Can ask for your microphone, nearby Bluetooth devices
9 kinds of data linked to you
Up to $300.00 for one in-app purchase
1 kinds of data used to track you across other companies' apps
tap →
ABOUIT · CANVA2/7
Inside the app
2
things about you and around you the app can ask the phone for
microphone🔵nearby Bluetooth devices
WHAT IT MEANSThe app's own file lists these. Your phone asks you before the sensitive ones.
WHAT YOU CAN DOPhone settings → Apps → permissions: switch off what it does not need.
Android app 2.384.0 · εxodus Privacy, 2026-11-03
ABOUIT · CANVA3/7
They declare
9
kinds of data linked to you
this app · 9
typical of the 19 apps we read · 9
WHAT IT MEANSTied to your identity, not anonymous. The company filled in this label itself.
WHAT YOU CAN DOIn the EU and UK you can ask for a copy of your data.
App Store label, declared by the developer
ABOUIT · CANVA4/7
They declare
1
kinds of data used to track you across other companies' apps
this app · 1
typical of the 16 apps we read · 2
WHAT IT MEANSCan be used to follow you across other companies' apps and websites.
WHAT YOU CAN DOiPhone: Settings → Privacy & Security → Tracking → off.
App Store label, declared by the developer
ABOUIT · CANVA5/7
They declare
$300.00
top price of a single in-app purchase
WHAT IT MEANSThe most a single in-app purchase can cost, by the store listing.
WHAT YOU CAN DOSet a purchase password in your store settings.
Google Play listing, declared by the developer
🏛️
ABOUIT · CANVA6/7
Follow the money · lobbying
€100K+
a year on lobbying the EU, as the company declares
WHERE IT COMES FROMCanva, Inc. declares spending between €100,000 and €199,999 in a year on lobbying the EU institutions (Jan 2025 to Dec 2025). The company's own figure, not audited.
EU Transparency Register · entry 151868892324-60 · last updated by the company on 2026-05-17
ABOUIT · CANVA7/7
The end
That's all.
NO FEEDNo endless feed here. You have seen everything we hold on this app.
"We will not use User Content of Canva Education for AI training."
Their words, not yet tested. privacy policy · read from their site on 2026-11-12
MINIMUM AGE AND MINORS
"For purposes of these Terms, a child is a person under the age of 13 (or the minimum legal age required to provide consent for processing of personal data in the country where the child is located)."
Their words, not yet tested. terms of use · Internet Archive capture of 2026-11-02
AUTO-RENEW, REFUNDS AND CANCELLING
"Unfortunately, we’re unable to provide refunds for errors made by you or if you just change your mind about a print order."
Their words, not yet tested. terms of use · Internet Archive capture of 2026-11-02
Screen recordings submitted to Abouit by users who stated they show cancelling or deleting their own account. Abouit did not record them and cannot verify who made them. Screens are counted by our published method. Submitted recordings are reported evidence: never a receipt, never part of a grade.
No receipt about Canva yet. read — nothing found yet First look from Germany on 2026-11-09 · privacy policy read 2026-11-12 · terms of use read from the Internet Archive capture of 2026-11-02
Re-reading its policies and checking the Internet Archive for new versions.
Area by area
Read the details
What we checked in each of the six areas, and what we found there. Not a score: an empty area means not tested yet; "their words" means we quote their documents below but have not tested it. Planet is a seventh row of measured facts from the same first look: what the homepage weighs before any tap, and a CO2e range with its method.
How Canva's own help pages say you can reach a person, quoted as written on the date given. We did not contact them. Not tested by us; not a score.
Cancel article: not read: the site's robots.txt or the site itself refused our reader, and we never get around a refusal (page) Close-account article: not read: the site's robots.txt or the site itself refused our reader, and we never get around a refusal (page)
What the stores and its help centre say
The company's own declarations, copied as shown on the date given, with a link to the source and the hash of our archived copy. Not tested by us; not a score.
Google Play Data safety page: not read: the site's robots.txt or the site itself refused our reader, and we never get around a refusal. 2026-11-09 · source
Cancelling, per its help centre: not read: the site's robots.txt or the site itself refused our reader, and we never get around a refusal. 2026-11-09 · source
Closing the account, per its help centre: not read: the site's robots.txt or the site itself refused our reader, and we never get around a refusal. 2026-11-09 · source
Inside the Android app
What an independent analysis of the published app file lists for Canva (Android version 2.384.0, report of 2026-11-03). A permission says what the app can ask the phone for, not what it does with it. A newer version may differ.
EU TRANSPARENCY REGISTER · 2026-05-17 · THE MAKER OF CANVA
Canva, Inc. declares spending between €100,000 and €199,999 in a year on lobbying the EU institutions (Jan 2025 to Dec 2025).
People it declares working on this, in full-time equivalents: 2.
What kind of figure: This is the company's own declaration. The register does not audit it, and it covers everything the company does, not this app alone. EU only.
Whole sentences copied exactly from Canva's own documents, grouped by subject. Their words, not yet tested: this is quotation, not a finding, and no jury has looked at it. Each sentence links to the archived copy it came from.
AI TRAINING ON YOUR CONTENT
"We will not use User Content of Canva Education for AI training."
"In this policy, a child is considered a person under the age of 13 years old (or the minimum legal age in the child’s country to be able to provide lawful consent to the processing of their personal data where the age is higher than 13 years old)."
"For purposes of these Terms, a child is a person under the age of 13 (or the minimum legal age required to provide consent for processing of personal data in the country where the child is located)."
"The award rendered by the arbitrator may include costs of arbitration, reasonable attorneys’ fees and reasonable costs for expert and other witnesses, and any judgment on the award rendered by the arbitrator may be entered in any court of competent jurisdiction."
"This information could include, but is not limited to, the user ID associated with your account (for example, your Facebook UID), an access token necessary to access that service, any information that you have permitted the third party to share with us, and any information you have made public in connection with that service."
"And if you choose to integrate with a third party application to incorporate elements into your designs, enhance media, supercharge your workflow or share to social media, we could receive data from such apps (as well as disclose data to such apps)."
"We share your information with Canva affiliates and third-party service providers for the purpose of providing the Service to you, to facilitate Canva’s legitimate interests or if you consent."
"We require that such parties comply with applicable laws, and have security, privacy and data retention policies consistent with our policies to the extent necessary for them to perform a business or technology support function for us."
"The Team Owner or any Team Administrator in your Team may also move, delete or edit any folders or items you share with them, or the Team.You should ensure that any personal information, confidential information, or User Content that you’d like to keep private is retained in a separate personal account."
"We also collect any messages you send us through the Service (such as user feedback, search queries and prompts), and may collect information you provide in User Content you post to the Service (such as text and photos you upload to use in your designs)."
"Summary: We collect info about you that you choose to give us, for example when you register an account, use the Service or otherwise interact with us."
We could not read Canva's terms of use on 2026-11-12: the site denied access to our reader, and we never get around a refusal. Not tested. The page we tried
Not being able to read a page is not a finding about it.
What changed in its policies
CANVA · PRIVACY POLICY
BEFORE · CAPTURED 2026-10-15"This Privacy Policy was last updated on August 25, 2026."
AFTER · CAPTURED 2026-11-07"This Privacy Policy was last updated on November 02, 2026."
Can ask for your microphone, nearby Bluetooth devices
9 kinds of data linked to you
Up to $300.00 for one in-app purchase
1 kinds of data used to track you across other companies' apps
