Privacy Policy

1 Information We Collect

Information You Provide Directly

When you create an account or join our waitlist, we may collect:

• Email address
• Display name or username
• Profile avatar (if you choose to upload one)
• Password (stored securely using industry-standard hashing)

Information We Collect Automatically

When you use the DrawMe app or visit our website, we may automatically collect:

• Device type, operating system, and app version
• Usage data such as features accessed and predictions generated
• IP address and approximate geographic location (country/city level)
• Crash reports and performance diagnostics

Information From Third Parties

If you choose to sign in using Google OAuth, we receive your name and email address from Google in accordance with the permissions you grant during that authentication flow.

2 How We Use Your Information

We use the information we collect to:

• Create and manage your DrawMe account
• Deliver the core features of the app — number generation, draw history, statistics, and saved favourites
• Process and manage your Premium subscription through RevenueCat
• Send you important service updates, launch notifications, and early access communications (you can opt out at any time)
• Improve the app's performance, fix bugs, and develop new features
• Comply with our legal obligations under New Zealand law
• Detect and prevent fraudulent or abusive activity

We do not use your personal information for advertising purposes, and we do not sell your data to third parties.

3 Information Sharing

We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:

Service Providers

We work with trusted third-party providers who process data on our behalf under strict data processing agreements:

• Appwrite — backend infrastructure, database, and authentication
• RevenueCat — subscription and payment management
• Google — OAuth sign-in (only if you choose this option)

Legal Requirements

We may disclose your information if required to do so by law, or in response to valid legal requests from public authorities (e.g. a court order or government agency), including to meet national security requirements.

Business Transfers

If DrawMe is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.

4 Data Storage & Security

Your data is stored securely on Appwrite infrastructure. We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/HTTPS
• Secure password hashing (bcrypt)
• Access controls limiting who within our team can view your data
• Regular security reviews of our infrastructure

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

5 Your Rights

Under the New Zealand Privacy Act 2020, you have the following rights regarding your personal information:

• Access — You may request a copy of the personal information we hold about you
• Correction — You may request that we correct any inaccurate or incomplete information
• Deletion — You may request that we delete your account and associated personal data
• Portability — You may request your data in a structured, machine-readable format
• Opt-out — You may unsubscribe from marketing communications at any time via the link in any email we send

To exercise any of these rights, please contact us at the address below. We will respond to your request within 20 working days as required by the Privacy Act 2020.

6 Cookies & Tracking

Our website uses minimal browser storage. Specifically:

• localStorage — we use localStorage solely to remember the waitlist spot counter display on your browser. No personal information is stored in localStorage.
• We do not use advertising cookies, third-party tracking pixels, or behavioural analytics tools.
• We do not use Google Analytics or similar surveillance-based analytics platforms.

If you clear your browser's local storage, the counter will reset on your next visit. This has no effect on your waitlist registration.

7 Children's Privacy

DrawMe is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately so we can remove that information from our systems.

Users between 13 and 18 should use DrawMe only with parental or guardian consent.

8 Third-Party Services

DrawMe integrates with the following third-party services. Each has its own privacy policy that governs how they handle data:

• Appwrite Privacy Policy
• RevenueCat Privacy Policy
• Google Privacy Policy

We encourage you to review these policies. We are not responsible for the privacy practices of these third-party services.

9 Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, sending you an email notification.

We encourage you to review this Privacy Policy periodically. Your continued use of DrawMe after any changes constitutes your acceptance of the updated policy.

10 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please contact us: