Privacy Policy

DrawRabbit is made by PLOREC LTD (company number 10527882), registered at Unit 22, Cariocca Business Park, 2 Sawley Road, Manchester M40 8BB, United Kingdom. We are the controller of the information described here.

The short version. DrawRabbit has no accounts and no advertising. What you do in the app stays on your device, with three exceptions: anonymous usage statistics, crash reports and, if you choose to send one, a gift.

What stays on your device

• Your lesson progress, stars and streak.
• Photos you add to your Journal, kept in the app's own storage. We can't see them. A photo only leaves your device if you send it as a gift (below).
• Your sound, reminder and notification settings.

Deleting the app removes all of it.

The camera and your photos

DrawRabbit asks for the camera and your photo library only so you can photograph or add a drawing you have finished. If you decline, everything else in the app still works.

Notifications

If you allow notifications, we use them to remind you to practise and, if you send a gift, to tell you when it arrives. You can turn them off at any time in your device settings.

Usage statistics and crash reports

To improve the app we record which screens and lessons are used, the answers you pick in the questions when you first open the app (for example how much you've drawn, why you want to draw, and your age band), and when the app crashes. These are tied to a random ID created on your device, never to a name, email or advertising ID, and they aren't used to track you across other apps or websites. Our providers are PostHog (statistics, stored in the EU) and Sentry (crash reports, stored in the United States).

Gifts

You can wrap a drawing you have finished as a gift and send it to someone with a link.

If you send a gift

• Before a photo can be sent, your iPhone checks it for nudity using Apple's own check, which runs on your device (where that check is turned on in your iPhone's settings). The photo isn't sent anywhere to be checked. A photo that doesn't pass can't be sent.
• The photo, the names you type and your message are encrypted on your device before they leave it. The key that opens them is part of the link you share and is never sent to us by your device, so we can't see them, unless the person you sent it to reports the gift and chooses to include them (below). The encrypted copy is deleted after a year, or after 90 days if nobody sends a gift back.
• The link's preview picture shows the wrapped present and who it's for (for example "For Grandma"). We keep that first name so we can tell you when your gift arrives ("Grandma received your drawing"). It is deleted with the gift.
• If you allow notifications, we keep a notification token so we can tell you when your gift arrives or a gift comes back. It is deleted with the gift.
• If someone sends you a gift back, your first name (as you typed it) goes with their payment to Stripe so their receipt can say who it's for. It isn't kept by us, and it's removed from the payment at Stripe once the receipt has been sent.
• Nobody can send you messages through DrawRabbit.

If you receive a gift

• You can send a gift back: DrawRabbit Pro for the person who sent it. You pay us through Stripe, who handle your payment details; we never see card numbers. We use your email only to send your receipt and remove it from our records once it has been sent. We use your approximate location (country, region and postcode area) to charge the right tax; if your country can't be told from your connection, Stripe receives your IP address to work it out instead. Stripe keeps its own records of the payment.
• The first name of the person you're giving to (for your receipt) is stored with your payment at Stripe, not by us, until your receipt has been sent; then it's removed.
• Your receipt contains a restore code, which moves the gift to a new device if the person you gave it to gets one. When the gift is delivered, DrawRabbit Pro is unlocked through RevenueCat using an anonymous ID.
• You can report a gift from its page. If you choose, your report includes the drawing and message (the link's key), so we can see them. We delete the key once we've dealt with the report, or when the gift is deleted if that's sooner. We keep a record of each report (which gift, the reason you chose, when, and what we did). We may remove a reported gift and stop the device that sent it from sending more: to keep that block in place, we keep that device's anonymous app ID.

If you buy DrawRabbit Pro on our website

• You pay through Stripe, who handle your payment details; we never see card numbers. We use your email only to send your receipt and code, and remove it from our records once it has been sent. We use your approximate location (country, region and postcode area) to charge the right tax; if your country can't be told from your connection, Stripe receives your IP address to work it out instead. Stripe keeps its own records of the payment.
• When the code is entered in the app, DrawRabbit Pro is unlocked through RevenueCat using that install's anonymous ID, which we keep with the purchase so the code can move it to a new device.
• The page records which steps were taken (viewed, a plan chosen, paid), without names or emails, so we can see how it's working.

Our drawing guides

The step-by-step drawing pages (drawrabbit.com/how-to-draw/…) use no cookies. They record which steps were taken on the page (opened, the steps reached, the draw-along started or finished, the App Store button), and which website you came from, without names, emails or anything that identifies you, so we can see which guides help. The draw-along runs in your browser and keeps your place there only.

For every gift we keep a short log of what happened to it (made, opened, paid for, and so on) without names, emails, photos or messages, for up to a year, so we can fix problems.

Purchases in the app

Subscriptions bought in the app are processed by Apple. We never see your payment details. RevenueCat tells the app whether DrawRabbit Pro is active; it receives an anonymous ID and the purchase receipt, not your name or email. Their privacy policy is at revenuecat.com/privacy.

Children

DrawRabbit is made to be enjoyed by children and grown-ups. The app doesn't ask anyone for a name or an email. When it first opens it asks for an age band (Under 18, 18–24, 25–34, 35–44 or 45+), never an exact age or a date of birth; the answer is kept with the usage statistics under the random ID, never with a name. A child's gift photo and message are encrypted so we can't read them (unless a report includes them), and the first names typed for a gift are kept only as long as the gift needs them.

Who helps us

• Cloudflare: hosting, with gift data stored in the EU.
• Stripe: payments and tax for gifts.
• RevenueCat: unlocking DrawRabbit Pro.
• Resend: receipt emails.
• Expo and Apple: notifications.
• PostHog: anonymous usage statistics.
• Sentry: crash reports (stored in the United States).
• ntfy: tells us when a gift is sent or opened (no names, photos or messages).

Our database provider keeps backups for up to 30 days, so something we delete can stay in a backup for that long before it's gone for good.

Your rights

You can ask what we hold about you, and for it to be corrected or deleted, by writing to hello@drawrabbit.com. Because DrawRabbit has no accounts, tell us your gift's link or restore code if your question is about a gift. You can also complain to the Information Commissioner's Office at ico.org.uk.

Changes

If this policy changes, the new version will appear on this page with an updated date.