Magic Fingers Privacy Policy
Magic Fingers for iPhone and iPad and its gallery services, operated by Sweet Action LLC (Sweet Action Games). Updated September 28, 2026.
Magic Fingers is a painting app for families and children. You can paint without an account. We do not sell personal data, show advertising, or track people across other companies' apps and websites for advertising. Your drawings stay on your device unless you choose to share them.
Version and service status: this page covers the current gallery service and the forthcoming app update. Features and settings differ in older versions. The update adds default-off reporting and grown-up controls. The gallery service now keeps new submissions private until approved and supports reporting and blocking. Older app versions may not provide the new controls. Automatic AI review is active for new submissions that include the required per-post permission. Submissions remain private until the safety checks approve them. Unsupported, unconsented, uncertain or unsuccessful submissions stay private.
What stays on your device
Your local drawings, sketchbook, settings and locally cached purchase entitlements are kept in the app's storage. Deleting the app normally removes that storage; device or cloud backups may retain copies according to your Apple settings. Deleting the app does not cancel subscriptions, erase purchases from your Apple account, remove already uploaded posts, or delete pictures and videos you saved to Photos or another destination.
Saving or exporting artwork uses the destination you choose. Photos permission lets the app save an export. The app does not request microphone recordings or location access.
Optional usage and technical reports
In the forthcoming update, reporting starts off. A grown-up can choose Allow reporting in For grown-ups → Help improve the app (optional). The painting app works with reporting off. Older versions may have a differently located reporting switch or different defaults.
When reporting is enabled, usage reports include counts of sessions, brush and effect choices, strokes, drawing time, feature use, membership-offer interactions and membership-unlock events. The planned update also reports which shared artworks are selected and how long they remain visible in the active app. These reports use a public artwork reference and whole-second viewing totals without a viewer or author identifier. We combine them into private daily counts and viewing-time statistics; they are not shown as public popularity counts or used to rank the gallery. Time on screen does not establish that someone is looking at the picture. A purchase-button event includes the selected product, so it describes purchase interest, not proof of a completed payment. Reports include the day, platform family and app version.
To measure return visits, the app stores the date reporting began and daily feature use locally and sends the starting date and elapsed days. The server combines these into daily and return-visit totals. Usage batches do not include drawings, Feedback text, or a persistent analytics user or installation identifier. Random event codes prevent duplicate counting. These aggregate usage statistics are separate from the installation-linked community records described below.
Optional error, crash, freeze, memory-warning and unexpected-exit reports help us diagnose problems. They can include app/build and operating-system versions, device model, code stack traces, timestamps, time since launch, freeze duration, recent built-in app actions and excerpts from the app's log. An unexpected exit does not establish whether a crash, force quit or power loss caused it.
The app removes known paths, identifier fields, UUIDs and long identifier-like strings before sending technical reports. This does not guarantee anonymity: log excerpts can still contain shared-artwork references, product identifiers, entitlement state and purchase outcomes. Technical reports and ordinary server request logs can therefore be associated with an installation or its activity.
In the update, turning reporting off stops optional measurement, cancels pending uploads and clears queued usage and technical reports plus local return-visit history. Old default-on settings and permission given before the gallery-measurement disclosure do not count as consent for this expanded reporting. A grown-up must choose Allow reporting after seeing the updated disclosure. Turning reporting off does not remove reports already received or undo previously combined totals, which cannot be separated by installation.
Private feedback and shared artwork
Feedback in the update is private email to Lance at lance@extropolis.ai, behind the grown-up gate. The app prepares the text you enter and opens your mail app; you choose whether to send it. The mail service handles delivery, and we receive the message and sender address when you send. Feedback is not published in the app or sent to an AI reviewer. The former public feedback rooms are closed, including access from older builds. Previously submitted records remain private to the service operator until deleted under the retention policy below.
Sharing artwork uploads drawing strokes for playback and a thumbnail, or a recorded video and its poster. Exported videos can include the app's music. Public posts and media may be viewed or copied by other people. Removing a post cannot retract copies other people already saved.
Community features use random installation codes, hashed author references, assigned display names and related request information. Older versions also used voter codes and votes. The updated gallery service no longer accepts votes or reactions and does not show or rank artwork by historical votes. An installation's author reference associates gallery submissions, reports, blocks and moderation decisions, as well as historical feedback records. These are pseudonymous identifiers: they are linked data even though we do not ask for your real name or connect them to your Apple account. We use them to operate the community and respond to abuse, not for advertising.
Community controls: in the app update, a grown-up gate protects posting. The updated service holds submissions until approved. The drawing-review flow uses sampled images captured throughout playback. Unsupported media stays private. Report hides a post locally and removes it from public view when the service receives the report. Block hides an author's posts for you. In the updated app, unsent reports and blocks are saved locally for retry when a community screen opens online.
