Last Updated: 12 August 2026
Monster Lab turns a child's drawing into a 3D monster. It is made by Appd, an Australian software developer. This policy explains exactly what the app collects, who receives it, how long it is kept and how to have it deleted.
Monster Lab is directed to children, so we have written this for the person responsible for them. It is a complete policy in itself — you do not need to read anything else. If you want to see how Monster Lab compares with our other apps, our multi-app privacy policy covers all of them.
If you read nothing else:
We treat Monster Lab as a children's product and have designed it to collect as close to nothing as an app of this kind can. It is built to meet:
Monster Lab has no sign-up, no login, no password, and no email address. We never ask for your child's name, age, birthday, school, a photo of themselves, or any other detail that identifies them, and there is nowhere in the app to enter one.
When the app first runs it obtains an anonymous user ID — a random string of characters (a UUID) issued by our authentication provider. It is not derived from your device, your phone number, an advertising identifier, or anything about your child. It is simply a random number, and it lets our server recognise the same installation on the next request so that the daily limit works and we know whether a subscription is active.
We hold a random identifier, not an identity. We could not tell you who any given ID belongs to, because we have never been told.
The complete list. There is nothing else.
This is the part we most want parents to read, so we will state it plainly.
When your child creates a monster, their drawing is uploaded to our backend and sent to Google's Gemini service. Gemini is an artificial intelligence service operated by Google. It looks at the drawing, identifies its features — the shapes, colours and details your child drew — and generates the monster image from them. Without this step the app cannot make a monster.
The drawing is sent to Google for that single purpose and nothing else. Nothing identifying your child accompanies it, because we hold nothing that identifies them — no name, no email, no account.
On training AI models: we do not permit your child's drawing to be used to train or improve any AI model, and we do not use it to train models of our own. Google's paid Gemini API is offered on terms under which submitted content is not used to train Google's models, and it is on those terms that we send the drawing. Google's own handling of the data is additionally governed by its Privacy Policy. If this ever changes, we will update this policy and give notice in the app before the change takes effect.
Google is the only AI provider Monster Lab uses. No other AI or machine learning service receives your child's drawing.
The monsters your child collects, the names they give them, their progress through the game, and their app settings are stored on the device only, in the browser's local storage (IndexedDB). This information is never uploaded to us, and we cannot see it.
Because it lives on the device, it is removed when the app is uninstalled or its data is cleared. It is also not backed up by us, so it will not transfer to a new device.
Children's apps commonly include things we have deliberately left out. Monster Lab contains:
We checked for the usual third-party components found in apps of this type before publishing. There are none.
That is the complete list. No other company receives data from Monster Lab. These providers may use the information only to perform their service for us, and are bound to keep it confidential and secure.
We may also disclose information where the law requires it — in response to a valid legal request, or where disclosure is necessary to comply with a legal obligation, prevent fraud or a security threat, or protect the safety of a person or the public.
Monster Lab's data is processed outside Australia:
If you are in Australia, the EEA or the UK, this means information is transferred overseas for processing. We rely on appropriate safeguards for these transfers, including Standard Contractual Clauses where required, and we take reasonable steps to ensure our providers handle the data consistently with this policy.
Because these questions matter most for a children's app, we state them without qualification:
As a parent or guardian you have the right to review the information associated with your child's installation, to have it deleted, and to refuse any further collection.
To delete everything, use the app. Open Monster Lab, go to the Grown-ups screen (the ⚙ icon) and tap Delete account & data. This removes the device's account and everything stored for it, immediately and permanently. There is no waiting period and nothing to email us about. It cannot be undone.
If the app has already been uninstalled: the anonymous identity lives only inside the app, so uninstalling discards the only key linking that data to the device. What remains on our side is unattributable — it cannot be connected to you, your child or your device — and it expires with our normal retention. If you would like it removed anyway, email [email protected].
To stop all further collection: uninstall the app. Nothing is collected when it is not running.
Deleting your data does not cancel a subscription. Subscriptions are billed by the app store, not by us, so deleting data has no effect on billing. Cancel separately — on Android via Google Play → Payments & subscriptions, on iPhone or iPad via Settings → your name → Subscriptions.
Step-by-step instructions are on our Delete Monster Lab Data page.
We do not charge for any of this, and we will not treat you or your child differently for asking.
We take reasonable steps to protect information from unauthorised access, disclosure, alteration and destruction. Data is encrypted in transit using HTTPS/TLS and encrypted at rest by our infrastructure providers. No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
If you are unhappy with how we have handled your child's information, please tell us first at [email protected] so we can put it right. You may also complain to a regulator: in Australia, the Office of the Australian Information Commissioner at oaic.gov.au; in the EEA or UK, your local data protection authority.
We may update this policy to reflect changes to the app or to legal requirements. When we do, we will update the "Last Updated" date above and post the revised policy here. If a change materially affects how we handle your child's information, we will give notice in the app before it takes effect.
We would rather answer a question than have you guess. For anything about Monster Lab and your child's privacy:
Email: [email protected]
Website: https://appd.com.au