Wishpuff Privacy Policy
A Short Version for Kids and Grown-Ups
Wishpuff lets you describe something you would like to color and turns that idea into a printable coloring page.
We designed Wishpuff to collect as little information as possible.
- You do not need an account or login.
- We do not ask a child for a name, email address, birthday, home address, school, photo, contacts, or precise location.
- Voice recognition uses Apple’s speech features on the device. Cypress Creek does not receive or keep the child’s voice recording.
- The words used to make a coloring page are sent to Cypress Creek and our AI provider, OpenAI, so the page can be checked, created, and reviewed.
- When Wishpuff finishes a page, it is saved on the device so you can view, print, and export it. Free pictures or a paid subscription are needed only to create new pages, not to open, print, or export pages you already have.
- Cypress Creek also keeps a cloud library copy of each made page, tied to this installation’s anonymous household id in the device Keychain. That copy lets a reinstall on the same phone restore the pages. A second phone is not guaranteed the same library.
- Cloud library images are kept for at least 24 months after the last meaningful Wishpuff activity on that installation, such as creating a page, restoring the library, or a successful subscription grant. They are not automatically deleted while that installation has an active paid subscription.
- There are no ads, no behavioral advertising, and no sale of personal information.
- Please do not put private information—such as a child’s name, school, address, phone number, or email address—into a Wishpuff idea.
- From Parents → Privacy, a grown-up can delete pictures on the device, delete the cloud library, or delete both, and can export a ZIP of the pages stored on the device. Deleting cloud library content does not reset purchase or remaining-picture counters.
The sections below explain these practices in more detail.
1. About Wishpuff
Wishpuff is a child-directed iPhone and iPad application that turns a typed or spoken idea into a custom black-and-white coloring page that can be saved and printed.
Wishpuff is currently offered in the United States, Canada, the United Kingdom, Australia, and New Zealand.
Wishpuff does not require a child account, parent account, email address, or login.
Purchases, printing and export actions, and parent settings are placed behind a grown-up gate.
2. Information Wishpuff Processes
2.1 Ideas used to create coloring pages
A child or grown-up can type an idea into Wishpuff.
The original text entered by the user is saved locally on the device with the resulting page so the family can recognize what they created.
Before text is sent from the device, Wishpuff uses on-device checks intended to remove or block certain obvious forms of private information. Cypress Creek’s server performs additional checks before an idea is sent to our AI provider.
Examples of information Wishpuff is designed to remove or block include obvious email-address patterns, street-address patterns, and phrases such as “my name is.”
These checks reduce risk but cannot guarantee that every possible piece of personal information will be recognized.
Please do not enter names, school names, addresses, phone numbers, email addresses, or other private information in a Wishpuff idea.
2.2 Voice input
Wishpuff can use Apple’s native speech-recognition features to fill in the idea field.
Cypress Creek does not receive or retain the child’s voice recording. Only the resulting text entered into the idea field is handled through the same process as typed text.
2.3 Generated coloring pages
The copy of a coloring page that the app displays, saves, prints, and deletes is stored on the device. It stays there until a grown-up deletes it. A subscription is not required to open, print, or export a page that is already saved, including after a subscription ends.
Cypress Creek also keeps a cloud library copy of each made page for that installation’s household id, so a reinstall on the same phone can restore the pages. It is not a multi-device account. A second phone is not guaranteed the same library.
Cloud library images are kept for at least 24 months after the last meaningful Wishpuff activity on that installation. Examples of that activity are creating a page, restoring the library, and a successful subscription grant. Cypress Creek does not automatically delete cloud library images while that installation has an active paid subscription.
A short title stored with the page, and a hash of the minimized idea, are kept with that cloud copy and removed when the cloud copy is removed. The raw prompt is not stored as a database field on Cypress Creek’s server.
2.4 Wishpuff installation and allowance identifier
Wishpuff creates a random Wishpuff-specific identifier and stores it securely in the device’s Keychain.
The identifier is sent to Cypress Creek as a household_id beginning with device-. We use it to:
- administer the free-page allowance;
- administer paid monthly page allowances;
- associate verified App Store subscription entitlements with the Wishpuff installation;
- prevent duplicate allowance grants and certain forms of abuse; and
- restore or reconcile service access when appropriate.
This identifier is randomly generated for Wishpuff. It is not Apple’s IDFA, is not a device fingerprint, and is not used for advertising.
2.5 Purchase and subscription information
Wishpuff Plus and Wishpuff Max are purchased through Apple’s StoreKit 2 system.
When a purchase or subscription is made, Cypress Creek receives only the transaction information needed to verify and administer the subscription. This can include:
- Apple transaction identifiers;
- subscription plan;
- subscription period and entitlement status; and
- the Wishpuff household identifier associated with the entitlement.
Cypress Creek does not receive the purchaser’s full payment-card information or Apple Account email address from StoreKit.
Apple handles payment processing under Apple’s own privacy terms.
2.6 Technical, security, and service information
Cypress Creek may process limited technical information necessary to operate and protect Wishpuff, such as:
- request status;
- timestamps;
- error information;
- generation-job state;
- service-cost and rate-limit information;
- security and anti-abuse events; and
- subscription verification status.
Wishpuff does not include third-party advertising SDKs or behavioral analytics SDKs.
3. How We Use Information
Cypress Creek uses information processed through Wishpuff only for purposes reasonably related to operating, protecting, and improving the service, including:
- creating the coloring page requested by the user;
- checking ideas for safety and privacy concerns;
- preparing an appropriate image-generation brief;
- reviewing a generated image before delivery;
- keeping a cloud library copy so the same phone can restore pages;
- managing free and paid page allowances;
- verifying App Store subscription entitlements;
- preventing fraud, abuse, duplicate grants, and technical misuse;
- maintaining, debugging, and securing the service;
- responding to privacy requests; and
- complying with applicable legal obligations.
Cypress Creek does not use children’s prompts, generated pages, or app activity to:
- serve targeted advertising;
- create advertising or marketing profiles;
- sell personal information;
- build datasets for sale; or
- train Cypress Creek AI models.
4. Artificial Intelligence and OpenAI
Wishpuff uses OpenAI’s API as a service provider to help evaluate ideas, prepare illustration instructions, create coloring-page images, and review generated results.
The production Wishpuff pipeline uses OpenAI models to:
- evaluate a submitted idea;
- create a structured image brief;
- generate the coloring-page image; and
- review the generated image before it is delivered.
Only information reasonably necessary to perform those functions is sent to OpenAI.
This policy does not say that OpenAI Zero Data Retention is turned on. That setting is not recorded as configured, so this page does not promise that OpenAI deletes an idea or a page on a set schedule. Where the option exists, the requests that judge an idea, write the drawing brief, and check the finished page are sent with OpenAI storage turned off. The request that draws the page does not include that option.
Wishpuff does not use the OpenAI Moderations API and does not use a separate third-party safety vendor. Wishpuff uses its own on-device and server-side checks together with OpenAI models.
5. Service Providers
OpenAI
OpenAI provides the artificial-intelligence services used to evaluate requests, prepare generation instructions, create images, and review generated output.
Fly.io
Cypress Creek hosts the Wishpuff API on Fly.io infrastructure. The production service currently operates in the United States and uses a SQLite database stored on a Fly volume.
Apple
Apple provides the App Store, StoreKit subscription processing, on-device Keychain storage used by Wishpuff, Apple speech-recognition functionality used for optional voice input, and Apple’s in-app review prompt.
Cypress Creek does not permit these providers to use Wishpuff information for Cypress Creek advertising purposes.
6. Information We Do Not Intentionally Collect
Wishpuff does not ask a child to provide:
- a full legal name;
- an email address;
- an exact date of birth;
- a home or school address;
- precise geographic location;
- a photograph or video of the child;
- contacts;
- a social-media account; or
- an advertising identifier.
Wishpuff does not provide a photo picker or photo-upload feature.
Wishpuff does not provide a public gallery, messaging, comments, social networking, or user-to-user content sharing.
7. Children’s Privacy and Grown-Up Authorization
Wishpuff is designed for children and families, including children under 13.
We use privacy-protective defaults and apply child-protective settings to all Wishpuff users rather than asking children to provide an age.
Before a child’s first AI-powered coloring-page request is sent off the device, Wishpuff shows a grown-up a notice explaining:
- what information is sent;
- why it is sent;
- that an AI service processes the information;
- how long Cypress Creek keeps cloud library copies;
- how a parent or guardian can delete them; and
- how to read this Privacy Policy.
