Privacy policy

Last updated: 7 November 2026

Paint-a-mon is a drawing and card-battle game operated by Ronald Gregory Le Sueur, a sole trader in Australia. Contact us at gregorydesign88@gmail.com about privacy, your data or this policy.

Information we use

Please draw fictional monsters. Do not include real people's photos, addresses, contact details or other sensitive personal information in drawings or monster names.

Why we use it

We use this information to provide the game, generate and save artwork, maintain ownership and recovery, run battles, deliver verified purchases, prevent abuse, investigate faults and respond to requests. Where relevant law requires a legal basis, these activities support providing the service you request, our legitimate interests in operating and securing it, compliance with legal obligations, or your consent where required. You may contact us about the basis for a particular use.

AI generation and service providers

When you ask the game to generate or evolve a monster, your drawing or relevant artwork and creation instructions are sent through our backend to OpenAI for image generation and related naming/interpretation. AI output may be incorrect or unsuitable. You can avoid this transfer by not using cloud creation; generation requires it.

We use Supabase for accounts, game records and private file storage; Render and Fly.io for game services; Apple for App Store purchases and optional Apple sign-in; Resend for recovery-code email delivery; and Google/Gmail for support correspondence. The paintamon.com website is hosted through OpenAI Sites. These providers process information needed for their roles. Information may be processed outside your country, including in Australia and the United States, depending on the provider and service.

OpenAI states that API data is not used to train its models unless the API customer opts in. Its separate safety and retention rules can still apply. Deleting data from our game does not imply immediate removal from every provider log. See OpenAI's API data controls. We do not sell your drawings or account information.

Unity Diagnostics

The Android app uses Unity Diagnostics to help us investigate crashes, errors and performance problems. Unity processes crash logs, diagnostic and performance data, and an identifier unique to the app installation on our behalf. Unity retains personal data in Diagnostics for 90 days by default. See Unity's Diagnostics privacy information.

To request deletion of Diagnostics data, email Paint-a-mon support. Include your Unity installation ID if you have it. You can still contact us if you cannot find it. Unity requires the installation ID to locate and delete records for an individual installation. We handle these requests separately through Unity, so the in-app account deletion action does not automatically delete Diagnostics records.

Retention and account deletion

Saved creations and gameplay records are kept to operate your collection until you remove them or delete the account. Temporary uploads, failed creations and diagnostic records have separate cleanup periods; they are not kept as part of a saved collection indefinitely. Deleting a single card is different from deleting the whole account.

In releases with account deletion, open You → Privacy, safety & delete account → Delete account and confirm the request. It works for guests and linked accounts. The account is paused while the request is processed. We target completion within 7 days, normally sooner through automatic cleanup; some requests need manual review. Keep the deletion receipt on your device to check status and completion. If you cannot use the in-app option, request account deletion through our support page. We may need to verify ownership before disclosing or deleting account data.

Completed deletion removes the account and associated gameplay data, original/generated artwork, cards, decks, progress and remaining Paint from active game systems. It is permanent and does not automatically refund an App Store purchase. We may retain the minimum purchase, accounting, security or legal records necessary for legal duties, disputes and fraud prevention. We review these exceptions and remove information when no longer needed; artwork is not an accounting record. We will explain an applicable exception when handling your request.

Copies in restricted backups and provider logs may remain until their normal retention periods expire. If a backup is restored, deletion requests must be reapplied before erased accounts return to service. Copies you export to Photos, Files or another service are under your control and are not remotely removed by account deletion. Other devices may still hold local copies; remove the app's local data on those devices if you no longer want those copies.

Your choices and requests

You can choose whether to connect an optional recovery method, use cloud generation, play online or make purchases. A lost guest sign-in may prevent recovery; Apple purchase history alone does not identify your collection. Contact us to request access, correction, deletion, information about processing, or another privacy right available under the law where you live. We may need limited information to verify your identity. You can also complain to your local privacy regulator, including Australia's OAIC.

Age and security

Paint-a-mon is intended for adults and teens aged 13 and over. It is not intended for children under 13. If you believe a younger child has supplied personal information, contact us so we can investigate and remove it as appropriate. Applicable local age and consent requirements still apply.

We restrict access to account data and use authenticated services and private storage. No system is perfectly secure. Do not send passwords, sign-in codes, payment-card details or sensitive personal information to support.

Changes

We update this page when our practices change. The date above identifies this version; material changes will be communicated as appropriate.