Artoli 3D Artoli 3D Statue Painting
Download iOS Download Android

Privacy Policy

Last updated: September 26, 2026

This Privacy Policy explains what information the Artoli 3D app (the “App”) uses, why it uses it, and the choices you have. The App is made by [[LEGAL_ENTITY]] (“Braitoli”, “we”). If you are a parent or guardian, we suggest reading it together with your child.

At a glance

  • No sign-up. We never ask for your name, email address, phone number, home address, precise location or payment card details.
  • Your paintings stay on your device. Your strokes, finished artworks and saved pictures are stored only on your device.
  • No ads and no tracking. The App shows no ads, does not track you across other companies’ apps or websites, and we never sell data.
  • Extra care for children. For users under 13 we collect no personal usage history. We only receive anonymous totals and error reports that carry no identifier.
  • Permissions only when you ask. The microphone and the photo library are used only when you choose voice search or save a picture.

1. Your app wallet

The App has no user accounts. To keep your coins and unlocked statues, the App creates a random wallet ID the first time the wallet is used. The wallet ID contains no personal details. The App sends it, together with an account number and access key issued by our server, to Braitoli’s wallet server so that we can:

  • keep your coin balance and the statues you have unlocked;
  • check and deliver purchases and gift codes;
  • bring your wallet back if you reinstall the App or change device.

The wallet ID is kept in the device’s secure storage. On iPhone and iPad it is stored in the Keychain and may sync through iCloud Keychain to your other devices signed in to the same Apple Account. On Android it is stored in encrypted storage and, if Google Backup is turned on, a copy is kept in Google Block Store so the wallet can be restored after a reinstall or on a new device.

Because the wallet ID stays the same over time, it is pseudonymous rather than anonymous: it does not say who you are, but it connects the activity of the same wallet.

2. Purchases

Payments are handled entirely by Apple (App Store) or Google (Google Play). We never see your card, bank or store-account details. After a purchase, the App sends Braitoli the store’s signed proof of purchase (product ID and transaction or purchase token), linked to your wallet, so that we can confirm the purchase, deliver coins or the “Lifetime Art Studio” pass, avoid delivering the same purchase twice and restore purchases.

3. Recommendations and search

The App keeps on your device a list of the statues you marked as favourites, recently viewed and unlocked (up to 30 of each). When you browse or search the statue library, or open a statue’s page, the IDs in these lists are sent with that request so that the results, such as “For You”, can be ordered for you. These requests carry no wallet ID or any other identifier. Our server uses the lists only to answer the request and does not save them, apart from a temporary copy of the results that expires within minutes. The words you type or say in the search box are sent in the same way to find matching statues. Opening a statue’s page also adds one to that statue’s public view count, again without any identifier.

You can clear your recently viewed statues with “Clear All” on the Home screen and remove statues from your favourites at any time; the lists sent afterwards will no longer include them.

4. Usage statistics

Anonymous totals (all ages). The App counts on your device how it is used, for example how many times it was opened, how many statues were opened or finished, how many strokes were painted and whether the store was opened. At most once a day it sends only these totals to our analytics provider, PostHog. Each sending carries a new random number that is used only once, so separate sendings cannot be joined together. The totals are labelled with the platform, app version, main system version, device model, the country or region set on the device and the selected age group. They include no wallet ID, no name and no location from the IP address.

Detailed usage events (13 and older only). If the age group 13+ is selected during setup, the App also sends individual usage events (for example “statue opened” or “painting finished”) to PostHog, together with a random install ID that stays the same, the app and device version and the age group. We use them only to improve the App. For users under 13, or while no age group has been selected, these events and this install ID are never created or sent.

5. Error and crash reports (all ages)

When the App crashes or a statue cannot be loaded, the App sends an error report to PostHog Error Tracking. The report contains the type of error, technical details from the program code, the screen and statue involved, and the app, system and device version. It uses a random ID that changes every time the App is opened, and contains no wallet ID, purchase data or personal information. The same type of error for the same statue is reported at most once a day.

6. Device permissions

  • Photos: when you save a picture or video of your painting, the App asks for permission to add it to your photo library. It does not read or scan your existing photos.
  • Microphone and speech recognition: used only while you use voice search. Your speech is turned into text by Apple’s or Google’s speech recognition service under their own privacy terms. Braitoli does not receive or store the recording; only the resulting search words are sent to our server.
  • Files: when you choose to import a texture image (PNG), the system file picker opens. The file stays on your device.
  • The App does not use the camera, your contacts or your location.

You can turn these permissions off at any time in your device settings.

7. Children

Artoli 3D is made for all ages, including children. During setup, a parent or the user chooses an age group. This choice is self-declared: it turns on child-safety features, but it is not an age check or parental consent.

  • For users under 13, or while no age group has been selected, the App sends no detailed usage events and creates no install ID. We receive only the anonymous totals and error reports described in sections 4 and 5, plus the wallet ID needed for coins and purchases (section 1).
  • Purchases and links that lead outside the App are protected by a parental gate.
  • The App has no ads, no chat, no messaging and no public profiles, so children cannot contact other people or share content publicly through it.

Parents and guardians can ask us at any time to review or delete their child’s data (see section 11).

8. Who receives data

  • Braitoli: wallet, purchases, statue library, search and recommendations.
  • PostHog: anonymous totals, detailed usage events (13+ only) and error reports. Our PostHog project is hosted in the European Union, does not create personal profiles from anonymous totals or error reports, and discards IP addresses.
  • Apple and Google: payments, and speech recognition when you use voice search.

We do not share data with advertisers or data brokers, and we do not sell data. Data may be processed in countries other than your own; in that case we rely on providers that protect it with appropriate safeguards.

9. How long we keep data

  • On your device: paintings, favourites, recently viewed statues and settings stay until you delete them or uninstall the App. Anonymous totals waiting to be sent are kept for at most 14 days.
  • Wallet and purchase records on our server: kept while the wallet is in use and for [[PURCHASE_RETENTION]] afterwards, to handle refunds, prevent fraud and meet legal obligations.
  • Usage events and error reports at PostHog: kept for [[ANALYTICS_RETENTION]], then deleted.

Uninstalling the App removes the data on your device but does not delete your wallet on our server. The copy of the wallet ID in iCloud Keychain or Google Block Store may remain so that your wallet can be restored.

10. Security

All connections between the App and our servers are encrypted (HTTPS), and wallet keys are kept in the device’s secure storage. No system is completely secure, but we work continuously to protect your data.

11. Your rights

You can ask us for a copy of your data, or ask us to correct or delete it or to stop using it, by emailing contact@braitoli.com. To find your wallet, we may ask you for information shown in the App. Deleting your wallet on our server also permanently removes its coins and unlocked statues. Depending on where you live (for example under the GDPR in Europe or COPPA in the United States), you may have further rights, including the right to complain to a data protection authority.

12. Changes and contact

If we change this policy, we will update the date at the top. For important changes, we will let you know in the App before they take effect.

Responsible for your data: [[LEGAL_ENTITY]], [[LEGAL_ADDRESS]]. Email: contact@braitoli.com.