The ordinary Wishpuff arithmetic question is a check that a grown-up is present. It is not identity verification and it is not parental-consent verification. Wishpuff can record that this notice was shown, or that a grown-up withdrew permission for new AI pages. It does not record verified parental consent, because no verification method is configured.
A children’s-privacy legal review is not described as finished. This policy does not say that Wishpuff complies with the Children’s Online Privacy Protection Act.
Parents and guardians may contact Cypress Creek to request applicable access, correction, deletion, withdrawal of consent, or cessation of further collection or use.
Contact: privacy@cypresscreekventures.com
8. Privacy and Safety Filtering
Wishpuff uses checks intended to reduce the chance that private or inappropriate information is transmitted or used in generation.
These checks do not replace good privacy practices and cannot identify every possible piece of private information.
Parents and guardians should remind children not to enter private information into the idea field.
Wishpuff does not encourage children to provide additional personal information in order to use the app.
9. Where Information Is Processed
Cypress Creek operates Wishpuff primarily from the United States.
Wishpuff’s Cypress Creek API is hosted in the United States. OpenAI and Apple may process information in the United States and in other locations where they operate authorized infrastructure.
If Wishpuff is used from Canada, the United Kingdom, Australia, or New Zealand, information needed to operate the service may therefore be transferred to and processed in the United States.
Where applicable law requires safeguards for international transfers, Cypress Creek uses service providers and contractual or other legally recognized safeguards designed to protect transferred information.
10. How Long We Keep Information
Cypress Creek follows a data-minimization approach and aims to retain information only for as long as reasonably necessary for the purpose for which it is processed.
Information stored locally on the device
The original idea, generated coloring page, and saved-page information remain on the device until a grown-up deletes the page, deletes pictures from the device, deletes Wishpuff, or otherwise removes the app’s local data. They do not expire when a subscription ends.
Cloud library
Cloud library images are kept for at least 24 months after the last meaningful Wishpuff activity on that installation, such as creating a page, restoring the library, or a successful subscription grant. They are not automatically deleted while that installation has an active paid subscription.
The short title and the idea hash stored with a cloud copy are removed when that cloud copy is removed.
Cypress Creek does not use a child’s raw original prompt as a server-side database field.
Allowance and service records
The Wishpuff household identifier and limited allowance records may be retained while reasonably necessary to administer free-page limits, active paid allowances, entitlement restoration, duplicate-grant prevention, fraud and abuse prevention, and service security.
Deleting cloud library content does not reset purchase records or remaining-picture counters. Those records do not contain the child’s original prompt or the generated image after the cloud copy is removed.
Purchase and transaction records
Limited transaction records may be retained for longer where reasonably necessary for subscription restoration, accounting and tax obligations, billing disputes, fraud prevention, transaction verification, or other legal obligations.
Where possible, retained transaction records are separated from child-created content.
Privacy requests
If a parent or guardian contacts Cypress Creek about privacy, Cypress Creek may retain the correspondence for as long as reasonably necessary to respond, document the request, and satisfy legal obligations.
11. Deleting Wishpuff Information
From Parents → Privacy, a grown-up can delete pictures from the device, delete the cloud library for this installation, or delete both. A grown-up can also export a ZIP of the pages stored on the device.
Deleting the cloud library removes that installation’s generation content, including images, titles, and idea hashes. Purchase, subscription, allowance, and consent records can remain, including where Cypress Creek needs them for purchases, accounting, fraud prevention, security, or legal obligations. Deleting cloud library content does not reset purchase or remaining-picture counters, and it does not undo a withdrawal of permission for new AI pages.
Wishpuff shows a Privacy ID in Parents → Privacy. A parent can include that Privacy ID when contacting Cypress Creek so we can locate the appropriate server-side records without asking for the child’s name.
Parents and guardians can also request deletion by emailing privacy@cypresscreekventures.com.
We may ask for limited information needed to verify that the requester is authorized to control the relevant Wishpuff installation or subscription.
12. No Advertising, Selling, or Behavioral Tracking
Wishpuff does not contain third-party advertising, use advertising SDKs, use the IDFA for advertising, sell personal information, share personal information for targeted or cross-context behavioral advertising, or create advertising profiles based on a child’s ideas or coloring pages.
