Privacy Policy — Android

This policy covers the Android version of Artoon distributed on Google Play. The iOS version is a separate build with a separate policy — see the Artoon Privacy Policy for iOS.

Artoon has no account and no sign-in. Turning a photo into artwork is the one thing that sends anything off your phone: the picture you chose is uploaded to be drawn. Your gallery, your saved artwork, and your settings stay on the device.

When you apply a style, the one image you selected is uploaded over an encrypted (HTTPS) connection to Pentarab's processing service, which forwards it to our third-party AI image provider, fal.ai (operated by fal, Inc.), to draw the result.

• The image is used solely to fulfil that one request.
• It is not stored in any database or profile of ours. It is held only for as long as the request takes and is not retained on our servers afterwards.
• fal.ai handles it under its own terms: content submitted for processing is not used to train AI models and is not retained after the request is fulfilled.
• The finished artwork comes back to your device. Saving it to your gallery, sharing it, and everything else happens on your phone.

We do not sell your photos, and we share them with no one other than fal.ai, and only to draw the artwork you asked for. You can review fal.ai's practices in its Privacy Policy.

Artoon Premium is an auto-renewing subscription processed by Google Play Billing. Pentarab never receives or stores your payment card details, your Google account details, or your billing address.

Because generation costs real money to run, the daily and weekly allowance is counted on our service rather than on your phone. Google Play's purchase token is sent with each request so the service can confirm the subscription is genuine and count the allowance against it. We store the allowance counters keyed to that purchase, and nothing else about you.

To understand how the app is used and to improve it, Artoon sends usage events to an analytics service that Pentarab runs itself. It is not Google Analytics, and the data is not passed on to any third party. This is the complete list of what it receives:

• The app identifier, the platform, and the app version and build number.
• An install identifier — a random value the app generates on first launch. It is not derived from your device, your Google account, or any advertising identifier, and reinstalling the app produces a new one.
• A session identifier, so one run of the app can be told apart from the next.
• Screen names, and how long each screen was open.
• Feature and purchase-funnel events: that a style was applied, that a paywall was shown and what opened it, and whether a purchase succeeded, was cancelled, or failed — with the product identifier.
• The UTC time of each event, plus your time-zone offset so local time can be reconstructed.
• Device information: operating system and version, screen size, and locale. The device model is not collected.
• A country, worked out by the receiving server from the connection itself — the app never sends it, and it is country-level only.

The service does not store your IP address. It is read at the edge only to derive the country and is then discarded. Your photos and the artwork you make are never part of an analytics event — event values are screen names, style names, and product identifiers only.

Artoon does not collect the Android Advertising ID. Both advertising-ID permissions (com.google.android.gms.permission.AD_ID and android.permission.ACCESS_ADSERVICES_AD_ID) are explicitly removed from the app's manifest, so they are absent from the published build.

• The artwork you have made, and the originals you imported for it.
• App settings and preferences, and your install’s random identifier.

This is removed when you clear the app's data or uninstall it. Artwork you save to your gallery or send through the Android share sheet becomes a copy that lives in that destination, under its own terms.

Artoon requests internet access, and the camera permission only if you choose to take a new picture instead of importing one — the camera is never opened otherwise. Importing uses Android's system photo picker, which runs in a separate process and hands the app only the one picture you chose, so the app declares no photo, media, or storage permission. There is no microphone, location, or contacts permission.

Artoon is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

If this policy changes, the revised version will be posted on this page with a new date at the top.

Questions about this policy, or about what Artoon holds? Email us: