Privacy Policy

This Privacy Policy describes how Drawing Joy ("Drawing Joy", "we", "us", or "our") collects, uses, and protects your personal information when you use our website and services.

Effective Date: May 2026

Information We Collect

We collect information that you provide directly to us, including:

Account information: email address, name, and profile picture (when signing in via Google).
Payment information: processed securely by our third-party payment provider (Stripe). We do not store your full credit card details.
Content you create: photos you upload, drawing prompts, and generated drawings.
Communications: any correspondence you send to us.

We also collect certain information automatically:

Usage data: pages visited, features used, and interactions.
Device information: browser type, operating system, IP address.
Cookies and similar technologies: for session management, authentication, and analytics.
Referral data: UTM parameters and referral source.

How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our drawing generation services.
Process transactions and manage your account and credits.
Authenticate your identity and secure your account.
Send transactional emails (login codes, purchase confirmations).
Analyse usage trends to improve our platform.
Detect and prevent fraud, abuse, and security incidents.
Comply with legal obligations.

Your Content and Creations

Drawings generated using Drawing Joy are yours. We do not claim ownership over your creations.

Third-Party Services

We use trusted third-party service providers:

Authentication: Google OAuth for social login.
Payments: Stripe for secure payment processing.
AI Generation: We use advanced AI models via third-party infrastructure to generate drawings.
File Storage: Cloudflare R2 for secure storage of uploaded photos and generated drawings.
Hosting and Infrastructure: cloud hosting providers.
Analytics: anonymised analytics to understand usage patterns.

Data Retention

We retain your personal data for as long as your account is active. If you request deletion, we will remove your data within 30 days.

Data Security

We implement industry-standard security measures including:

HTTPS encryption for all data in transit.
Secure authentication mechanisms.
Access controls limiting who can access your data.

Your Rights

Depending on your jurisdiction, you may have rights to:

Access: request a copy of your personal data.
Rectification: request correction of inaccurate data.
Erasure: request deletion of your personal data.

Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children.

Cookies

We use cookies for:

Essential cookies: authentication, session management, security.
Analytics cookies: to understand how our service is used.
Preference cookies: to remember your settings (dark mode, language).

Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes.

Policy last updated: May 2026

For questions, please contact us using the contact page at the bottom of our website.