Privacy Policy

Account Information

• Email address — used for authentication and account recovery.
• Display name — chosen by you, visible to your session partner.
• Profile image — optional, stored on our servers and visible to your session partner.

Content You Create

• Drawings — created using the in-app canvas, stored on our servers.
• Background images — photos you attach to drawings, stored on our servers.
• Drafts — saved on our servers and cached locally on your device.

Technical Information

• Device push tokens — used solely to deliver push notifications when your partner sends a new drawing. These include Firebase Cloud Messaging tokens and, on iOS 18 and later, Apple Push Notification widget tokens.
• Firebase Authentication identifiers — generated automatically to manage your signed-in session.

We use your information to:

• Provide and maintain the App’s core functionality (creating sessions, sharing drawings, delivering notifications).
• Authenticate your identity and secure your account.
• Send push notifications when your session partner creates a new drawing.
• Display your content in the App’s home screen widget.

We do not use your information for advertising, profiling, or selling to third parties.

• Your data is stored using Google Firebase services (Authentication, Firestore, and Cloud Storage), hosted on Google Cloud infrastructure.
• Data is transmitted over encrypted connections (HTTPS/TLS).
• Session content is accessible only to the participants of that session.
• Profile images are stored in Firebase Cloud Storage linked to your account.
• Local data (drafts, cached preferences) is stored on your device using App Group shared storage and Keychain.

We do not sell, rent, or share your personal information with third parties, except:

• Firebase / Google Cloud — as our infrastructure provider for authentication, data storage, and push notifications.
• Apple — push notifications are delivered through Apple’s Push Notification service.
• RevenueCat — processes subscription status for in-app purchases. RevenueCat receives an anonymous app user ID; no personal information is shared.

The App uses Firebase Analytics to collect basic, anonymous usage data such as app opens and feature engagement. This data is aggregated and does not identify individual users. No third-party advertising or tracking SDKs are used.

• Your data is retained as long as your account is active.
• When you delete your account, your profile, posts, and stored images are permanently removed from our servers.
• Leaving a session permanently deletes your posts from that session.
• Session deletion by the session creator permanently removes all content within that session.

You have the right to:

• Access your data through the App at any time.
• Update your display name and profile image.
• Delete your account and all associated data from within the App.
• Leave any session, removing your content from it.

The App is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. Changes will be reflected by the “Last updated” date at the top of this page. Continued use of the App after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, contact us at onlyvatana22@gmail.com.