Privacy

What we keep about you

Only this:

• Your email address, so you can sign in.
• Your date of birth, so we know you meet the minimum age.
• Your time zone, because the daily attempts are counted in your day, not ours.
• Your nickname and the avatar you picked. That is the only part of you other people see.
• The photos of your drawings and the feedback on each one.
• Minimal technical data from each visit (IP address, browser, errors), so the app works and so we know when it breaks.

We do not keep your real name, your Google profile photo, your address, or your card details.

Who else touches your data

We cannot run this alone. These four companies provide services to us and, because of that, handle part of your data on our behalf:

Supabase

Stores the database and the drawing photos. The servers are in the sa-east-1 region (São Paulo, Brazil).

Vercel

Serves the website. It sees the technical data from each visit.

xAI

Grades the drawing. When you send a photo, that photo is sent to xAI: its model looks at it and returns the score and the comments. It is the only company we send your drawings to.

Paddle

Takes the payments and acts as the merchant of record. Paddle holds the card details; we never see them.

Your data leaves Ecuador

Supabase keeps the data in Brazil, and Vercel, xAI, and Paddle operate from the United States, so your data is handled outside Ecuador. We only work with providers that commit by contract to protecting it to the standard Ecuadorian law requires.

The photo of your drawing

The original photo stays in a private bucket: you can see it, and the team can see it if something needs checking. Nobody else can open it, not even with the link. If you choose to publish the drawing to the gallery, we make a separate copy for the public page and strip the EXIF data from that copy: the phone model, the time and, above all, where the photo was taken. The original photo is never the one that gets published.

How long we keep it

While the account is open we keep your profile, your drawings, and your feedback, because that is your progress. If you ask us to delete the account, we delete the profile, the photos, and the feedback within 30 days, and the backups are overwritten within 90 days. Payment records are kept by Paddle for as long as tax law requires, and that part is not ours to control.

What you can ask us for

In Ecuador, the Organic Law on Personal Data Protection (LOPDP) gives you the right to know what data we hold, ask for a copy, correct it, ask us to delete it, object to a particular use, and ask us to stop processing it. If you live in the European Union, the General Data Protection Regulation (GDPR) gives you those same rights plus the right to take your data to another service.

To ask for any of this, write to us from the contact page. We answer within 15 working days. If you are under 18, your parent or guardian can ask on your behalf.

Minimum age and parental consent

The minimum age for an account is 13. We do not yet have a way to ask for and verify an adult's consent, so we do not accept accounts for children under 13. If we find out about one, we close it and delete its data.

What we do not do

We do not sell your data or your drawings, we do not hand them to advertisers, and we do not use them to train models of our own. The photo goes to xAI for one purpose only: to get that drawing's feedback back.

Keep reading

• Contact
• Minors
• Terms and conditions