Privacy Policy

Pastel — Adult Coloring Book · Last updated: 30 July 2026

1. Who we are

Pastel — Adult Coloring Book ("Pastel", "the App") is operated by IKA Studios, registered at Levent 199, Şişli, Istanbul, Turkey ("we", "us", "our").

This policy covers the Pastel mobile application and any website or subdomain we operate for it (together, the "Service"). It explains what we collect, why we collect it, who we share it with, and what you can do about it. Installing or using Pastel means you accept the practices described here and in our Terms and Conditions. If you do not accept them, please stop using the Service.

Contact: pastel@ikastudios.net

2. Terms used in this policy

Device: Any internet connected hardware used to access Pastel: phone, tablet, computer, or similar.
Personal Data: Information that identifies you, or that can identify you when combined with other information.
IP address: The numeric identifier assigned to your device on the internet. It can indicate approximate geographic location.
Cookie / Local Storage: Small pieces of data written to your device by a browser or app so preferences, sessions, and analytics can persist.
Service Provider: A company we hire to run part of the Service on our behalf, under contract.
Third-Party Service: An external product, SDK, or platform that we integrate with or link to, but do not control.
User / You: Anyone who downloads, opens, or uses Pastel.

3. What we collect

We keep collection to what the App actually needs to run.

3.1 Information you give us directly

Support correspondence, including your email address and the contents of your message, if you contact us.
Optional feedback, survey answers, or content you send us.

3.2 Information created by your use of the App

Product and usage events: screens opened, artworks started and completed, palettes used, session length, feature interactions.
Purchase and subscription status, including trial state, renewal state, and transaction identifiers supplied by Apple or Google. We never receive or store your card number.
Technical and diagnostic data: device model, operating system version, app version, language, region, crash reports, performance traces.
Advertising and attribution identifiers, where you have permitted tracking on your device, plus IP address and coarse location inferred from it.

3.3 Device permissions

Pastel may request the permissions below. Each one is optional and the App remains usable if you decline.

Photo library. Only used to save a finished artwork to your device, or to import an image you choose. We do not scan or index your library.
Camera. Only used if you choose to capture an image inside the App. Nothing is captured in the background.
Notifications. Only used to send reminders and product updates you can turn off at any time.

You can withdraw any permission from your device settings without losing access to the core coloring experience.

3.4 Images you import

If you import or capture an image, it is processed so it can be converted into a colorable page. Processing happens on your device wherever technically possible. Where a feature requires server side processing, the image is sent to a vetted processing provider, converted, returned, and deleted at the provider once the result is delivered. We do not build facial profiles, we do not extract biometric templates, and we do not retain your original image for any purpose beyond producing the output you requested.

4. Why we use it

We process the data above in order to:

Operate the App and deliver the artwork, palettes, and content you request.
Manage subscriptions, trials, entitlements, and restore purchases.
Fix crashes, diagnose defects, and improve stability and performance.
Understand which features are used so we can prioritise what to build next.
Measure marketing performance and, where permitted, show relevant advertising.
Answer support requests and communicate service changes.
Detect fraud or abuse and enforce our Terms and Conditions.
Meet legal, tax, and regulatory obligations.

We do not sell your Personal Data.

5. Legal grounds for processing

Where the GDPR or Turkish KVKK applies, we rely on the following grounds:

Contract. Delivering the App and the subscription you purchased.
Legitimate interests. Product analytics, security, fraud prevention, and service improvement, balanced against your rights.
Consent. Advertising identifiers, marketing communications, and optional device permissions. Consent can be withdrawn at any time.
Legal obligation. Retaining records we are required by law to keep.

6. Who we share it with

We share only what a recipient needs, and only in these situations.

Service providers. Hosting, analytics, crash reporting, subscription management, push delivery, customer support, and image processing partners, acting on our instructions.
Advertising and attribution partners. To measure campaigns and, where you have consented, to serve advertising. Log data such as IP address may be shared for these purposes.
App stores. Apple and Google, in order to process and validate purchases.
Corporate transactions. If we are acquired, merged, restructured, or sell the assets behind Pastel, the acquirer receives your data on the same terms as this policy.
Legal and safety. Authorities, courts, or other parties when we reasonably believe disclosure is required by law, or is necessary to protect the rights, property, or safety of our users, our company, or the public.

We do not share your data with unrelated companies so that they can market their own products to you.

7. Third-party services in the App

Pastel integrates the following categories of third-party technology. Each provider handles data under its own privacy policy.

