Privacy Policy

Drawberry · effective 27 August 2026 · last updated 6 September 2026

This Privacy Policy explains how Redo AI, Inc. ("Redo", "we", "us", "our") collects, uses, shares and protects information when you use the Drawberry mobile application (formerly "Draw It"), the Drawberry web links (for example a drawing shared at a /g/<code> address) and any related services (together, the "Service"). It also explains the choices and rights you have.

Redo AI, Inc. is a Delaware C corporation (Delaware file number 10054204) with its principal business address at Gaffel 9, 6003 EP Weert, the Netherlands. For the purposes of the EU and UK General Data Protection Regulation ("GDPR") and similar laws, Redo AI, Inc. is the data controller of the personal data described in this policy.

By using the Service you acknowledge that you have read this Privacy Policy. If you do not agree with it, please do not use the Service. Terms in capitals that are not defined here have the meaning given in our Terms of Service.

1. Summary

• Sign in with Apple or Google. We never see your password. On iPhone and iPad you sign in with Apple; on Android you sign in with Google. We receive an identifier issued by that provider and an email address — from Apple only if you choose to share it, and it may be an Apple private relay address.
• The game is the data. Your drawings, guesses, streaks, coins and who you play with are stored so the game can work between you and the people you play with.
• Ads in the free tier. The free version shows occasional full-screen ads served by Google AdMob. Personalised ads only happen if you say yes — to the tracking prompt on iPhone and iPad, and, where required, to the consent form on either platform. Premium removes ads entirely.
• We do not sell your personal data and we do not build advertising profiles of our own.
• You are in control. You can delete your account inside the app at any time, turn off nickname search, block and report players, and change ad-personalisation choices in your device settings.
• Questions? Email privacy@joinredo.com.

2. Information we collect

2.1 Information you give us

• Account data. Sign-in is handled by the provider your platform uses: Sign in with Apple on iPhone and iPad, Sign in with Google on Android. From Apple we receive a unique, app-specific user identifier and, if you allow it, the email address associated with your Apple ID (or an Apple "Hide My Email" relay address). From Google we receive the account identifier and the email address carried in a Google identity token, plus your given name, which is used only to pre-fill the nickname box and is never stored as your identity. We never receive or store your Apple or Google password.
• Profile data. The nickname you claim, your avatar colour, the paper tint you put on your canvas, your play language(s), any flag override you pick for a language, and your accessibility and play preferences (for example choice-based guessing, stroke stabilisation, haptic or spatial-audio replay).
• Game content. The drawings you make (stored as stroke data so they can be replayed), the words you are asked to draw, your guesses, and the free-text or reason you give when you report a drawing.
• Notification preferences. If you allow notifications, a push token for your device and your quiet-hours window so we do not disturb you at night. The app requests notification permission contextually, never at install.
• Communications. Anything you send us by email, including support and abuse reports.

2.2 Information generated by playing

• Social graph. Who you are paired with, friend requests you send or receive, invite links you create, players you block, and rooms you host or join.
• Progress and economy. Streaks and streak events, which belong to a pair and are shared with your partner; the coins in your own wallet and the ledger of how you earned and spent them; the items on your own shelf (brushes, palettes, papers, frames and league emblems); your artist rating used for Lightning Queue matchmaking; and queue tickets while you are waiting to be matched.
• Moderation records. Reports you make and reports made about your content, the outcome of any review, and blocks in either direction.
• Purchase records. Whether you own Premium, and the purchase, refund or revocation events that RevenueCat forwards to us (transaction identifiers and timestamps — never card or bank details).
• Voice guesses (optional). If you use voice guessing, the app records a short audio clip only while you hold the mic button and sends it to our server, which forwards it to Google's Gemini API to turn it into text. The clip is processed in memory and immediately discarded — we never store audio and it is not used to train AI models. What we keep is the same as for a typed guess (whether it was right) plus a count of the voice seconds you have used this month.
• Product analytics. We keep a first-party log of a short, fixed list of product events — for example that the app was opened, that a nickname was claimed, that an invite was accepted, or that a turn was submitted. Each row holds the event name, the time, your account identifier and a few non-identifying properties. It never holds your drawings, your guesses, your nickname or your email, and it never leaves our own database for an analytics company. Before you have an account, the first-launch event is recorded against an identifier the app generates for that installation — never the advertising identifier and never a device serial number. These rows are deleted after 90 days (section 7).
• Operational logs. Delivery logs for push notifications, a rate-limit log for nickname lookups and player search, and standard server logs (IP address, request time, device/OS type, app version, error traces) kept by our hosting provider to run and secure the Service.
• Crash and error reports. If the app crashes or hits an error, a report is sent to Sentry (Functional Software, Inc.) so we can fix it. It contains the error, the app version, the device model and OS version, and an identifier scoped to the installation — never your account id, nickname, email, drawings or guesses. Reports are stored in the EU.

