Opens in a new tab

Paint Mix Lab

PaintMixLab Privacy Policy

Last updated: 15 October 2026

PaintMixLab is made by E2M Ventures. This policy explains what the app collects, what it does not, and what you can do about it. It is written to be read, not to be survived.

The short version

  • Colour sampling always happens on your own device. Your photographs stay on your phone unless you choose to keep a project in your cloud.
  • We store your email address, because that is how you sign in.
  • If you sign in, your calibrated paints sync so you do not lose them when you change device.
  • We use Google Analytics to see which parts of the app get used. It never sees your photos, your email, or who you are.
  • If you came to the app from one of our adverts, Apple’s privacy-preserving SKAdNetwork tells our measurement partner, Singular, that the advert worked. It is not told who you are, and there is no tracking across other apps.
  • We do not sell your data. The app shows no advertising.

What we collect

Your email address

Sign-in is by a one-time code sent to your email. We store the address so we can recognise you on your next visit and link your subscription to your account. We do not send marketing email unless you separately ask for it.

Paint calibration data

When you calibrate a paint, the app records the measured colour values for that tube — a small set of numbers describing how the paint behaves. If you are signed in, these sync to our servers so they survive reinstalling the app or moving to a new phone. If you are not signed in, they stay on your device only.

Contributions to the shared measurement library

Calibration measurements may be combined with other painters’ measurements to improve the colour predictions everyone sees. Contributions are aggregated and are not attributed to you. They contain paint colour values, not photographs and not personal details.

Usage analytics

The app sends anonymous usage events to Google Analytics so we can see which features matter and where people get stuck: for example, which screen was opened, that a photo was loaded, that a colour was picked and which paint set was used to mix it, that a swatch was saved, and whether a cloud copy was switched on. Each event carries a random, per-device identifier, the app version, rough device and country information, and whether the app is running on iPhone, iPad or the web. We deliberately send no email address, account ID, project name, or any pixel of any photograph. We have turned off Google’s advertising features and Google signals, and analytics data is kept for 14 months.

Advert measurement

We advertise the app on X and Meta (Facebook and Instagram), and we need to know whether those adverts lead to installs. The iPhone app includes the Singular SDK for this. Attribution works through Apple’s SKAdNetwork, which lets Apple tell the advertiser that an install happened without revealing which device it was. The app does not ask for permission to track you, does not use the advertising identifier (IDFA), and we do not accept so-called fingerprinting. Singular receives the app version, device model and operating system version, country, a per-install identifier that is specific to this app, and events such as the app being opened, you signing in, or a subscription starting. It never receives your email address, your projects, or any photograph. Singular passes aggregated, SKAdNetwork-shaped results to X and Meta so that they can report how our adverts performed; they do not get your personal details from us.

Subscription status

We record whether your subscription is active, and when it expires. We do not receive or store your payment card. Payments are handled by Apple (for purchases made in the iPhone app) or by Stripe (for purchases made on the web).

Your photographs

This one matters, so it gets its own section. When you photograph a scene or a paint swatch, the image is processed on your device. The app reads pixel values locally to work out colours. By default the picture never leaves your phone, and we never receive it.

Projects you choose to keep in your cloud

Each photo you work on becomes a project on your device, together with the swatches you save from it. If you turn on Keep a copy in your cloud for a project, that project’s photo and saved swatches are uploaded to private storage linked to your account, so you can pick the project up on another device. Only you can access them. We do not view, analyse, share, or use them for anything else.

Turning the switch off, or deleting the project, removes the cloud copy. Deleting your account removes all of your cloud projects. Projects you never switch on stay on your device only.

Permissions

The camera and photo library permissions let you choose an image to work on. The app also asks for permission to add images to your photo library, so you can save swatch cards there; it never reads your library through that permission.

What we do not collect

Stated plainly, because App Store listings ask and painters deserve a straight answer:

  • No advertising identifier (IDFA), and no adverts inside the app. We never show the “Allow tracking” prompt because we do not track.
  • No cross-app or cross-site tracking. Google Analytics measures use of this app only, with advertising features switched off, and Singular measures only whether our own adverts led to an install, through Apple’s SKAdNetwork. Neither is used to follow you anywhere else.
  • No location data.
  • No contacts, calendar, microphone, or health data.
  • No payment card details — Apple and Stripe handle those and never pass them to us.
  • No photographs, unless you choose to keep a project in your cloud. See above.

Who we share data with

We use a small number of service providers, each doing one job:

  • Supabase — stores your account, your calibration data, and any projects you choose to keep in your cloud.
  • RevenueCat — keeps track of subscription status across devices.
  • Apple and Stripe — process payments.
  • Resend — delivers your sign-in code emails.
  • Google Analytics — receives the anonymous usage events described above.
  • Singular — measures whether our adverts on X and Meta led to installs, as described above.

We do not sell personal information, and we do not share it with advertisers.

How long we keep it

Account data, calibration data, and cloud projects are kept while your account exists. If you delete your account, they are removed. Analytics events are kept by Google Analytics for 14 months and are not tied to your account. Advert-measurement data held by Singular is kept for 12 months and is likewise not tied to your account. Measurements already folded into the shared library remain there in aggregated, anonymous form, because they can no longer be separated out — this is explained in the app before you contribute.

Deleting your account

You can delete your account from within the app. Deleting your account does not cancel an active subscription — Apple manages that, and you should cancel it in your iPhone’s Settings under Subscriptions. Web subscriptions can be cancelled from the link in your purchase receipt.

Your rights

Depending on where you live, you may have the right to see a copy of your data, correct it, delete it, or object to its processing. Write to us and we will action it. We will not make you jump through hoops.

Children

PaintMixLab is not directed at children under 13, and we do not knowingly collect their personal information.

Changes

If this policy changes materially, we will say so in the app rather than quietly editing this page.

Contact

Questions, requests, or complaints: support@paintmixlab.com