Privacy Policy

1. Overview

Welcome to DrawLink ("we", "our", or "us"). DrawLink is a social drawing and creativity platform that lets you share drawings, connect with friends, participate in weekly drawing contests, and exchange messages. This Privacy Policy explains what personal data we collect, why we collect it, and how we use and protect it.

By downloading, installing, or using DrawLink, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the application.

2. Information We Collect

2.1 Information You Provide Directly

2.2 Information Collected Automatically

• Device information: Device type, operating system version, unique device identifiers (e.g., Expo push token).
• Usage data: Features used, screens visited, timestamps of actions (e.g., when a drawing was posted).
• Log data: Error logs, crash reports, and diagnostic information to help us fix bugs.

2.3 Information from Third Parties

If you sign in using a third-party identity provider (e.g., Apple, Google) in the future, we may receive basic profile information such as your name and email address from that provider, subject to the provider's own privacy policy.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate you securely.
• Display your profile, drawings, and activity to you and other users.
• Enable social features: friends, likes, weekly drawing contests, and leaderboards.
• Deliver private messages between you and your friends.
• Send you push notifications (friend requests, new messages, weekly drawing results, etc.).
• Improve and personalize the app experience.
• Monitor for abuse, fraud, spam, or violations of our Terms of Service.
• Comply with legal obligations.

We rely on the following legal bases under GDPR: performance of a contract (providing the service), legitimate interests (security, fraud prevention, product improvement), and consent (push notifications, optional profile details).

4. Sharing Your Information

We do not sell your personal data. We may share data in the following limited circumstances:

4.1 Service Providers

We use trusted third-party service providers (listed in Section 8) to operate our infrastructure. They process data only on our behalf and under our instructions.

4.2 Other Users

Information you post publicly (drawings, profile details, weekly contest entries) is visible to other DrawLink users. Private messages are visible only to you and the recipient.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of DrawLink, our users, or others.

4.4 Business Transfers

If DrawLink is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in advance.

5. User-Generated Content

DrawLink allows you to post drawings and photos. When you post content:

• Content you post to public areas (Discover feed, weekly drawing contests) is visible to all DrawLink users.
• Content shared with friends only is restricted to your friend list.
• You retain ownership of your original artwork. By posting, you grant DrawLink a non-exclusive, royalty-free licence to display your content within the app.
• You are responsible for ensuring your content does not infringe third-party rights or violate our Terms of Service.

6. Device Permissions

DrawLink requests the following device permissions:

All permissions are requested at runtime and can be revoked at any time through your device settings. Revoking a permission may limit certain features of the app.

7. Push Notifications

With your permission, DrawLink sends push notifications to alert you about:

• New friend requests and friend request acceptances.
• New private messages from friends.
• Likes and reactions on your drawings.
• Weekly drawing contest updates and results.

You can opt out of push notifications at any time via your device's notification settings (Settings › Notifications › DrawLink). You will still be able to use the app after opting out.

8. Third-Party Services

DrawLink uses the following third-party services that may process your data:

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services.

• Account data: Retained until you delete your account.
• Drawings and photos: Removed within 30 days of deletion.
• Messages: Retained while both parties have active accounts. Deleted messages are purged within 30 days.
• Log / diagnostic data: Retained for up to 90 days.

When you delete your account, we will permanently delete all associated personal data within 30 days, except where we are required by law to retain it.

10. Security

We implement industry-standard security measures to protect your data:

• Passwords are hashed and never stored in plain text.
• All data is transmitted over encrypted connections (HTTPS / TLS).
• Our backend (Supabase) enforces Row Level Security (RLS) policies ensuring users can only access data they are permitted to see.
• We regularly review our security practices and update them as needed.

While we take security seriously, no method of transmission or storage is 100% secure. If you suspect unauthorized access to your account, please contact us immediately at drawlink.support@gmail.com.

11. Children's Privacy

DrawLink is not intended for children under the age of 13 (or under 16 in certain jurisdictions, such as the European Economic Area). We do not knowingly collect personal information from children under these ages.

If we become aware that a child under the applicable age has provided us with personal information, we will take steps to delete that information and terminate the account as soon as possible.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at drawlink.support@gmail.com.

12. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten"). You can delete your account directly in the app via Settings.
• Portability: Request your data in a portable format.
• Objection / Restriction: Object to or restrict certain processing of your data.
• Withdraw Consent: Where processing is based on consent (e.g., push notifications), you may withdraw that consent at any time.

To exercise any of these rights, contact us at drawlink.support@gmail.com. We will respond within 30 days.

13. GDPR / International Users

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, DrawLink acts as the data controller for your personal data.

Where personal data is transferred outside the EEA (e.g., to Supabase servers), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs).

You have the right to lodge a complaint with your local data protection authority if you believe we have processed your data unlawfully.

14. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

• The right to know what personal information we collect and how it is used.
• The right to delete your personal information.
• The right to opt out of the sale of your personal information. DrawLink does not sell personal information.
• The right to non-discrimination for exercising your privacy rights.

To submit a CCPA request, contact us at drawlink.support@gmail.com.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via an in-app notification or by updating the "Last updated" date at the top of this page.

Your continued use of DrawLink after any changes are posted constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

• Email: drawlink.support@gmail.com
• App: DrawLink › Settings › Help & Support

We aim to respond to all inquiries within 30 days.