2.3 Information collected automatically on your device

• Local app storage. The app keeps a small amount of data on your device (for example when the last ad was shown and how many turns you have completed) so that ad-frequency rules work offline. This data does not leave your device unless described elsewhere in this policy.
• Advertising identifiers. If you are on the free tier, the Google Mobile Ads SDK runs in the app. On iPhone and iPad it may collect your device's advertising identifier (IDFA) only if you grant permission in the App Tracking Transparency prompt. On Android it may collect the Google advertising ID, which you can reset or delete in Android Settings. On both platforms it also collects non-identifying device and ad-interaction information (device model, OS version, app identifier, coarse location derived from IP, ad impressions and clicks). See section 6.
• App updates. The app may use Expo Updates to fetch over-the-air fixes. That request includes your app version, platform and a runtime version so the right update is served.

2.4 Information from third parties

• Apple provides the sign-in identifier and optional email on iPhone and iPad, and processes payments made through the App Store.
• Google provides the sign-in identifier, email and given name on Android, and processes payments made through Google Play.
• RevenueCat sends us purchase, renewal, refund and revocation events for Premium, whichever store the purchase was made in.

2.5 Information we do not collect

We do not collect precise location, contacts, photos, camera data, health data, biometric data, browsing history outside the app, or financial account numbers. The microphone is active only while you hold the voice-guess button, and voice clips are never stored (see section 2.2). We do not ask for your date of birth. The web link viewer can be used without an account.

3. How we use information

We use the information above to:

• create and secure your account and sign you in;
• run the game — sync turns between you and your friends, replay drawings, check guesses, keep streaks and the coins in your wallet, match you in Lightning Queue and run Party Rooms;
• turn a spoken guess into text when you hold the voice-guess button, and meter the voice minutes included in your plan;
• show your nickname and drawings to the people you play with, and let people find you by nickname when you allow it;
• send push notifications you have asked for (for example "your turn", streak reminders) while respecting your quiet hours;
• unlock Premium after a purchase and remove ads for Premium players;
• show ads to free-tier players and measure them, within the limits described in section 6;
• moderate content, act on reports, enforce blocks and our Terms of Service, and keep the Service safe;
• prevent fraud, abuse, automated play and exploitation of bugs;
• measure how the Service is actually used — how many people finish onboarding, accept an invite or come back the next day — from the event log described in section 2.2;
• diagnose problems, maintain, improve and develop the Service;
• respond to your requests and communicate with you about the Service;
• comply with legal obligations and establish, exercise or defend legal claims.

We do not use your drawings or other content to train machine-learning models, and we do not sell or rent personal data to anyone.

4. Legal bases (EEA, UK and Switzerland)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Performance of a contract (Art. 6(1)(b)) — account, profile, game content, social graph, progress, purchases and notifications you enabled: everything needed to provide the Service you asked for.
• Consent (Art. 6(1)(a)) — personalised advertising and use of the advertising identifier, push notifications, and nickname discoverability. You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Legitimate interests (Art. 6(1)(f)) — non-personalised advertising to fund the free tier, security and anti-abuse measures, moderation, operational logging, service improvement and analytics that do not profile you, and defending legal claims. We have balanced these interests against your rights and you may object at any time (section 9).
• Legal obligation (Art. 6(1)(c)) — where we must keep records or respond to lawful requests.

