Legal · Hueberry

Privacy Policy

Business mailing address: StambaAI LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States.

Effective date: 24 October 2026

Developer: StambaAI LLC ("we", "us")

Contact: support@stamba.ai

This policy explains what data Hueberry (the "App"), a coloring app for iPhone and iPad for children aged 3–8, uses, where it goes, and the choices parents have. It is written for parents and guardians. This page is the only current Hueberry privacy policy; other Hueberry pages link here.

In short

  • The App has no accounts, no sign-up and no login, and never asks a child for a name, email address, photo or any other personal detail.
  • It shows no advertising of any kind, and contains no analytics, crash-reporting or tracking software.
  • Your child’s pictures are stored only on your device. We never receive them.
  • The only outside service built into the App is RevenueCat, which checks whether Hueberry Plus has been bought. Apple processes payments. The App does not contact RevenueCat until a grown-up passes the parental gate to open the Hueberry Plus screen or restore a purchase. From then until the App is closed, RevenueCat receives a random identifier for the installation, Apple’s identifier for vendor (IDFV) for the device, and the device’s IP address; these can count as personal information even without a name.

On your device

Coloring works offline. The following is stored only in the App’s private storage on your device:

  • The pictures your child colors, their progress, and which pictures are finished or were colored recently
  • Colors your child has mixed
  • Sound, volume and vibration settings
  • Whether the welcome screens have been seen
  • Whether Hueberry Plus has been unlocked on this device

We cannot see any of this, and it is never sent to us or to RevenueCat. You can delete an individual picture from the gallery in the App, and deleting the App deletes all of it. Like other app data, it may be included in your own device backups, which are controlled by your Apple Account settings, not by us.

Saving to Photos

A grown-up can save a finished picture to the device’s photo library. The first time, iOS asks for permission to add photos. The App asks only for add-only access: it cannot see, read or upload any photo in your library, and the saved picture is not sent anywhere. The App does not use the camera, the microphone or location.

Purchases and RevenueCat

Hueberry Plus is an optional one-time purchase processed by Apple and charged to your Apple Account. Payment details (card numbers, billing address, your name) are handled entirely by Apple — we never see them.

The App uses RevenueCat, a purchase-management service, to confirm and restore the purchase. The App does not connect to RevenueCat when it starts. It connects only after a grown-up has passed the parental gate to open the Hueberry Plus screen or restore a purchase. From then until the App is closed, it uses RevenueCat to check whether Hueberry Plus is unlocked and to process a purchase or restore. The next time the App starts, it does not contact RevenueCat again until a grown-up passes the gate. Whether Hueberry Plus is unlocked is remembered on the device, so unlocked pictures stay open without contacting RevenueCat. Once connected, RevenueCat receives:

  • a random anonymous identifier that RevenueCat’s software creates for the installation, and Apple’s “identifier for vendor” (IDFV), a device identifier Apple gives to apps from the same developer. It is not the advertising identifier (IDFA), and it changes if all our apps are deleted from the device;
  • if a purchase or restore is made, the Apple purchase receipt and purchase history (what was bought, the price, currency, date and transaction identifiers);
  • basic technical details such as the device model, iOS version, App version and bundle identifier, RevenueCat software version, preferred languages, App Store country and whether it is a test (sandbox) build; and
  • as with any internet connection, the device’s IP address.

We use this only to know whether the purchase has been made, to restore it, and for our purchase accounting and support. We can see purchase records in RevenueCat (the anonymous identifier, product, price, date and country), but not who you are. We do not send RevenueCat names, email addresses, drawings or any other content, and we do not turn on RevenueCat’s optional advertising-attribution features or its optional collection of additional device identifiers. The App never accesses the advertising identifier (IDFA). RevenueCat privacy policy: https://www.revenuecat.com/privacy

Apple services

Apple runs the App Store, payment and photo-library features the App uses. The App does not show Apple’s “rate this app” prompt. Apple handles that data under its own privacy policy: https://www.apple.com/legal/privacy/. We do not receive your Apple Account details.

