Privacy Policy – KiMa
The following information provides a simple overview of what happens to your personal data when you use this app. Personal data includes all data that can be used to identify you personally.

Data Controller
Frederik Menke
Twietenkoppel 55a
22395 Hamburg
Germany
Email: mail@frederikmenke.de

Collection and Storage of Personal Data
When using the app, the following data is processed:

Photos you take
Coloring pages and sketches generated from those photos
Image metadata (date, title, creation timestamp)
Photos transferred to OpenAI for AI processing
App ID for user identification (RevenueCat User ID)

The legal basis is Art. 6(1)(f) GDPR (providing app functionality) as well as Art. 6(1)(a) GDPR (consent for camera usage).

Local Storage
All generated images and metadata are stored exclusively in the app sandbox on your device. There is no transfer to external servers, except for optional AI processing. You retain full control and may delete your data at any time.

Camera Access
KiMa requires access to the camera to capture photos. Photos are stored locally. You may revoke access at any time in your device settings; previously created coloring pages remain available.

AI Processing with OpenAI
The OpenAI API is used to generate coloring pages.
Your photos are only transferred for the purpose of sketch generation.

The transfer is encrypted via HTTPS.
OpenAI does not permanently store the photos and does not use them for training.
Generated sketches remain exclusively on your device.
Further information: https://openai.com/policies/privacy-policy

Subscriptions and RevenueCat
RevenueCat is used to manage subscriptions.
Processed data includes:

App User ID
Information on active subscriptions
Purchase history (managed by Apple)
Details: https://www.revenuecat.com/privacy

Data Deletion
You may delete coloring pages at any time within the app. All metadata and image files are permanently removed; deletion is irreversible.

Your Rights under the GDPR
You have the right to access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of previously given consent. To exercise these rights, please contact the data controller.

Data Security
Technical and organizational measures are implemented, including local storage within the app sandbox, encrypted transmission for AI processing, no sharing with third parties without consent, and regular security updates.

Changes to This Privacy Policy
This policy may be updated due to legal changes, technical developments, or app modifications. The latest version is always available in the app.
Last updated: November 2025.