Your Consent

Dudel Draw (Silly Little Apps LLC) ("we," "us," or "our") takes your privacy seriously. This Privacy Policy explains how we collect, use, and share information about you when you use our iOS app (the "App"). By using the App, you acknowledge that you have read and understand this Privacy Policy. Where we ask for your specific permission for something, such as sending push notifications, we describe that separately below.

Dudel Draw is a daily drawing challenge app. As the App has grown, it now includes an optional account system, cloud-synced drawings, a paid subscription tier (Dudel Club), and push notifications. This policy describes what information is collected as a result of those features and how it's handled.

Until you choose to sign in, your drawings and gameplay data remain stored locally on your device and are not uploaded to our cloud backend, and no account is created. If you create an account via Sign in with Apple, we assign your account a unique identifier through our authentication provider (Firebase Authentication, operated by Google). When you sign in with Apple, we also receive the name and email address you choose to share (this may be a private relay address if you use Hide My Email). They are stored with your account by our authentication provider and used only to identify and support your account. We never receive your Apple ID password.

A short version of this identifier is shown to you in the App as a "Support ID" so our support team can look up your account if you contact us.

Daily Challenge drawings: if you're a Dudel Club member, your current Daily Challenge drawing may be uploaded to our cloud storage automatically in the background (so it can be checked for updates on your other devices), or when you manually tap "Sync to Device." Pulling a newer drawing down onto a device always requires your tap to confirm; nothing is pulled without your action. This feature is limited to Dudel Club members, and free users generate no sync activity at all.
‍
‍Sketchbook: if you are a Dudel Club member, drawings you choose to save to your Sketchbook are stored in our cloud storage (Firebase Cloud Storage/Firestore) so they persist across app reinstalls and are available to you going forward.
‍
‍Avatar: if you create a custom avatar, it is stored in our cloud storage and associated with your account.

We do not browse or view your artwork except when reasonably necessary to maintain, debug, secure, or support the App, and we do not sell or share it with third parties. It is stored so that it can be retrieved through your account, and other App users cannot access it.

If you're signed in, we store gameplay metadata associated with your account, such as:

If you're signed out, your streak is stored only on your device and is not sent to us. Streak-milestone app icons are also handled entirely on your device.

Dudel Club subscriptions are processed through Apple's In-App Purchase system and managed via our subscription management provider, RevenueCat. RevenueCat receives purchase/transaction identifiers and subscription status in order to verify your entitlement to Dudel Club features. We do not receive your payment details (card numbers, etc.); these are handled entirely by Apple.

Notifications are only available after you sign in. If you then enable them, your device receives a push token (via Apple Push Notification service and Firebase Cloud Messaging), which we associate with your account so we can deliver app-related notifications, such as streak reminders, Streak Freeze alerts, feature announcements, or other updates about the App. We do not use this token for any other purpose. When you sign out, the token is removed from your account and deleted from your device. You can disable notifications at any time in your device's Settings.

The App does not include any third-party analytics SDK, and we do not collect analytics about how you use the App ourselves.

Our subscription provider, RevenueCat, gives us reports on Dudel Club subscriptions, such as how many members are active, renewing, or canceling. We use these reports only to manage and improve Dudel Club.

Apple provides us with aggregated App Store Analytics (e.g., app units, sessions, and retention trends) through App Store Connect, as part of Apple's standard platform services for all developers. This data is aggregated and anonymized by Apple and is not accessible to us in a form that identifies you individually. Apple's privacy practices for this data are governed by Apple's own Privacy Policy.

We do not use any third-party crash reporting tool of our own (such as Crashlytics). If you've opted in to "Share With App Developers" in your device's Privacy settings, Apple may provide us with aggregated, anonymized crash and diagnostic reports through App Store Connect. This is controlled entirely by your device settings and Apple's own privacy practices, not by us. See Apple's Privacy Policy for details.

We do not use third-party analytics or advertising SDKs, and we do not sell any information to third parties. We do not track you across third-party apps or websites, and we do not collect or use Apple's Identifier for Advertisers (IDFA). We do not "sell" or "share" your personal information as those terms are defined under California privacy law (including for cross-context behavioral advertising).

