Legal
Privacy Policy
Effective September 10, 2026
This policy explains how Illuminare handles information in the app, on the website, and through related services.
Who Is Responsible for Your Information
Illuminare is operated by Mishka Studios LLC, a California limited liability company in the United States. Mishka Studios LLC is the controller of personal information handled through the Illuminare app and illuminareapp.com. Questions and privacy requests may be sent to support@illuminareapp.com or mailed to Mishka Studios LLC, P.O. Box 4117, Culver City, CA 90230, United States.
Account and Profile Information
When you create or use an Illuminare account, Illuminare handles your name, username, email address, account identifier, sign-in method, email-verification status, profile badge, drawing preferences, account settings, and acceptance of the Terms. This information is used to create, secure, authenticate, support, and restore your account and account-bound access.
Artwork, On-Device Activity, and Cloud Sync
Saved artwork, favorites, recent library state, and export history remain stored on your device. For an authenticated Premium account with no saved Cloud Sync choice, Illuminare presents the Cloud Sync disclosure and enables Cloud Sync only after you select Accept & Turn On Cloud Sync, which records your agreement to the current Privacy Policy and Terms of Use. A previously saved on or off choice remains account-wide and authoritative; if renewed agreement is required, an enabled choice does not resume until you accept the current terms. Cloud Sync uploads private, account-bound copies of saved-work metadata, editable drawing data, fill layers, ornaments, thumbnails, and rendered previews to Supabase so eligible Works can be restored on another signed-in device. Cloud Sync copies are not public and are not used for advertising or tracking. The local Work remains on the device and is not moved or deleted by enabling sync. Turning Cloud Sync off updates the account-wide preference and stops future synchronization, but existing cloud copies remain until you choose Delete Cloud Copies or Delete Account. Delete Cloud Copies turns sync off and permanently removes the cloud copies without deleting local Works. Artwork also leaves the device when you choose an export, share, print, Photos save, or Discover tab submission.
Purchases and Promotional Access
Apple processes Illuminare purchases and subscriptions. Illuminare receives product, transaction, subscription, trial, refund or revocation, and entitlement information needed to provide and restore access. An account-specific identifier links a purchase to the Illuminare account used for the purchase. In Illuminare's Supabase subscription records, Apple transaction and app-account identifiers are stored as protected keyed digests together with the product, environment, entitlement dates, and current account binding. Founding Lifetime inventory records include an assigned slot and protected transaction digests to enforce the permanent 100-purchase limit. Raw Apple transaction identifiers are not stored in those Supabase records; Apple and RevenueCat handle the purchase records described below separately. Illuminare does not receive or store your payment-card number. Friends and Family promo records include the intended recipient's name, a protected representation of the code, redemption status, and the account receiving access.
RevenueCat Purchase Services
Illuminare uses RevenueCat to verify purchases, maintain purchase and subscription history, support restoration, prevent invalid or duplicate claims, and provide subscription reporting. Illuminare's servers send RevenueCat an Apple-signed purchase receipt, the product identifier, and an account-specific purchase identifier corresponding to the original Illuminare account used for the purchase. The receipt includes raw Apple transaction and original-transaction identifiers, purchase and expiration dates, and available store, price, currency, offer, and purchase-status information. RevenueCat stores and processes these records, including subscription status and refund or revocation information it receives from Apple. This information is linked to an account identifier and is not anonymous. Illuminare does not send RevenueCat your artwork, drawing contents, name, username, email address, Photos library, or advertising identifier. RevenueCat's purchase services and subscription reporting operate independently of the optional app-usage Analytics setting. Apple continues to handle billing and payment-card information.
Sign in with Apple
If you use Sign in with Apple, Apple provides an account identifier and may provide your name and relay or ordinary email address according to your Apple choices. Illuminare stores an encrypted Apple refresh token only so Apple authorization can be revoked as part of account deletion. The token is deleted with the account after revocation.
Optional Analytics
Optional app-usage analytics are off unless you enable them. If enabled, Illuminare sends events for app opens, book and page opens, coloring starts, saves, exports, paywall views, completed purchases, and completed restores. Events use a random install identifier and may include book ID, page ID, app version, device class, and entitlement tier. They do not include your email, username, artwork, drawing contents, Photos data, or user-entered text. Turning Analytics off stops new collection and clears pending events on the device. Settings also provides a control to request deletion of previously collected events associated with that random identifier. This setting does not disable purchase verification, purchase history, or subscription reporting through Apple and RevenueCat, which are described separately in this policy.
Discover Tab Submissions and Support
If you submit artwork for Discover through the Illuminare app or illuminareapp.com, Illuminare handles the artwork file, submission and contact details, requested artist credit, permissions or confirmations you provide, moderation and publication status, and correspondence about the submission. When selected and used under your submission permission, the artwork and approved credit may be displayed or used to operate and promote Illuminare as described in the Terms of Use. If you contact support, Illuminare handles your message, contact details, and information you choose to provide so the request can be answered, investigated, and documented.
Photos and Device Permissions
Illuminare requests Photos access only when you choose to save finished artwork to your photo library. Apple controls other device and system information made available through iOS and the App Store. You may manage device permissions in iOS Settings.
Why Information Is Used
Illuminare uses information to provide requested account, authentication, purchase, entitlement, subscription reporting, submission, support, and security functions; to comply with legal and App Store obligations; to establish or defend legal claims; and, where you opt in, to understand app usage through optional analytics. Where consent is the basis, you may withdraw it without affecting earlier lawful handling. Where a contract is the basis, required account or purchase information must be handled to provide that service.
Service Providers and Disclosures
Information is disclosed as needed to providers performing services for Illuminare, including Supabase for authentication, databases, storage, and server functions; RevenueCat, Inc. for purchase verification, purchase and subscription records, restoration support, and subscription reporting; Apple for sign-in, purchases, subscriptions, device services, and App Store distribution; Resend for transactional email; and website, hosting, delivery, or security providers such as Cloudflare when those services are used. RevenueCat processes the purchase information described in this policy on Illuminare's behalf under our service and data-processing agreements. Apple also handles information under its own terms and privacy policy. Information may be disclosed when required by law, to protect users or the service, or in connection with a business transfer subject to appropriate safeguards.
Storage Location and International Access
Illuminare's Supabase project is hosted in Oregon, United States (us-west-2). Other providers may process information in the United States and in countries where they operate. Information submitted from another country may therefore be transferred to and handled in the United States, subject to contractual, technical, and legal safeguards appropriate to the service and applicable law.
Retention
Account and profile information is retained while the account exists and then deleted through Delete Account, except for limited records described here. Illuminare Cloud Sync copies are retained while the account exists, including while Premium or sync is inactive, until you use Delete Cloud Copies or Delete Account. Optional analytics events are deleted after 12 months and may be deleted sooner through Settings. An encrypted Apple refresh token is retained only until Apple authorization is revoked during account deletion. If a monthly or annual Apple subscription is still active when the account is deleted, Illuminare removes the account reference from its Supabase subscription-recovery record but temporarily retains protected keyed transaction and app-account digests, product and environment, entitlement dates, verification dates, and deletion or recovery dates so the remaining paid access can be restored securely. This recovery record contains no name, username, email, profile, artwork, or raw Apple identifier; it is automatically deleted 30 days after the final Apple-verified expiration, refund, or revocation. Minimal Terms-acceptance evidence is retained for four years after account deletion for contract and legal-claim records. A Friends and Family recipient name and related minimal promo record may be retained for four years after the associated account is deleted or the code is disabled, then deleted. A completed Founding Lifetime slot and protected Apple transaction digests are retained for the commercial life of Illuminare to restore a verified purchase, prevent duplicate counting, and permanently enforce the 100-purchase limit; the Illuminare account reference is removed if the account is deleted. Unpublished Discover files are automatically deleted within 90 days after submission. Published Discover materials are retained while displayed or used under the submission permission; after a verified removal request, Illuminare removes them from locations it controls without undue delay and no later than one calendar month. Support records are retained only as long as reasonably needed to resolve the request, meet legal obligations, or establish or defend claims. These Supabase retention periods do not apply to the separate purchase records held by RevenueCat or Apple, described in Purchase Record Retention below.
