Privacy Policy
26 September 2026
Paint Visualizer does two different things with a photo, and they are not the same. The instant color preview happens on your phone and sends nothing anywhere. Finding the surface you tap, and making a Photoreal render, happen on a server. This page says exactly what that means, and every sentence here is enforced by the code that runs it.
The instant preview never leaves your phone
When the app recolors a surface, the calculation runs on your device. No photo, mask or color choice is sent for it, and it works with no connection at all.
A tap and a render send the photo, which is processed and not stored
When you tap a surface to select it, or ask for a Photoreal render, the photo (and, for a render, the selected area and the chosen color) is sent to our server over HTTPS, held in memory for the seconds the work takes, and then discarded. It is never written to a disk, never saved in a database, never placed in a log file and never attached to an error report. The color you chose is not kept either. The server keeps only numbers: which kind of surface was asked for, which model ran, how long it took, and whether it succeeded.
The provider
Surface detection and Photoreal renders are produced by a machine learning provider, fal.ai. Your photo is sent to them as part of the request, and the app asks for your permission before the first one is sent. The provider is called in a mode that returns the result directly in the response rather than saving it to their storage; their own privacy policy governs their service. No name, email or account identifier is sent with the image, because we do not have one.
The camera
Camera matching reads the color under the ring on your device and never sends or saves a frame. The camera is used only while the Match screen is open, and the photo library only when you pick a photo.
There is no account
There is nothing to sign up for. Your device registers itself and receives a random identifier so the server can count your selections and renders; on supported devices this registration may be verified with Apple's App Attest, which proves the request came from a genuine copy of the app without telling us anything about you. We do not ask for, receive or store your name, email address, phone number or location.
Your projects stay on your iPhone
Every project — the photo, the selected surfaces, the previews and any Photoreal render — is stored on your device only. There is no sync of ours and no server-side copy, so we cannot recover them for you. Delete a project in the app, use “Delete all data” in More, or delete the app, and they are gone.
Purchases
Purchases are processed by Apple. We use RevenueCat to tell the app and the server whether Pro is active. RevenueCat receives the anonymous identifier generated on your device and the receipt information Apple provides — not your name, your email or any of your photos.
Analytics and tracking
The app contains no third-party analytics SDKs, no advertising SDKs and no tracking. We see only the aggregate, anonymized statistics Apple provides to all developers through App Store Connect, and the purchase figures RevenueCat reports.
Security records
To stop abuse, the server records the network (IP) address and the app and system version string (user agent) of requests, alongside the random device identifier, and uses them only to count requests per hour and to spot misuse. They are not shared with the provider and are deleted on request.
Children
Paint Visualizer is intended for adults choosing paint for a property and is not directed at children. It asks no one for a name, email address or any other contact details.
Your rights
We hold no photo, name or email address of yours. The only records tied to your device identifier are the usage counters and the security records above. To have them removed, write to us with your device identifier (shown in the app under More) and we will delete them.
Changes to this policy
If a future version of Paint Visualizer changes what is sent or what is kept, we will update this page and state the new date above before that version ships.