PaintStreak (“the app”, “we”, “us”) is a miniature-painting habit tracker operated by
Fletcher Digital Ltd. This policy explains what personal data we collect, why,
and your rights over it. We are the data controller for the purposes of UK GDPR.
What we collect
Account details — your email address, chosen display name, and time zone. We do not use passwords; you sign in with a one-time code sent to your email.
Your activity — painting sessions (duration, energy level, optional mood check-ins, notes and army/faction tags), streak history, levels and badges earned, and friend connections.
Your hobby content — saved colour palettes, paint recipes, projects, the paints you record as owning, and your paint shopping list.
Challenges — the challenges you create, are invited to or join, and your progress in them.
Photos you upload — progress photos of your miniatures, if you choose to add them, and whether you have chosen to share each one with your friends.
Captions — the short piece of text you can write on a photo you share.
Notification settings — your choices about what to be notified about, and, if you turn on push notifications, a subscription for each device (an address supplied by your browser plus its encryption keys, and the browser/device description).
Technical data — your IP address at sign-up and sign-in, and the IP address and browser/device description recorded when you upload a photo (used to prevent abuse and repeat bans, and so we can act on illegal content), plus basic device/app information.
Photos used for colour picking stay on your device. When you pull a palette out of a
photo in the Colour Finder, that image is read in your browser only — it is never uploaded to us or
stored. Only the colours you choose to keep are saved.
How we use it
To run the app — track your streak, sessions, friends, challenges, palettes, recipes and paints.
To send you sign-in codes by email.
To send notifications you have asked for — such as an evening streak reminder or challenge activity. You choose which of these you receive, and can switch them off at any time in Settings → Notifications.
To keep the community safe — every uploaded photo is automatically checked for prohibited content before it is stored, every caption is checked before anyone else can see it, and IP data helps us enforce bans and act on illegal content.
To show advertising in the mobile apps (see “Advertising” below).
Our lawful bases are performance of our contract with you (running the app) and our legitimate interests (safety, abuse prevention, and keeping the app free).
Who we share it with
We do not sell your personal data. We share limited data with service providers who process it on our behalf:
SendGrid (Twilio) — sends your sign-in and notification emails.
Cloudflare R2 — stores your uploaded photos.
Anthropic — automatically moderates uploaded photos, and the captions you write on shared photos, for prohibited content. They are processed for this check and not used to train models.
Google AdMob — serves ads in the mobile apps and may process an advertising identifier (mobile only; the web app shows no ads).
Push services — if you turn on notifications, they are delivered through the push service built into your browser or device (such as Google, Apple or Mozilla). They handle the delivery; the message content is limited to the short text shown in the notification.
Law enforcement and illegal content
We may disclose personal data to the police, the Internet Watch Foundation, or another competent
authority where we are required to by law, or where it is necessary to prevent or detect crime or to
protect someone from harm. Where we believe content is illegal we will report it and preserve the
related account records, including IP addresses, so that the authority can act on it. We may do this
without notifying the account holder, since doing so could prejudice an investigation.
What other people can see
Friends see your display name, streak figures, and a feed of your recent activity — sessions you finish (including how long you painted and any army/faction tag), streak milestones, badges earned, and challenges you join.
Challenge participants see your display name and your progress in that challenge. A challenge can include people who are friends of another participant rather than of you.
Nobody is added to a challenge without accepting an invitation first, and you can leave a challenge at any time.
Photos are private by default. A photo is shown to your accepted friends only if you turn sharing on for that individual photo — there is no setting that shares everything, and no public feed. If you write a caption on a shared photo, those friends see it too. Turning sharing off, or deleting the photo, removes it from their view.
Your notes, mood check-ins, unshared photos, paints, shopping list and recipes are not shown to other users.
Blocking someone hides you from each other in friend lists and activity feeds, ends the friendship, and stops them seeing anything you have shared.
Our staff can access account data where necessary to run the service — for example to respond to a
report, act on automated moderation, or investigate abuse. We are notified when accounts are created
or content is flagged.
Advertising
The mobile apps are free and supported by ads shown in a few non-intrusive places. On iOS we will
ask your permission before any tracking, and in the UK/EU you will be shown a consent choice for
personalised vs non-personalised ads. A one-time in-app purchase to remove ads may be offered in a
future version. The web app does not show ads.
Keeping and deleting your data
We keep your data for as long as you have an account. You can permanently delete your account at any
time from Settings → Delete my account in the app — this removes your account,
sessions, photos, palettes, recipes, projects, paints, shopping list, challenge participation,
activity history, notification settings and friend connections. Some minimal safety records (e.g. a
ban) may be retained where we have a legitimate interest in preventing repeat abuse. Sign-in codes
expire within minutes. Turning off notifications removes that device's push subscription.
Where records relate to a report of illegal content, we may need to keep them after your account is
deleted, for as long as we are required to by law or asked to by an authority investigating it. This is
a narrow exception to the deletion above and applies only to those records.
Photos that fail our automated checks are never stored. They are refused at the point of upload and
discarded, so a rejected photo does not reach our storage or our backups. A caption that fails is
likewise never saved. We keep a record that a check failed, and why, against the account — but not the
content that failed it.
Your rights
Under UK GDPR you have the right to access, correct, delete, or port your data, and to object to or
restrict certain processing. To exercise any of these, email
[email protected]. You also have the right to complain to
the UK Information Commissioner’s Office (ico.org.uk).
Children
PaintStreak is not directed at children under 13, and we do not knowingly collect their data.
Changes
We may update this policy; we’ll revise the date above and, for significant changes, notify you in the app.
Contact
Fletcher Digital Ltd — [email protected]
Fletcher Digital Ltd, 16 Melville Street, Suite 8, Falkirk, FK1 1HZ, United Kingdom