We use the information described above only to:

We rely on the following companies to operate the App.
‍
‍Service providers (process data on our behalf, under our direction):
‍
‍Google Firebase (Authentication, Firestore, Cloud Storage, Cloud Functions, App Check, Cloud Messaging): hosts your account identifier, drawings, avatar, and gameplay data, and delivers push notifications to signed-in accounts. See Google's Privacy Policy.
‍
‍RevenueCat: manages subscription/entitlement verification for Dudel Club and provides us with subscription reports. RevenueCat receives your app user ID and purchase/transaction data needed to verify your subscription status. We do not enable any advertising, attribution, or marketing integrations within RevenueCat, so no advertising identifier (IDFA) or similar device identifier is collected or shared through this service. See RevenueCat's Privacy Policy.
‍
‍Platform services (Apple's own services, governed by Apple's practices rather than provided on our behalf):
‍
‍Apple: provides Sign in with Apple, In-App Purchase processing, push notification delivery (APNs), and aggregated App Store Analytics and crash/diagnostic data (see "Analytics" above). See Apple's Privacy Policy.

We do not permit these providers to use your data for their own advertising purposes.

We may disclose information when we believe it's necessary to comply with applicable law, enforce our legal rights, protect the security of the App, or protect the rights and safety of our users or others.

If Silly Little Apps LLC is ever involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information associated with the App may be transferred as part of that transaction, subject to applicable law.

Your data is stored using Google Firebase infrastructure. Access to your drawings, avatar, and account data is restricted from other users through server-side security rules; no other user of the App can read or write your data. As the operator of the App, Silly Little Apps LLC retains administrative access to our backend infrastructure (as is standard for any app with cloud-connected accounts), which we use only for maintenance, debugging, responding to support requests, and complying with legal obligations. We do not browse, view, or use your drawings or personal content for any other purpose. All data is transmitted over encrypted connections (HTTPS/TLS). We use Apple's App Attest / App Check to help ensure that only our genuine App can write to our cloud services.

No method of transmission or storage is 100% secure, but we take reasonable steps consistent with industry practice to protect your information.

We retain your account and cloud-stored data (drawings, avatar, streak/progress data) for as long as your account remains active, or as needed to provide you with the App's services. We do not currently have an automatic inactivity-based deletion process; your data remains until you delete your account.

You can delete your account at any time from within the App (Profile → Delete Account).
Deleting your account will:

Subscriptions are managed through your Apple ID and must be canceled separately via Settings → [Your Name] → Subscriptions on your device, or through the App Store. We recommend canceling any active subscription before or after deleting your account.

Account deletion requests are processed immediately in our active systems and cannot be undone. We keep backups of our cloud data so we can recover from technical problems, and copies of your data may remain in those backups for up to 30 days after you delete your account, after which they are permanently removed. During that time, we also keep a minimal record of your deleted account identifier (with no other account content) so that deleted data is never restored from a backup. Backups are not used to restore deleted accounts. Our service providers may also keep limited system logs according to their own retention practices.

Depending on where you live, you may have rights regarding your personal information, such as the right to access, correct, export, or delete the data we hold about you. You can exercise most of these directly in the App or by contacting us:

‍Access/Export: contact us at the email below and we can provide a copy of the data associated with your account.
‍Correct: Dudel Club members can update their Avatar at any time directly in the App. Sketchbook drawings are locked and can't be edited once saved, but you can delete a saved drawing at any time and save a new one for that shape. For anything else, contact us directly.
‍Delete: use Profile → Delete Account in the App (see "Data Retention & Your Choices" above), or contact us directly.

To exercise any of these rights, or if you have questions about them, email us at contact@sillylittleapps.com. We will respond within a reasonable timeframe consistent with applicable law.

Dudel Draw is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Before you create an account, the App asks for your birth month and year to confirm you are at least 13. Your answer is checked only on your device to determine which features are available to you; it is not sent to or stored on our servers. If you indicate you are under 13, account creation and account-based features (Sketchbook, Avatar, cross-device sync, and Dudel Club) are unavailable, and you can continue using the App's local features, which do not create an account or upload your drawings.

If a parent or guardian believes a child under 13 has created an account, please contact us at contact@sillylittleapps.com so we can delete the associated data.

Our cloud infrastructure is hosted primarily in the United States. Our other service providers (RevenueCat, Apple) may process and store information on servers located in the United States and other countries. By using the App, you acknowledge this transfer, storage, and processing.

We may update this Privacy Policy as our data practices change. We will update the "Last updated" date above when we do, and for material changes we will make reasonable efforts to notify users, such as through App Store release notes, an in-app notice, or the updated date on this policy.

If you have any questions or concerns about this Privacy Policy or our privacy practices, or to request deletion of your data, please contact us at contact@sillylittleapps.com.