Do not submit personal details, contact information, photographs of people, adult content, threats or bullying. Contact us to report unsafe content or request removal. You can use local painting without posting publicly.
AI review
Automatic AI review is active. The app update asks for permission for each submission before sending images of shared artwork to Civitai's orchestration service, OpenRouter and Anthropic's model service for safety screening. For shared drawings, the app captures samples across playback. Our service arranges up to 19 playback images and the submitted thumbnail into one numbered grid with at most 20 cells. The AI service receives that single grid image, not the drawing's stroke file. These images can show anything drawn or written in the artwork. The integration excludes the app's author code, assigned display name, votes, usage reports and device metadata from the AI request, but personal information drawn or written in the artwork would be sent.
We request ephemeral processing from Civitai, but this does not guarantee deletion of separately stored input images or downstream provider copies and logs. Civitai documents separate image-blob storage and a refresh operation that resets a 30-day expiry; the exact retention and reuse settings for our routed requests have not yet been confirmed. Provider terms and privacy policies also apply. In the automatic review workflow, declining permission or an incomplete, uncertain or unsuccessful safety check keeps the submission private. Local painting remains available. Image sampling and automated screening can miss unsafe content; please use the reporting controls when available or contact us about a concern. The update does not offer a routine human approval queue.
Purchases
Apple handles App Store payments and subscriptions. We do not receive your payment-card details or Apple account credentials. The app reads purchase entitlements and subscription status to unlock paid features. Optional usage and technical reports can contain purchase-related information as described above. Manage subscriptions, refunds and Family Sharing through Apple; removing the app does not cancel a subscription.
Service providers and retention
Our gallery, historical feedback records, usage totals and technical reports use Google Firebase and Google Cloud services, including Firestore, Cloud Storage, Cloud Functions and Hosting. The app's backend storage and functions are configured in the United States; hosting and infrastructure may process requests through Google's global network. We use these services to provide and secure the app, store shared content and troubleshoot failures.
Ordinary infrastructure request logs can include an IP address, request URL, time, response status and browser or app information. Our application code does not use IP addresses to determine your location. The currently configured ordinary cloud log retention is 30 days. Administrative audit logs have a separate 400-day retention period.
- Community content and records: posts, attachments, historical votes, author records and moderation information currently have no automatic expiry. We keep them until removed by available app controls, by us, or in response to a verified deletion request. Related safety records may need to remain to prevent abuse or meet legal obligations.
- Moderation capture files: sampled playback images and their capture manifest are kept privately. They are deleted after a terminal review or artwork deletion and are covered by an automatic one-day storage lifecycle as fallback cleanup. Lifecycle deletion is asynchronous. The drawing and public thumbnail follow the community-content retention described above.
- Technical reports: stored reports currently have no automatic expiry and remain until we delete them. Turning off reporting stops future optional reports but does not delete received ones.
- Usage statistics: daily, per-artwork and return-visit totals have no automatic expiry. Random duplicate-detection records are marked to expire 40 days after the event day and removed asynchronously by the database's expiry service.
- Support correspondence: if you email us, including through the in-app Feedback form, we receive your address, message and any attachments and use them to respond. Your email provider and our email provider process delivery. Keep unnecessary personal information out of support messages. Correspondence currently has no automatic expiry.
Unsharing an artwork removes its gallery post and associated media through the service. It does not necessarily remove related votes, moderation history or infrastructure logs. Contact us for a broader deletion request. We cannot identify one family's contribution inside aggregated usage totals.
Children and parents
Children can paint without creating an account or submitting content. Features that upload content or enable optional reporting in the update require a grown-up interaction. These features can nevertheless transmit children's drawings, submitted personal information and pseudonymous identifiers. A grown-up challenge is an access control; it does not by itself establish legally required parental consent.
Parents can contact us to ask about collected information, request review or deletion, or report information submitted by a child. Avoid sending us additional information about a child that is unnecessary to locate the content. We do not sell children's information or use it for advertising.
Your choices and privacy requests
- Leave optional reporting off, or turn it off in For grown-ups in the update.
- Use local painting without submitting Feedback or sharing artwork.
- Remove a shared artwork from the device that holds its deletion token.
- Manage Photos, backups and subscriptions in Apple's settings.
- Email lance@extropolis.ai to request access, correction or deletion, withdraw permission, or report a privacy or content concern. Include a post link, email date, or a description and displayed name so we can locate the relevant records. We may ask for limited information to verify ownership. Never send an Apple password or payment-card number.
Your rights depend on where you live. We will explain if we cannot identify a record, if information must be retained for a legal or safety reason, or if a request concerns information held by Apple or another service rather than us.
Changes and contact
We update this page when practices change and show the update date above. Material new processing will be described before it is enabled, with any required choices or consent.
Sweet Action LLC (Sweet Action Games): lance@extropolis.ai.