Privacy Policy

Effective 4 October 2026. Last updated 4 October 2026.

Contents

1. Who we are
2. What this policy covers
3. What the app never collects
4. Purchases: the only data that leaves the device
5. The app stores
6. Drawings and settings on the device
7. When you email us
8. This website
9. Children's privacy
10. Who we share information with
11. International transfers
12. How long we keep it
13. Your rights and choices
14. Security
15. Changes to this policy
16. Contact

1. Who we are

The Pastelings app (the "app") and this website are published by Velassi (Tatyana Dovletova) ("Velassi", "we", "us"). Velassi decides how the information described here is used and is the "controller" of it under data protection laws such as the EU and UK GDPR. You can reach us at velassi.co@gmail.com.

2. What this policy covers

This policy covers the Pastelings app on Amazon Fire tablets and Android devices, the website pastelings.velassi.org, and emails you send us. It does not cover the app stores, RevenueCat or any other company's service. They have their own privacy policies, linked below, and they are responsible for what they do with information under them.

3. What the app never collects

• No account, login, name, email address, phone number, postal address or date of birth.
• No photos, camera, microphone or recordings. The app only plays sounds; it never listens.
• No location, contacts, messages, files outside the app, or browsing history.
• No advertising ID, no ads, no ad networks, no analytics, no tracking, no profiling and no social features.
• No chat or sharing with other people. Nothing a child makes is sent to us or published.

4. Purchases: the only data that leaves the device

The app is free to download. A grown-up can buy one optional, one-time in-app purchase, "Unlock everything". To show the right price, to know whether the unlock was bought, and to restore it, the app connects to the app store it came from (Amazon Appstore or Google Play) and to RevenueCat, Inc., a company that checks app purchases on our behalf. This happens when the app checks whether the unlock was bought (for example after it starts) and when a grown-up opens the purchase screen, buys or restores.

RevenueCat receives:

• a random identifier the app creates on the device. It is not a device or advertising identifier, and it is not linked to a name, email or store account by us;
• the purchase record from the store: the product, price, currency, date, and the store's transaction or receipt reference;
• technical details needed to answer correctly: the app version, the operating system and its version, the device language, and the store and its country;
• the internet (IP) address the device connects from, which every internet connection reveals. It may be used to estimate the country, for example for prices and taxes, and is not used by us to identify anyone.

We use this only to provide the purchase (check, unlock and restore), to prevent fraud and abuse, to keep the records the law and the stores require, and to see sales totals. We do not use it for advertising or to build profiles. The app does not switch on any optional RevenueCat feature that collects advertising or device identifiers, or that sends data to other companies.

Legal bases, where the GDPR applies: providing the purchase you asked for (contract), and our legitimate interests in preventing fraud and keeping accurate records. RevenueCat's privacy policy: revenuecat.com/privacy.

If the device is offline, the app still works for everything that is already unlocked or free; it simply cannot check or make a purchase.

5. The app stores

Downloads and payments happen in the Amazon Appstore or Google Play, under their own terms and privacy policies. Your payment card and billing details go to them, never to us. On a child profile, the store may ask a grown-up to approve a purchase. The stores may give us limited information about sales, such as an order reference, date, country and amount, and statistics they collect themselves, such as download numbers and crash reports, under their own policies. We use it only to run, support and fix the app.

Amazon: amazon.com/privacy. Google: policies.google.com/privacy.

6. Drawings and settings on the device

Pictures your child colors, progress, and settings such as sound, music, voice, language and calm mode are saved only in the app's own storage on the device. We never receive them. The app does not take part in Android's cloud backup, so this data is not copied to the cloud by the app. To delete the pictures, open Grown-ups and choose "Reset art". Uninstalling the app deletes all of its data from the device.

7. When you email us

If you write to us, we receive your email address and what you write, and we use them only to answer you. Our mailbox is provided by Google (Gmail). Please do not send us a child's name, photo or other personal details; we never need them to help you. We delete support emails once they are no longer needed, and in any case within two years of the last message.

8. This website

pastelings.velassi.org uses no cookies, no analytics, no ads and no third-party scripts or fonts. Like most web servers, ours records technical logs (IP address, time, page requested and browser type) to keep the site working and secure. These logs are deleted automatically after about two weeks. The site is hosted on a server rented from OVHcloud in the European Union.

9. Children's privacy

Pastelings is made for children aged 2 to 7, to be used with a parent's or guardian's supervision. We do not knowingly collect personal information from children, and the app has no way for a child to enter any. The random identifier described in section 4 is used only to support the app's internal operations (providing and restoring the purchase) as allowed under the US Children's Online Privacy Protection Act (COPPA) and similar laws, and never for advertising, profiling or contacting anyone. Purchases, settings and outside links sit behind a grown-up check. If you believe we hold personal information about your child, email us and we will delete it.

10. Who we share information with

We do not sell, rent or trade personal information, and we do not share it for advertising. Information is handled only by:

• RevenueCat, to check and restore purchases (section 4);
• Amazon and Google, as the app stores (section 5), and Google as our email provider (section 7);
• OVHcloud, which hosts this website (section 8);
• authorities or others, when the law requires it, or when needed to protect rights, safety or property, or to respond to legal claims;
• a successor, if the app is ever transferred to another publisher, who must then honor this policy.

11. International transfers

RevenueCat, Amazon and Google may process information in the United States and other countries whose laws may differ from yours. Where the law requires it, these providers rely on safeguards such as the European Commission's standard contractual clauses.

12. How long we keep it

• Purchase records at RevenueCat: for as long as the app is offered and as long as needed for the purchase to keep working, for accounting, tax and legal duties, and for handling disputes. After that they are deleted or anonymized.
• Support emails: as described in section 7.
• Website logs: about two weeks.
• Drawings and settings: on your device only, until you reset them or uninstall the app.

13. Your rights and choices

Depending on where you live, you may have the right to ask for access to, correction of, deletion of, or a copy of your personal information, to object to or restrict its use, and to complain to your local data protection authority. Residents of California and other US states have similar rights; we do not sell or share personal information as those laws define it.

To make a request, email velassi.co@gmail.com. Because the app does not know who you are, please include your store order number so we can find the purchase record. We may need to confirm the request comes from you. We answer within 30 days. Deleting the purchase record can mean a later restore no longer works; the store's own record of your purchase is not affected.

14. Security

The app talks to the stores and RevenueCat over encrypted connections, and we keep as little information as possible. No method of sending or storing data is completely secure, so we cannot guarantee absolute security.

15. Changes to this policy

If the app or the law changes, we will update this policy and the date at the top of this page. If a change significantly affects how information is handled, we will also say so in the app's update notes. We will ask for consent where the law requires it.

16. Contact

Velassi, velassi.co@gmail.com