13. App Store Purchases
Wishpuff offers optional subscriptions through Apple’s App Store.
Apple handles the payment transaction. Cypress Creek receives limited transaction and entitlement information needed to provide the purchased Wishpuff service.
Apple’s handling of App Store and payment information is governed by Apple’s own privacy policy.
14. Security
Cypress Creek uses administrative, technical, and organizational safeguards designed to protect Wishpuff information from unauthorized access, use, disclosure, alteration, or loss.
These measures include practices such as encrypted network connections, restricted access to production systems, data minimization, the cloud-library retention described above, separation of transaction information from child-created content where practical, use of randomly generated Wishpuff identifiers instead of advertising identifiers, and security and abuse controls.
No system can be guaranteed to be completely secure, but Cypress Creek reviews the information Wishpuff processes and the safeguards appropriate to it.
15. Privacy Rights
Privacy laws may give users, parents, or guardians rights relating to personal information.
Depending on where you live and which laws apply, these rights may include access, correction, deletion, restriction of processing, objection to certain processing, withdrawal of consent, portability of certain information, and the right to complain to a privacy regulator.
Because Wishpuff does not require an account, Cypress Creek may need the device’s Wishpuff Privacy ID or limited transaction information to locate records associated with a request.
Cypress Creek will not discriminate against a user for exercising applicable privacy rights.
United States
Wishpuff is made for children and families. A children’s-privacy legal review is not described as finished, and this policy does not say that Wishpuff complies with the Children’s Online Privacy Protection Act. A grown-up can read this policy, use the deletion controls in section 11, withdraw permission for new AI pages, and write to the privacy contact below.
Cypress Creek does not sell or share personal information for targeted or cross-context behavioral advertising.
Canada
Where Canadian privacy law applies, Cypress Creek uses personal information only for identified and appropriate purposes, seeks meaningful consent where required, and allows individuals to withdraw consent subject to applicable legal or contractual limitations.
For children who cannot meaningfully consent for themselves, Cypress Creek seeks authorization from a parent or guardian where required.
United Kingdom
For UK users, Cypress Creek Ventures LLC is the controller of personal information processed through Wishpuff.
Wishpuff applies child-protective settings to all users rather than requiring a child to provide age information.
Depending on the processing and applicable law, Cypress Creek relies on appropriate lawful bases that may include consent or parental authorization where required, legitimate interests in providing and protecting the requested service where those interests are not overridden by the rights and interests of the child, performance of obligations relating to a purchase or service, and compliance with legal obligations.
UK users may have rights including access, correction, erasure, restriction, objection, and portability, and may lodge a complaint with the UK Information Commissioner’s Office.
UK representative: If Cypress Creek is required to appoint a UK representative under applicable UK data-protection law, the representative’s contact details will be published here before UK distribution begins.
Australia
Where Australian privacy law applies, Cypress Creek provides transparency about its handling of personal information, limits collection and use to appropriate purposes, and provides applicable rights to access or correct personal information.
Cypress Creek takes children’s privacy and best interests into account when designing Wishpuff’s defaults and information practices.
New Zealand
Where New Zealand’s Privacy Act applies, individuals may have rights to access and request correction of personal information.
Cypress Creek limits collection to information reasonably necessary for Wishpuff and does not retain personal information longer than reasonably necessary for the purposes for which it may lawfully be used.
Users may raise privacy concerns with the Office of the Privacy Commissioner of New Zealand.
16. Website Privacy
The public Wishpuff privacy-policy webpage is a static informational webpage.
Cypress Creek does not intentionally place advertising trackers or behavioral analytics on the Wishpuff privacy-policy page.
The website host may create ordinary technical server logs necessary to deliver, secure, and troubleshoot the webpage.
17. Changes to This Privacy Policy
Cypress Creek may update this Privacy Policy when Wishpuff changes, service providers or information practices change, or applicable laws require an update.
We will update the Last updated date when we make changes.
If a change materially affects the collection, use, or disclosure of children’s personal information, Cypress Creek will provide additional notice and obtain new authorization where required by law.
18. Contact Us
Questions, privacy requests, or complaints about Wishpuff can be sent to:
Cypress Creek Ventures LLC
426 Westport Avenue, Suite 1100
Norwalk, Connecticut 06851-4423
United States