5. How information is shared

5.1 With other players

• Your nickname, avatar colour and drawings are visible to the people you play with. That is the point of the game.
• In Lightning Queue you are matched with players you do not know. They see your nickname and your drawings for that match.
• In Party Rooms every member of the room sees the drawer's drawing and each other's nicknames and guesses.
• Daily Doodle. This is off unless you turn it on. When it is on, you are dealt your own random word to draw, and the drawing you make is put into a pool and shown to other players who have never drawn or guessed that word — people you have never played with. It is shown without your nickname; nobody is told who drew it. You can turn it off at any time in Settings, which also withdraws the drawings already in the pool. Anyone can report a pooled drawing, and a reported drawing disappears for everyone immediately.
• Leagues. If your pair takes part in the weekly league, the table shows your pair's two nicknames and its score to the other pairs in that league (about twenty). It shows nothing else: no profile to open, no way to contact you, and no drawings. Either player can hide the pair from leagues in one tap, and the pair still sees its own week.
• Ask a friend. When you are stuck, you can send the drawing you are looking at to someone else as a web link so they can try it. That link works like any other web link below — and it is the drawer's drawing you are passing on, so only send it to people you would show it to.
• Nickname search. Other players can find you by typing your nickname. You can turn this off in Settings ("Findable by nickname"). Search is rate-limited to prevent bulk enumeration.
• Web links. When you share a drawing link, anyone who opens the link can watch the drawing replay and guess in their browser. The link never reveals your email or your account identifier. On a link that carries a drawing made for sharing, a visitor who has guessed wrong three times is given one letter of the word, and after six wrong guesses may ask to be shown the word itself — so send those links to people you are content to have know the answer. A link that points at a live round in the app never gives out its word, to anyone, however many times they guess. Links expire; an expired link shows nothing.
• Your email address is never shown to other players.

5.2 With service providers (processors)

We use a small number of companies to run the Service. They process data only on our instructions and under contracts that require them to protect it.

5.3 Other disclosures

• Legal. We may disclose information if required by law, subpoena or court order, or where we believe in good faith that disclosure is necessary to protect the rights, safety or property of Redo, our users or the public, including to report child sexual abuse material to the relevant authorities as required by law.
• Business transfers. If Redo is involved in a merger, acquisition, financing, reorganisation or sale of assets, your information may be transferred as part of that transaction. We will notify you (for example in the app) before your personal data becomes subject to a different privacy policy.
• With your consent or at your direction.

We do not share personal data with data brokers, and we do not share it for cross-context behavioural advertising except as described for AdMob in section 6, which you control.

6. Advertising and tracking

The free tier of Drawberry is supported by advertising. This section explains exactly what happens.

• Who serves the ads. Ads are served by Google AdMob using the Google Mobile Ads SDK. Google acts as an independent controller for the data it collects through its SDK. Google's practices are described in its Privacy Policy and advertising page. You can manage Google ad settings at adssettings.google.com.
• What kind of ads. Full-screen interstitial ads shown only after a completed turn — never during drawing, guessing, a reveal, celebration or milestone. New players get several complete turns before the first ad, and ads are never shown more often than once every four minutes. Ads are requested with a maximum content rating suitable for a general audience.
• Tracking permission (iOS). Before any ad is requested, the app asks for permission under Apple's App Tracking Transparency framework. If you allow, Google may use your device's advertising identifier (IDFA) to show ads that are more relevant to you and to measure them across apps. If you decline, the IDFA is not available to Google and you will see non-personalised or contextual ads instead. Declining never makes ads more frequent. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking.
• Consent in the EEA, UK and Switzerland. If you are in a region where consent is required, Google's User Messaging Platform consent form is shown before personalised ads can be served. You can decline personalised ads and still play. You can revisit your choice from Settings inside the app.
• What Google receives. Device and ad-interaction information (device type and OS version, app identifier, coarse IP-based location, ad requests, impressions and clicks), and the IDFA only if you allowed tracking. Redo does not send Google your nickname, email, drawings or gameplay data.
• No ads for Premium. If you purchase Premium, the ad SDK is never asked for an ad again, in the same session the purchase completes.

