Privacy Policy

What Colla collects, why, who we share it with, how long we keep it, and the choices you have.

Last updated: 29 September 2026

In short. Colla has no accounts and no ads, and doesn't track you across other apps. Your full-size photos and your videos stay on your iPhone. To plan a design, we send your description and small copies of your photos to our servers and to our AI provider, Anthropic; the photo copies are deleted within 24 hours. You can delete what our servers hold about you from Settings › Delete my data.

1. Who controls your data

Colla, the iPhone app, is operated by EBSM OZEL SAGLIK HIZMETLERI BILGISAYAR YAZILIM BILISIM SANAYI VE TICARET LIMITED SIRKETI, a limited liability company registered in Türkiye (“Colla”, “we”, “us”), the company behind Seamly. We are the data controller for the personal data described here under Türkiye’s Law No. 6698 on the Protection of Personal Data (KVKK) and, where it applies, the EU and UK General Data Protection Regulation. Privacy questions and requests: privacy@seamly.art.

2. What we collect

App identity (no account)

Colla doesn't ask for your name, email or phone number. To recognise your copy of the app and protect it from abuse, we receive the anonymous identifier Apple gives this app for your Apple Account (the app transaction ID), a key from Apple’s App Attest service that proves requests come from the genuine app, session tokens, and your device’s language.

What you ask Colla to make

Your description, the options you choose and the template you pick. If you speak your description, it is turned into text on your iPhone; if on-device transcription isn’t available for your language, Apple’s speech recognition service processes the audio under Apple’s privacy policy. We receive only the text.

Your photos and videos

Full-size photos and videos never leave your iPhone. For each photo you add, the app sends a small planning copy (768 pixels on the long side, with photo metadata removed); for each video, one still frame. It also sends details your iPhone works out:

the main colours, size, orientation and brightness;
where faces and the main subject are in the frame, as rectangles, so the layout doesn’t crop them. Colla doesn’t identify people or create face templates;
whether there is a subject that can be cut out;
the date a photo was taken, and a video’s length and whether it has sound;
the city, region and country a photo was taken in, looked up on your iPhone with Apple Maps. We don’t receive the exact location.

Your designs

The design plan and the finished design our servers make for you, its title, and stickers or patterns drawn for it. The designs you edit and export are saved on your iPhone.

Purchases and usage

Whether you have used your free design, your subscription status, and how many designs you have made this week. Purchases are made with Apple; we never receive your payment details.

Notifications

Push tokens that let us update the progress of a design on your Lock Screen and in the Dynamic Island.

Product events

Whether a design was exported, edited, tried again or deleted, and how long that took, linked to a random identifier; and the version of Colla’s design engine you were given, when we compare versions. These events contain no photos and no description text.

Technical data

IP address, device and app details (such as device model, iOS version, language and region), request identifiers, security events and diagnostic logs.

3. Why we use it

We process data to provide Colla to you (making, delivering and unlocking your designs, and handling your subscription), with your consent where the law requires it (Colla asks before it first sends your description and photo copies to be planned by AI), to meet legal obligations, and for our legitimate interests in keeping Colla secure, preventing abuse of the free design, fixing problems and improving the quality of its designs. We do not sell personal data or use it for advertising, and Colla doesn’t track you across other companies’ apps or websites.

4. Who we share it with

We share data only with providers that help us run Colla, under contracts that limit how they use it:

Anthropic, our AI provider, receives your description, the photo copies and video frames, and the photo details, to plan your design and draw stickers and patterns. It processes them on our behalf and, under its commercial terms, doesn’t use them to train its models.
Apple processes App Store purchases, the app transaction ID, App Attest, push notifications, speech recognition when on-device transcription isn’t available, and place lookups on your iPhone.
Adapty manages subscriptions and paywalls. It receives a random identifier for you, your purchase and subscription details, device and app details and your IP address.
Render (servers and database, in Frankfurt, Germany) and Cloudflare R2 (storage) host Colla’s service.

We may also disclose data when legally required, to protect people or the service, or as part of a merger, acquisition or reorganisation.

5. International transfers

Some providers process data outside Türkiye and the European Economic Area, for example in the United States. Where the law requires it, we rely on adequacy decisions, standard contractual clauses or another lawful transfer mechanism under KVKK Article 9 and the GDPR, and apply appropriate safeguards.

6. How long we keep it

Photo copies and video frames: deleted as soon as your design is made, and within 24 hours at most.
Finished designs on our servers: 30 days, so we can deliver them to your iPhone and help if something goes wrong. The copies on your iPhone stay until you delete them.
Your descriptions, photo details and design records: until you delete your data.
Stickers and patterns drawn from a text description go into a shared library that other designs can reuse. They contain none of your photos.
Sessions and security records: as long as they are needed; expired sign-in tokens are removed within days.
After you delete your data, we keep only a one-way hash of the app transaction ID, so the free design can’t be claimed again.

7. Deleting your data

In Colla, open Settings › Delete my data. This deletes the data our servers hold about you: your design records and descriptions, uploads, usage, push tokens and subscription records, apart from the hash in section 6. It doesn’t cancel your subscription; cancel that in your Apple Account settings. Designs saved on your iPhone are deleted when you delete them or the app. To delete the data Adapty holds, email privacy@seamly.art.

8. Your rights

Depending on where you live, you may have the right to learn whether we process your data, access it, correct it, delete it, restrict or object to processing, receive a portable copy, withdraw consent, and learn who we transfer it to, including the rights in KVKK Article 11. Email privacy@seamly.art. Because Colla has no accounts, we may ask for details that let us find your data. We answer within 30 days. You may also complain to your local data protection authority; in Türkiye, this is the Personal Data Protection Authority (KVKK).

9. Security

We use Apple’s App Attest to accept requests only from the genuine app, encryption in transit, signed short-lived access tokens, private storage with short-lived links, restricted infrastructure, rate limits and monitoring. No service can promise absolute security.

10. Children

Colla is not directed to children under 16. If you believe a child has given us personal data without appropriate permission, contact us so we can remove it.

11. Changes

We may update this policy as Colla changes. We will post the new date here and give prominent notice when a change materially affects your rights.