What we do NOT collect

  • No name, email address, phone number, contacts or account
  • No location, and no access to photos (other than adding a picture you choose to save), camera or microphone
  • No advertising identifier (IDFA), no ads, no analytics, no crash reporting and no tracking across apps or websites — the App never shows Apple’s tracking permission prompt because it does not track
  • No chat, messaging, social features or sharing with other users
  • No pictures your child makes
  • No data sold or rented to anyone

Children’s privacy

Hueberry is directed at children and does not ask children to enter personal details. A child cannot enter any personal detail in the App, cannot contact anyone through it, and cannot be contacted through it.

The anonymous RevenueCat identifier, the IDFV and the IP address described above are used only to support the internal operations of the App: confirming and restoring a purchase. Persistent identifiers and IP addresses can be personal information under the U.S. Children’s Online Privacy Protection Act (COPPA). We rely on COPPA’s support-for-internal-operations provisions for this limited use and do not ask for separate parental consent for it. These identifiers are never used for advertising, to build a profile of a child, or to contact anyone. For children in the UK and the EEA we apply the same approach: no profiling, no advertising, no tracking, and only the data the App needs to function.

If you believe we hold personal information about your child, contact support@stamba.ai and we will delete it.

Parental gate

Anything that spends money, leaves the App or can’t easily be undone sits behind a parental gate: an adult-level multiplication question, chosen at random each time. This covers opening the Hueberry Plus purchase screen (including from a link into the App), buying, restoring a purchase, every link out of the App (including to this policy, the terms and support), saving a picture to Photos, and deleting a picture from the gallery. The gate is an access safeguard, not a way of obtaining verifiable parental consent. The App does not contact RevenueCat until a grown-up has passed the gate.

How data is shared

Data leaves the device only through Apple (App Store, payment and the services described above) and RevenueCat (purchase confirmation), each acting for the purposes described above. We do not sell, rent or share personal data, and we do not share any data with advertisers or data brokers. We may disclose information if the law requires it.

Your rights & deletion

Parents and guardians: You can review and delete everything the App stores about your child on the device: delete pictures in the gallery, or delete the App to remove all of it. We have no accounts, so we cannot look up an installation by name or email alone. If you would like the purchase record associated with your device deleted from RevenueCat, email support@stamba.ai (for example with your Apple order details) and we will work with you to find and delete it, except for records Apple or we must keep for tax and accounting purposes. You can also ask Apple about your Apple purchase records.

EEA/UK (GDPR): You have the right to access, correct, delete, restrict, or object to processing of personal data, and the right to data portability. Legal basis: contract (delivering and restoring a purchase) and legal obligation (keeping tax and accounting records). You may lodge a complaint with your supervisory authority.

California (CCPA/CPRA): You have the right to know, delete and correct personal information. We do not sell or share personal information for cross-context behavioral advertising. We do not discriminate for exercising rights.

Everyone: To exercise any right, email support@stamba.ai. We respond within 30 days.

Data retention & security

Data on your device stays there until you delete it or the App. Purchase records are kept by Apple and RevenueCat for as long as needed to deliver and restore purchases and for accounting. Connections to RevenueCat are encrypted in transit (TLS).

Earlier builds

Some earlier development and test builds of Hueberry contained code for Sentry crash reporting, which could send scrubbed error reports (technical stack information and the network IP address, never drawings) if it was configured. That code was removed on 22 October 2026 and the App no longer contains it. If you used an earlier build and have a question about diagnostic data, contact support@stamba.ai with the build number.

Changes

If the App changes what data it handles, this policy will change with it, and the effective date at the top of this page will change. We will not begin collecting personal information from children without first updating this policy and obtaining any consent the law requires.

Contact

StambaAI LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States — support@stamba.ai — https://stamba.ai

← Back to Hueberry