Last updated: 3 November 2026
Paintilo is a colouring and drawing app made by Mobile
Castle. This policy covers the Paintilo Android app, package
com.mobilecastle.paintilo.
This page says the same thing the app itself says in Settings → Privacy, because a policy that differs from the app is worse than no policy. If the two ever disagree, the app is the thing to trust and this page is the thing to fix.
Paintilo does not collect personal information about your child. There is no account, no sign-in and no profile. Nothing a child draws leaves the device unless a grown-up chooses to share it.
Paintilo is free and shows advertising, which is how it is paid for. Those adverts are configured for a child audience: they are never personalised, never based on interests or browsing, and Paintilo does not use your device’s advertising identifier. This version sells nothing: there are no purchases in it.
Everything below is detail on that.
Paintilo never asks for a name, an email address, a birthday, a photo or a password, and there is nothing to sign in to. It does not keep a profile of your child, because it has never been told anything about them.
There are no child profiles, no accounts and no way to create one.
Paintilo shows one kind of advert and no others: a full-screen advert after a child has finished colouring a picture and is returning to the gallery – at most once every three finished pictures, never less than nine minutes apart, and no more than six a day.
There are deliberately no banner adverts anywhere, no video adverts, no rewarded or “watch this to unlock” adverts, nothing while a child is colouring, and nothing when the app opens.
It also only appears if your child actually spent time on the picture – they must have coloured something and stayed with it for at least half a minute. A child who opens a picture, looks at it and goes back is choosing what to colour, and nothing interrupts that.
How the adverts are configured. Paintilo uses Google AdMob, and tells it that the whole app is directed to children. In practice that means:
What Google receives. To choose and send an advert, and to count it and prevent fraud, Google’s advertising software sends Google technical information: the device’s IP address (from which a coarse region can be estimated), the device type, a device identifier that is not the advertising identifier, whether the advert was shown or tapped and when the app was opened, and diagnostic information about how the advertising software is performing. It does not send anything your child has drawn or coloured. Mobile Castle does not receive that information and does not store it. Google’s handling of it is described in the Google Privacy Policy and the Google Advertising policies.
This version of Paintilo offers no purchases and has no payment screen. Premium features are coming soon. When they arrive, this page will describe them, and how buying works, in the same release that adds them – as the section on changes below promises.
Choosing a picture, colouring it, the guided drawing steps, the learning activities and the saved gallery all run on the device alone. Nothing about them is sent anywhere and nothing is fetched. A parent can check this: put the device in flight mode and the app still opens, every picture still opens, and everything still saves. The only difference is that no advert appears.
Paintilo itself asks only for internet access, and it asks for it only because of the advertising, which is also the only thing that uses it.
The advertising software brings its own permissions with it, which is why the list a parent sees is no longer empty: network state, wake lock, foreground service, and one for measuring advert campaigns. Paintilo does not use any of them itself.
Two were removed rather than left unused, because they would have contradicted what this page says: the advertising identifier (in both its forms), and Topics, which is Android’s way of inferring what someone is interested in. An app that tells you its adverts are never interest-based should not be asking for permission to read interest signals.
Saved colourings are written into Paintilo’s own private folder on the device. They are never uploaded, and Paintilo has no cloud storage to upload them to. They are never used for advertising.
A drawing leaves the device only when a grown-up sends it. The Share button on a picture asks the grown-up question first. Only after that can an adult share the drawing through the device’s own share sheet or save it to the photo gallery, and it goes only where they choose. Paintilo itself uploads nothing. The file holds nothing about your child. Its name is just “paintilo” and the date and time it was shared. Inside, it carries only Paintilo’s own few lines: a link to Paintilo on Google Play, a copyright line for the outline drawing (Mobile Castle), and a link to this page. A share also sends a short note with the same link, which the grown-up sees before sending and can change in most messaging and email apps. Sharing or saving adds no permission to the app.
Paintilo also switches off automatic cloud backup and device-to-device transfer for its own data, so a child’s artwork does not travel to the cloud with a phone backup or onto the next phone. The other side of that is worth saying plainly: if the device is lost or wiped, the artwork is gone, because there is no copy anywhere else.
Only these, all on the device, none of them leaving it:
| What | Why |
|---|---|
| Saved colourings | So a child can come back to their work |
| Favourites | So a child can find a picture again |
| A grown-up’s settings | Difficulty, sound, reduced motion, toolbar side, language |
| How many adverts have been shown | So the limits above can be kept |
Favourites are a shelf, not a record. If your child taps the heart on a picture, Paintilo remembers that picture on the device so they can find it again. It is never counted, ranked or scored anywhere, and tapping the heart a second time forgets it.
There is no analytics software in Paintilo. Paintilo itself does not record what your child taps, how long they play, or how often they open it, and nothing a child draws or colours is sent anywhere. The only information that leaves the device is what the advertising software sends Google, described under Advertising, and it is not used to build a profile of your child, which is why the adverts are not personalised.
Paintilo is designed for young children. It is built so that there is nothing to collect about them in the first place, which is a stronger protection than a promise to handle data carefully.
Because Paintilo collects no personal information from anyone, there is no personal information for a parent to review, correct or ask us to delete. If you want to remove everything Paintilo has stored, uninstalling the app removes all of it. The parent area also offers “Delete all artwork”, which removes every saved colouring on the spot; favourites and settings stay until the app is uninstalled.
If Paintilo ever changes in a way that makes any statement above untrue, this page will be updated in the same release that changes it, not afterwards. The date at the top says when it was last correct.
That has been done once already, and it is worth recording rather than quietly editing: the version of this page before 2 October 2026 said Paintilo had no advertising and no internet permission, and promised to be rewritten before any version with advertising was published. This is that rewrite.
Questions about this policy: mobilecastle.android@gmail.com
Mobile Castle