Purchase Record Retention
RevenueCat stores its customer identifier, receipts, and purchase and subscription history separately from Illuminare's Supabase records. When you delete your Illuminare account, Illuminare automatically queues deletion of its associated RevenueCat customer and purchase records. Cleanup runs in the background, waits for any purchase verification already in progress, and retries until deletion is confirmed. Service interruptions or an account-ownership conflict can delay completion; contact support@illuminareapp.com for help or to exercise your privacy rights. During cleanup, Illuminare temporarily retains the identifiers needed to complete the request. After confirmed deletion, it removes those raw routing identifiers and retains a protected keyed deletion marker and processing dates for four years to prevent later purchase notifications from recreating deleted data. A later purchase or Restore Purchases request may create purchase records again so access can be verified. Apple retains its own purchase and billing records under its policies and applicable law; deleting an Illuminare or RevenueCat record does not cancel an Apple subscription.
Your Choices and Rights
You may review or update available profile details in the app, turn Illuminare Cloud Sync or optional Analytics off, use Delete Cloud Copies, request deletion of associated analytics history, withdraw a Discover permission, or use Delete Account. Turning Cloud Sync off stops new account-bound artwork uploads across signed-in devices after the setting updates; Delete Cloud Copies removes existing cloud artwork without deleting local Works. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, portability, or information about disclosures, and to object to or withdraw consent for certain handling. You may submit a request to support@illuminareapp.com. Illuminare may reasonably verify identity or authority before acting and will respond within the period required by applicable law. You may also complain to the privacy or consumer authority where you live.
Account Deletion
Delete Account in Settings removes the Supabase authentication account, synced profile and drawing preferences, Illuminare Cloud Sync copies, account-bound promotional grant, and stored Apple credential after Apple revocation. It also clears account details from that device. This action also automatically queues deletion of associated RevenueCat customer and purchase records, as described in Purchase Record Retention. The limited Terms, Friends and Family, Founding Lifetime, and active-subscription recovery records described in Retention remain only for their stated purposes and periods. Local artwork and exports remain on each device unless you delete them there. Deleting an Illuminare account does not cancel an Apple subscription or stop Apple billing. To prevent future renewal charges, cancel the subscription in Apple Account subscription settings before deleting the account. If a verified monthly or annual subscription remains active, its Premium entitlement may be restored to one signed-in, recently authenticated Illuminare account at a time through the end of the Apple-verified subscription period; a verified, unrevoked Founding Lifetime purchase may also be restored to one recently authenticated replacement account using its original founding slot. Purchase restoration does not recover the deleted account, profile, cloud artwork, or promotional access.
No Sale or Cross-App Advertising
Illuminare does not sell personal information and does not use personal information for cross-app behavioral advertising. Optional product analytics are used to understand Illuminare itself, not to build advertising profiles.
Younger Users
A person must be at least 16 to create and manage their own Illuminare account. A parent or legal guardian may create and manage an account for a younger user and is responsible for that use. Illuminare is not directed to children under 16. Discover tab submissions for an artist under 16 must be made by the artist's parent or legal guardian. If you believe a child provided personal information contrary to this policy, contact support@illuminareapp.com.
Security
Illuminare uses safeguards designed for the nature of the information, including authenticated access controls, restricted database policies, protected server functions, and encryption for the stored Apple credential. No method of storage or transmission can be guaranteed completely secure.
Availability
Illuminare and its account services are not offered to people located in the European Union, European Economic Area, or United Kingdom.
Policy Changes
This Privacy Policy may be updated to reflect changes in the app, website, providers, or law. The effective date will be updated, and material changes will be presented through an appropriate notice or renewed choice when required.
Contact
Privacy questions or requests may be sent to support@illuminareapp.com or mailed to Mishka Studios LLC, P.O. Box 4117, Culver City, CA 90230, United States.