7. Data retention

• Account and profile data are kept while your account exists.
• Drawings, guesses and streaks are kept while at least one participant still has an account, because they belong to the pair or room, not to one player. See section 8 for what happens on deletion.
• Your wallet, your shelf and your coin ledger belong to you alone and are kept while your account exists.
• Product analytics events are deleted 90 days after they are recorded.
• Web drawing links expire automatically; after expiry the page shows nothing.
• Queue tickets expire within seconds of inactivity and are deleted.
• Reports and moderation outcomes are kept for up to 24 months after the decision, or longer where needed to defend a legal claim or comply with law, so that repeat abuse can be recognised.
• Purchase and entitlement events are kept for as long as needed to honour your Premium entitlement and to meet tax, accounting and dispute-resolution obligations (generally 7 years).
• Server, push-delivery and rate-limit logs are kept for a short rolling period (typically no more than 90 days) unless needed to investigate abuse or a security incident.
• Support emails are kept for up to 24 months after the matter is closed.

8. Deleting your account

You can delete your account at any time from Settings → Delete account inside the app. No email or waiting period is required. When you do:

• your sign-in link to Apple or Google, your email address, nickname, avatar colour, push token, preferences and any open queue tickets and pending friend requests are erased immediately and every session on every device is signed out;
• your nickname becomes available for others to claim;
• you are removed from matchmaking and cannot be found by search;
• your shared history with other players survives with your identity removed: your former partner keeps the streak and the drawings you made together, and sees you as "A friend". Your own wallet, shelf and coin ledger are erased with your account. Deleting your account does not delete someone else's memories of the games you played together. If you want specific drawings removed as well, email privacy@joinredo.com and we will assess the request under applicable law;
• records we are legally required to keep (for example purchase records and moderation records for serious abuse) are retained in a form that is no longer linked to your live account.

Uninstalling the app does not delete your account. You can also revoke Drawberry's access in your Apple ID or Google account settings, but that alone does not remove your data — use the in-app deletion.

9. Your rights and choices

9.1 Choices in the app and on your device

• Nickname discoverability — Settings → "Findable by nickname".
• Notifications — iOS Settings → Notifications → Drawberry, or Android Settings → Apps → Drawberry → Notifications, and quiet hours in the app.
• Ad personalisation — on iPhone and iPad, iOS Settings → Privacy & Security → Tracking; on Android, Settings → Privacy → Ads, where you can delete or reset your advertising ID; and the consent settings inside the app where shown.
• Blocking and reporting — every drawing has a report button; any player can be blocked from the report sheet or Settings. Blocked players cannot be matched with you and cannot send you friend requests.
• Email sharing — choose "Hide My Email" at Apple sign-in to give us only a relay address. Google does not offer an equivalent, so an Android sign-in always gives us the account's address.

9.2 Rights under the GDPR, UK GDPR and similar laws

Depending on where you live, you may have the right to access the personal data we hold about you, to receive a copy in a portable format, to have inaccurate data corrected, to have data erased, to restrict or object to processing (including any processing based on legitimate interests), and to withdraw consent. You also have the right to lodge a complaint with a supervisory authority — in the Netherlands the Autoriteit Persoonsgegevens, in the UK the ICO, or the authority of the country where you live or work.

To exercise these rights email privacy@joinredo.com from the email address linked to your account, or tell us your nickname if you signed in with a relay address. We will respond within one month (extendable by two further months for complex requests, in which case we will tell you). We may need to verify your identity before acting. We do not discriminate against you for exercising your rights.

