This year, "I turned my kid's drawing into a real image with AI" went properly viral. The results are magical — the wobbly dragon rendered in watercolour, the stick-figure family suddenly alive.
Then came the other headlines. This February, a California elementary school community was rocked by AI-generated images of real children, and the state began pushing new safeguards. Surveys keep finding the same split: parents are excited about AI and creativity, and deeply uneasy about where their children's images end up.
Both instincts are right. AI genuinely can do wonderful things with a child's drawing. And "upload your child's stuff to a free website" genuinely deserves your suspicion. The difference between the two is knowable — you just have to ask the right questions.
Here is the checklist. Seven questions, in the order that eliminates tools fastest.
1. Is it trained on what you upload?
The single most important line in any privacy policy: does the company use your uploads to train its AI models?
If yes, your child's drawing — and anything in the photo's background, and anything in the caption — may become a permanent, unextractable part of a model that millions of people query. There's no meaningful "delete" after that.
Look for an explicit "we do not train on your data" or "your content is not used to improve our models." If the policy is silent on training, assume the answer is yes. Silence is an answer.
2. What happens to the upload afterwards?
Separate question from training, and just as important: retention. Is the drawing processed and discarded, or stored on their servers indefinitely?
The gold standard is a tool that sends the image out for processing, gets the result back, and keeps nothing — so your originals live on your device, not in someone's cloud. If an account can be deleted, check whether deleting it actually deletes the content, or just your access to it.
3. Is your child's name attached?
A drawing alone is fairly anonymous. A drawing plus "Aisyah, age 5" plus your email plus your location is a profile.
Prefer tools that work without an account at all, or with the bare minimum. Be wary of anything that asks for your child's full name, birthday, or photo as part of "personalisation." The magic doesn't need it; the marketing database does.
4. Where does the "share" button lead?
Some children's-art apps are quietly social networks: galleries, likes, public feeds. That changes everything — now the audience isn't your family, it's everyone.
Check whether sharing is opt-in (you export when you choose) or ambient (things are visible by default). A child's creative work should be private by default and shared by deliberate, parental choice. We've written more about why we think privacy-first is the only way to share kids' art.
5. Who is the product for — and how does it make money?
Free AI tools cost millions to run. If you can't see the business model, you're the business model.
A paid app or subscription has an honest deal on the table: money for magic. A free tool with no visible revenue needs your data, your attention, or your uploads to be worth something to someone. This single question quietly eliminates most of the risky tools on the internet.
6. Does it follow children's privacy law — and act like it?
In the US, COPPA restricts collecting personal data from children under 13; the EU and UK have their own stricter regimes. You're not expected to audit legal compliance — but you can check the signals: a privacy policy that mentions children specifically, an age gate that's more than decorative, a data-safety label on the App Store that matches what the app actually does. A company that thought about children's law leaves fingerprints everywhere. A company that didn't leaves none.
7. The photo test
Before uploading anything, ask: would I be comfortable if this exact file appeared somewhere public with my name on it?
For most children's drawings — a crayon house, a purple cat — the honest answer is yes, and the risk is genuinely low. Drawings reveal far less than photos do. The calculation changes when the upload is a photo that includes your child, your home, a school uniform, a street sign. Crop ruthlessly, or photograph the drawing flat and alone, like this.
Where we stand (because you should ask us too)
My Mini Canvas is an AI app for children's drawings, so this checklist has to apply to us — that's the deal.
Here's our answers, on the record: your child's drawings and voice recordings live on your device. We have no user accounts, no cloud gallery, and our server keeps no copy of anything your family makes — the only things it remembers are anonymous usage counters and crash reports. When you ask for a story, a photo of the drawing and your child's words are sent securely for that single job and never stored by us; your child's voice is transcribed on the phone itself, so recordings never leave it. The AI services we use are paid APIs under no-training terms, with every optional data-sharing setting switched off. There is no feed and no public gallery, and nothing is shared unless you export it yourself. We're a paid app — money for magic — precisely so your family's data never has to be the product. This isn't a feature we added; it's the reason we built it this way.
Judge us by the checklist. Judge everyone by the checklist.
The bottom line
You don't have to choose between the magic and your child's privacy. AI turning a drawing into a bedtime story or a watercolour is one of the genuinely lovely things this technology does — the point of the checklist isn't to scare you off, it's to let you say yes with your eyes open.
Seven questions. Two minutes with a privacy policy. Then go watch the dragon come alive.
A gentle note from us: privacy policies change over time. We checked everything here against the providers' published terms when we wrote it — but before you trust any tool (ours included) with your family's treasures, take a moment to read their current policy. You deserve to know exactly where your child's art goes.
Ready to start keeping their stories?
My Mini Canvas is on iPhone and iPad now — free to start, no account needed.
