Privacy Policy

Last updated: October 1, 2026

Who We Are

This Privacy Policy applies to the gesture drawing practice app ("the App"), a timed reference tool for figure artists, character designers, animators, and art students.

The Short Version

We do not sell your data or serve ads. We use PostHog to understand how the App is used and to catch crashes; it never sees your drawings or reference images. Your drawings, study sessions, and cached reference images stay in your browser. When you add Pinterest or Sketchfab sources, the URLs you paste may be processed by our server to look up public board or collection metadata and image links — we do not store your artwork on the server.

When you choose to share a study, your drawing, your display name and avatar, and a link to the reference you used are uploaded to our servers and shown to other users. Sharing is opt-in per drawing. You can delete any shared study, or your whole account, at any time.

What Data the App Uses

Reference Images

Images you load into the App — from local device folders, Pinterest boards, or Sketchfab collections — are downloaded into your browser and stored locally using IndexedDB. They are not uploaded to our server for storage.

When you paste a Pinterest board or profile URL, or a Sketchfab collection URL, our server receives that link so it can return public metadata and direct image or embed URLs. That processing is temporary and used only to load references into your session.

At your direction, the App can load images from Pinterest boards you link to.

If you connect a Pinterest account through Pinterest's official OAuth 2.0 flow, you sign in directly with Pinterest — we never see your Pinterest password. Pinterest may issue an access token that is stored on the server running the App so it can read your boards and pins on your behalf. We use that access only for this purpose and do not sell or share it.

Pinterest is governed by Pinterest's Privacy Policy.

Sketchfab Content

Sketchfab 3D models are loaded through Sketchfab's viewer and public Data API. Our server may receive collection URLs you paste in order to list public models in that collection. Model viewing is handled by Sketchfab's embedded player; we do not download or host Sketchfab model files on our server.

Sketchfab is governed by Sketchfab's Privacy Policy.

Drawings and Annotations

All drawings, canvas strokes, scratchpad content, and study session data you create in the App are stored locally on your device via IndexedDB. None of this is transmitted to us for storage.

Session and Settings Data

App settings, session state, deck position, timer preferences, and training regiment presets are stored locally in your browser's localStorage.

Face Detection

The App includes an optional face detection feature powered by face-api.js, which identifies facial landmarks in reference images to display proportion guides. All face detection processing happens entirely on your device. No images or facial data are transmitted anywhere.

Sharing & Public Content

When you share a study, the following becomes visible to other users of the App:

Your drawing — the artwork you created. It is uploaded to and stored on our servers (via Supabase) so it can appear in the feed.
Your profile — the display name and avatar you choose.
A reference link — a URL pointing to the reference you studied. We store the link, not the reference image. We do not upload, host, or display the reference image itself on any public surface; reference images are shown only privately, inside your own drawing pad, loaded by your device when you choose to open them.

Sharing is opt-in per drawing. References stored on your device (local folders) and references from a connected Pinterest account are never shared — only links you add yourself, or Sketchfab embeds, can be attached to a shared study.

Drawing together (multiplayer and device sync). When you join a session with someone else, your strokes travel through our relay to the other people in that room. The relay only forwards those frames to the room's other participants; it does not read them, and it does not write them to a database or any file. A room lives in memory for as long as people are connected and is discarded after an hour of inactivity, so nothing from a session remains on the server once it ends. What you draw is still saved on your own device, exactly as it is when you draw alone.

User Content, Rights & Takedowns

You are responsible for the content you post and represent that you have the rights to share it. If you believe content in the App infringes your copyright, contact us at drawlabapp@gmail.com and we will respond under our notice-and-takedown process. We remove infringing content on valid notice and may terminate repeat infringers. You can report or block other users' content from within the App.

Accounts & Deletion

Using the social features requires an account (handled via Supabase authentication). You can delete your account at any time from the Community panel; deletion removes your profile, your shared studies, your uploaded drawings, and your reports/blocks from our servers.

Usage Analytics and Crash Reports

We use PostHog (servers in the United States) to see which features get used, where people get stuck, and when the App crashes or errors. This helps one person decide what to fix next. It collects:

Events we choose to send, such as "app opened", "first stroke", "study session started", "theme changed", or "drawing time ran out" — with details like which mode or theme, never the content of your drawings.
Error and crash reports (error messages and where they happened).
Session replays of the App's interface: a recording of menus, buttons and layout changes, used to reproduce bugs. Every image is blocked, the drawing canvas is never recorded, and anything you type into a field is masked. Your drawings and reference photos are never part of a replay.
Basic technical data PostHog collects with any event: device and browser type, screen size, approximate location from your IP address, and a random identifier stored in your browser.
If you sign in, these events are linked to your account and email so a bug report can be matched to you. Signed-out use stays anonymous.

We do not use PostHog for advertising, and we don't share it with advertisers. If your browser sends Do Not Track, the App sends nothing to PostHog. To have your analytics data deleted, email us (below).

What Data We Do Not Collect

We do not require an account to practise. Signing in is needed to keep your drawing allowance across devices, buy a plan, or share studies.
We do not serve advertisements
We do not sell data to third parties
We do not build advertising profiles or track behavior across other sites
We do not store your drawings on our server unless you choose to share them. Drawings you don't share stay on your device. Downloaded reference images are never stored on our server.

Third-Party Services

The App uses these services:

Pinterest — for board and pin references you choose to load
Sketchfab — for 3D model references you choose to load
Supabase — authentication, database, and storage for the optional social features (profiles, shared drawings, reference links)
PostHog — usage analytics, crash reports and interface replays (see above)
Stripe — payments, if you buy a plan (see Payments)

We are not responsible for the privacy practices of these third-party platforms.

Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect any information from children.

Changes to This Policy

If this policy changes materially, we will update the "Last updated" date at the top of this document. Continued use of the App after changes constitutes acceptance of the updated policy.

Payments

If you buy a plan on the web, payment is handled by Stripe. Your card details go straight to Stripe; we never see or store your full card number. We keep only what's needed to unlock your plan: your account ID, the Stripe customer ID linked to it, which plan you have, and until when it's active. Stripe keeps its own payment records as required by law.

Contact

If you have questions about this Privacy Policy, contact us at: drawlabapp@gmail.com