Analytics and product measurement
Crash reporting and performance monitoring
Subscription and paywall management
Advertising, attribution, and remarketing
Push notifications and messaging
Cloud hosting and image processing

Current providers: Google Analytics for Firebase, Firebase Crashlytics, Google AdMob, Meta (Facebook SDK and Pixel), Adapty, OneSignal.

We may add or replace providers over time and will update this list accordingly.

8. Retention

We keep data only as long as it serves the purpose it was collected for.

Support correspondence: up to 24 months after the ticket is closed.
Product and analytics events: retained in aggregated or pseudonymised form; raw event level data is kept no longer than 26 months.
Purchase and billing records: retained for the period required by tax and accounting law.
Imported images: deleted immediately after processing, as described in section 3.4.

When a retention period expires we delete the data or irreversibly anonymise it so it can no longer be linked to you.

9. Security

We use technical and organisational safeguards appropriate to the risk: encryption in transit, access control on a need to know basis, hardened infrastructure, and vendor review before onboarding a processor. Payment details are handled entirely by Apple and Google and never touch our systems.

No system is perfectly secure. We cannot guarantee that data transmitted to us will never be intercepted, and you send it at your own risk. If a breach occurs that is likely to affect your rights, we will notify you and the relevant authority within the timeframes the law requires.

10. International transfers

We are based in Turkey. Our providers may store or process data in other countries, including within and outside the European Economic Area. Where data leaves the EEA or the UK, we rely on adequacy decisions or Standard Contractual Clauses. Where Turkish law applies, we rely on the transfer mechanisms permitted under KVKK. By using the Service you acknowledge that your data may be processed outside your country of residence.

11. Your rights

Depending on where you live, you may have the right to:

Access the data we hold about you and receive a copy.
Correct data that is inaccurate or incomplete.
Delete your data, subject to obligations that require us to keep certain records.
Restrict or object to particular processing, including profiling for advertising.
Receive your data in a portable, machine readable format.
Withdraw consent at any time, without affecting processing that already took place.
Complain to your local data protection authority. In Turkey this is the Personal Data Protection Authority (KVKK Kurumu).

To exercise any of these, write to pastel@ikastudios.net. We respond within one month and may ask for information to verify that the request is really yours. Requests are free unless they are manifestly excessive or repetitive.

Note that some copies may persist in encrypted backups for a short period after deletion. These are not actively accessible and are overwritten on the normal backup cycle.

12. Advertising and tracking choices

iOS. Tracking requires your permission through App Tracking Transparency. You can change it under Settings, Privacy and Security, Tracking.
Android. You can reset or delete your advertising ID under Settings, Google, Ads.
In app. Where we offer a consent screen, you can revisit your choices from the App settings.

Declining tracking does not restrict your access to any feature you have paid for. It only makes the advertising you see less relevant.

13. Children

Pastel is built for adults and is not directed at children. We do not knowingly collect Personal Data from anyone under 13, or under the minimum age of consent in their country where that age is higher. If we learn that we have collected such data without verified parental consent, we delete it promptly.

Parents and guardians who believe a child has provided us with Personal Data should contact pastel@ikastudios.net so we can remove it.

14. Responsible use of AI generated content

Where Pastel offers AI assisted features, we prohibit their use to create sexual, explicit, or intimate depictions of any person without that person's consent, and we support the objectives of the U.S. Take It Down Act. Pastel does not host or publish a public feed of user content.

If you believe content produced with Pastel infringes your rights or depicts you without consent, contact pastel@ikastudios.net. We review such reports promptly and act as the law requires.

15. California residents

Under the CCPA and CPRA you may request disclosure of the categories of Personal Information we collect, the purposes we use it for, the sources it comes from, and the third parties we share it with, all of which are described above. You may also request a copy of the specific pieces we hold, request deletion, and request correction.

We do not sell or share Personal Information within the meaning of the CCPA. We will not discriminate against you for exercising any privacy right. Submit requests to pastel@ikastudios.net.

16. Links to other sites

The Service may contain links to sites and services we do not operate. We are not responsible for their content, accuracy, or privacy practices. Once you follow a link away from Pastel, this policy stops applying and the destination's own terms take over.

17. Changes to this policy

We update this policy when the Service or the law changes. Material changes will be announced in the App or by another reasonable means before they take effect, and the "Last updated" date above will change. Continuing to use Pastel after an update means you accept the revised policy. If you do not accept it, stop using the App and request deletion of your data.

18. Contact

Email: pastel@ikastudios.net

This policy is governed by the laws of the Republic of Turkey, without regard to conflict of law rules. Disputes are subject to the Istanbul Courts and Enforcement Offices, without prejudice to any mandatory rights you hold as a consumer in your country of residence.