the account is shared with Zupzi Play:

• your Zupzi sign-in is deleted; if you signed in with Apple, we also ask Apple to revoke Zupzi Art’s access;
• if you are the only grown-up in your family, the family and its Zupzi Play data are deleted too, including your children’s profiles and portrait photos; if another grown-up shares the family, only your own sign-in is removed;
• your artwork is not deleted, because it lives in your iCloud, not in the account. Export any originals you want to keep as files before or after deleting.

Deleting the account cannot be undone.

Deleting artwork from iCloud

Artwork in your iCloud is yours to delete. In the app, open an artwork and tap Delete drawing: if it is in the family album it is taken out of the album first, then it is deleted from the device and from your iCloud on all your devices, together with its story recording and the creations saved for it on that device. Deleting a child who is only in your iCloud deletes all of that child’s artwork. You can also remove all of the app’s data from iCloud in your device’s Settings, under your Apple Account, iCloud, and the storage management screen, where Zupzi Art is listed. Deleting the app removes the copies stored only on that device.

Who processes data for us

These companies store or move data on our behalf, under their own security commitments. None of them may use it for anything else.

The narrator voice you hear in the app is made of recordings created once, before release, and shipped inside the app. No user data is sent to make them.

We may also disclose information when the law requires it.

Security

Everything travels over encrypted connections (HTTPS). Access to our AI servers needs a short-lived ticket that our account server signs for your family, and a creation can only be collected with a ticket for the same family. Portrait photos sit in private storage behind short-lived links. PINs are stored only as one-way hashes. A child’s paired device holds its own credential that you can turn off. No system is perfect; if we ever learn of a breach that affects you, we will tell you.

International users

Zupzi is operated in the United States. If you use Zupzi Art from another country, the information described here is transferred to the United States to be processed. Residents of Brazil have the rights of the LGPD (access, correction, portability, deletion, and information about sharing) and may contact the ANPD. Residents of the European Economic Area and the United Kingdom have the equivalent GDPR rights and may contact their supervisory authority. To use any of these rights, write to support@zupzi.io.

This website

This website describes the app. It has no sign-in, no advertising and no analytics or tracking cookies. Our hosting provider keeps standard technical logs to run and protect the site.

Changes to this policy

If this policy changes in a way that matters to you, we will tell you in the app or by e-mail before the change takes effect. The date at the top is always the current version.

Contact

Write to support@zupzi.io. A person reads it. We answer privacy requests within 30 days, and usually much sooner.