Privacy Policy

Android gives every app a private storage area that no other app can read. Barvanka writes four kinds of thing into it:

• Your gallery — a record of each finished piece: which pattern it was, which colours you put where, and when it was finished. Enough for the app to draw the picture again, which is how revisiting one works.
• The piece you are in the middle of, so that closing the app half-coloured resumes rather than restarts.
• Your palette and your settings — the colours currently in use, the zoom you prefer, whether the "next colour" nudge is on.
• The interface language, Slovenian or English.

Since the patterns are generated rather than downloaded, none of this is a picture file arriving from anywhere. It is a short recipe the app can re-run. It stays in the app's own storage, it is copied into a device backup only if you have Android's backup switched on — in which case Google holds that backup under Google's terms and we never see it — and uninstalling the app takes all of it away.

• No sign-in and no profile. The app has nowhere to put a name, an email address or a telephone number, because it never asks for one.
• No advertising and no advertising identifier. There is no advertising code in the package at all, which is why the Advertising ID is never looked at and why no auction anywhere is told that somebody is colouring.
• No analytics, no crash reporting. Nothing counts your visits, nothing records which screen you opened, no crash is reported home, and there is no remote dial we could turn from this end.
• No permissions to speak of. No location, contacts, camera, microphone, photos or files; your finished pieces are not written to the phone's photo library unless you explicitly export one yourself.
• No sharing, no feed, no likes. The gallery is yours alone. Nobody else can see it, including us, and there is nothing in the app that would let them.

Those describe the build published today. The last card on this page explains the order in which any of them would have to be withdrawn if that ever changed.

A piece can be removed from the gallery where it sits. For everything at once, Android's own app settings will clear Barvanka's storage while leaving the app installed, which returns it to its first run — an empty gallery, no piece in progress, default settings.

Neither route needs anything from us, and neither can be undone, because no second copy of any of it was ever made anywhere. If a gallery matters to you, export the pieces you want to keep before you clear it.

A controller has to be named under Article 13 no matter how little it turns out to handle, so: AK Ekspert d.o.o., Hardek 44A, 2270 Ormož, Slovenia, trading as Ekspert, with Primož Kukovec answerable for it.

What sits under that name is one mailbox. The app passes us nothing to control, so there is no further processing hiding behind the company. Getting Barvanka from Google Play, or letting it update, is your own arrangement with Google, under Google's terms, and it would be identical whoever had published the app.

Mail arrives at barva@scsystem.store. Your address, your message and anything attached stay with us while the matter is live and for a short while after it closes, in case it reopens, and are then deleted. The ground is legitimate interests under Article 6(1)(f): a small publisher answering post about its own app. It is read, replied to, and used for nothing else — no list, no sharing, no marketing. Ask for a thread to go sooner and it goes.

One practical note. If a generated pattern came out wrong and you want to show us, a screenshot is the fastest way — but it is a picture from your gallery, so send only the one you mean to send, and remember that it then sits in our inbox under the retention above rather than only on your phone.

The General Data Protection Regulation applies in Slovenia alongside the national Zakon o varstvu osebnih podatkov (ZVOP-2). Almost nobody writes to a company asking to exercise Article 15. People write asking for one of three things, so here they are in the words they are usually asked in.

"Show me what you have about me."

That is the right of access, with a copy, and in a portable form if you want to take it elsewhere — Articles 15 and 20. If you have written to us before, you will get the correspondence filed under your address, with dates. If you have not, you will get a short letter saying there is nothing, which is the complete answer and not a brush-off: there is no account, no identifier and no gallery on our side to look you up in.

"Delete it."

Erasure, Article 17, together with restriction and objection under Articles 18 and 21. Any email thread goes, on request, unless a complaint is still running — in which case we say so and when it will go. Your gallery is not ours to delete and never was; the card above explains how you do that, in a few seconds, without asking anybody.

"Explain how this actually works."

Not a right under any article, and the request we would rather have. Ask and you get a plain answer about what the app writes, where it writes it, and why — in as much detail as you like, without the legal vocabulary. Correcting something we have got wrong is Article 16, and that applies to this page as much as to an inbox.

None of the three costs anything, none needs a particular form of words, and all three are answered inside a month. Should an answer of ours not satisfy you, Slovenia's regulator is Informacijski pooblaščenec, the Information Commissioner, reachable at ip-rs.si; a complaint may be lodged there straight away, with nothing owed to us first. Readers elsewhere in the EEA have the same recourse through their own national authority.

Nothing in Barvanka reaches another person: there is no messaging, no publishing, no comment field, no link that leaves the app and nothing to buy. Because the app gathers no data from anybody at all, the question of a child's age never arises and no age gate or parental consent flow is simulated here. A child colouring in it is in precisely the position an adult is in — everything stays on the handset, so there is nothing for a grown-up to have to supervise.

The date under the title names the edition in force. Where a release would make any statement above untrue — anything collected, anything transmitted, a component added, a permission requested — the order does not vary: this page is corrected first, the Data safety declaration in the Play Console is corrected in the same sitting, and only then does the release reach anybody. A sentence tidied for clarity is not such a change and brings nothing with it but a newer date.

Superseded editions are kept. Ask at the address below and the earlier text is sent to you, which is the only way anybody outside this company can hold the paragraph above to account.