9.3 US state privacy rights (California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon and others)

Residents of certain US states have rights to know what personal information we collect, use and disclose; to access and delete it; to correct inaccuracies; to obtain a portable copy; and to opt out of the "sale" or "sharing" of personal information, targeted advertising and profiling. We do not sell personal information for money. Serving personalised ads through AdMob may count as "sharing" or "targeted advertising" under some state laws; you can opt out on iPhone and iPad by declining the tracking prompt (or turning it off in iOS Settings → Privacy & Security → Tracking), and on Android by deleting your advertising ID in Settings → Privacy → Ads, either of which stops the advertising identifier from being made available. We honour Global Privacy Control signals where technically applicable. You may designate an authorised agent to make requests on your behalf. If we deny a request you may appeal by replying to our decision; we will explain the outcome. California residents: the categories of personal information we have collected in the preceding 12 months are identifiers (your Apple or Google user id, nickname, email, push token, and the advertising identifier if allowed), customer records (purchase history), internet/app activity (gameplay, product events and ad interactions), and inferences limited to your artist rating for matchmaking. We disclose them to the service providers listed in section 5.2 for the business purposes described in section 3. We have not sold personal information in the preceding 12 months. We do not knowingly collect or sell the personal information of consumers under 16.

9.4 Brazil, Canada, Australia and elsewhere

If you live somewhere with other data-protection rights (for example the LGPD in Brazil, PIPEDA in Canada or the Privacy Act in Australia), you can exercise the rights available to you by contacting us at the same address. We will comply with applicable law.

10. International transfers

Redo AI, Inc. is a US company with operations in the Netherlands. Our providers store and process data in the United States and other countries that may not offer the same level of data protection as your home country. Where we transfer personal data out of the EEA, UK or Switzerland we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum) with each provider, and, where a provider is certified, the EU-US, UK and Swiss-US Data Privacy Framework. You can ask us for more information about these safeguards at privacy@joinredo.com.

11. Security

We protect your information with technical and organisational measures appropriate to the risk, including encryption in transit (TLS) and at rest, row-level security in our database so that players can only read the data they are entitled to, server-side validation of every game action, secret management for credentials, the principle of least privilege for our staff and providers, and logging of security-relevant events. Payments are handled entirely by Apple or Google; we never see card numbers. No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal data we will notify you and the relevant authorities as required by law. Please report security concerns to legal@joinredo.com.

12. Children

Drawberry is not directed to children under 13, and you must be at least 13 to use it (or at least 16 — or the age at which you can consent to data processing in your country — if you live in the EEA or UK and local law sets a higher age). We do not knowingly collect personal data from children below those ages. The advertising SDK is configured to request ads with a general-audience content rating. If you believe a child has created an account, email privacy@joinredo.com and we will delete the account and its data promptly.

13. Third-party links and services

The Service may open links to third-party sites (for example the App Store, Google Play, the stores' refund pages or Google's ad settings). Those sites have their own privacy policies, and we are not responsible for their practices.

14. Do Not Track

Browsers may send a "Do Not Track" signal. Because there is no common standard for it, the web link pages do not respond to it; they do not set tracking cookies and do not contain ad or analytics scripts.

15. Changes to this policy

We may update this policy from time to time. If we make material changes we will tell you inside the app (and by email where we have your address) before the change takes effect, and where required by law we will ask for your consent. The "last updated" date at the top tells you when it was last revised. Continued use of the Service after a change takes effect means the updated policy applies. Previous versions are available on request.

16. Contact us

Redo AI, Inc.
Gaffel 9, 6003 EP Weert, the Netherlands
Privacy requests: privacy@joinredo.com
Abuse and safety reports: abuse@joinredo.com
General questions: contact@joinredo.com

Legal notices may also be served on our registered agent in Delaware: Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, USA.

Questions? contact@joinredo.com · Privacy: privacy@joinredo.com · Abuse: abuse@joinredo.com