Privacy policy

1. Definitions

For clarity, here are the terms used in this policy:

• Application or Service: the DrawAnimator mobile app, available on iOS and Android.
• User, You: you, the parent or legal guardian using the app.
• Child: the child whose drawings are photographed and transformed into animations.
• Personal Data: any information that can identify you (email, name, photos, etc.).
• User Content: the drawing photos you submit and the generated videos.
• We, DrawAnimator: the app publisher, contact details in section 13.
• Third-party providers: partner companies that help us run the service (AI, storage, payments).

2. Data we collect

We only collect what's necessary to make the app work.

2.1 Account data

When you create an account via Apple Sign In or Google Sign In, we receive:

• Your email address
• Your name (if provided by the provider)
• A unique identifier from Apple or Google

We never see your password.

2.2 User content

• Drawing photos: the images you take or select from your camera roll.
• Generated videos: the animations produced by AI from those drawings.
• Generation settings: duration, chosen effect, Super Magic mode — used to produce the video.

2.3 Technical usage data

• Device type (iPhone, Android), OS version
• Device advertising identifier (if you allow it)
• IP address (collected only to secure our servers, no fine-grained geolocation)
• Error and performance logs to fix bugs
• App language (French, English, German)

2.4 Transaction data

• Credit purchase history (pack, date, amount)
• Current credit balance
• Transaction IDs from RevenueCat, the App Store, or Google Play

We never collect your credit card number. Payments are handled directly by Apple and Google.

2.5 Push notifications

If you accept notifications, we store a technical token (Expo Push token) to notify you when your animation is ready. This token contains no personal data.

3. How we use your data

Here's exactly what your data is used for:

• Make the app work: authenticate you, manage your credit balance, generate the videos you request.
• Generate animations: send your drawing to our AI engine to produce the video.
• Send notifications: let you know when an animation is ready.
• Improve the service: analyze errors and performance to fix bugs.
• Fight fraud: detect abuse and illegitimate usage.
• Meet legal obligations: taxes, responses to competent authorities.

We never use your child's drawings or the generated videos to train our AI models, for targeted advertising, or to resell to third parties.

4. Sharing with third parties

To run the app, some partners process data on our behalf. We've signed agreements with each of them to guarantee the same level of protection described here.

4.1 AI animation engine

The drawings you upload are transmitted to ByteDance / Seedance (a company based in Singapore) which generates the animated video via an AI model. The drawing is deleted on ByteDance's side once the video is produced. See their policy: bytedance.com/privacy.

4.2 Authentication

Apple and Google let you sign in with your existing identifier. They only send us the minimum information (email, name, identifier).

4.3 Payments

RevenueCat (United States) securely manages in-app purchases. Apple and Google handle the banking transaction directly — we never see your payment details.

4.4 Hosting

Our servers and file storage are hosted with Amazon Web Services (AWS) in secure data centers.

4.5 Notifications

Push notifications go through Expo Push, then Apple's APNs and Google's FCM services.

4.6 Other sharing cases

• Legal obligations: upon request from a competent public or judicial authority.
• Business transfer: in case of merger, acquisition, or asset sale, your data could be transferred. You would be notified beforehand.

We do not sell your data. We do not share with advertising networks.

5. Data retention

Each data type has a defined lifetime:

• Account and profile: as long as your account is active. Deleted within 30 days after account deletion.
• Uploaded drawings: kept on our servers for up to 90 days after generation, then deleted automatically. You can delete them manually anytime from the app.
• Generated videos: kept as long as you don't delete them. You can remove them anytime from the app.
• Transactions: kept 10 years to comply with French tax obligations.
• Technical logs: 30 days maximum.

6. International transfers

Some of our partners (ByteDance in Singapore, RevenueCat and AWS in the United States) process data outside the European Economic Area. These transfers are governed by:

• The Standard Contractual Clauses from the European Commission
• Additional technical measures (encryption in transit and at rest)
• Data Processing Agreements (DPA) signed with each partner

If you want to see our DPAs, contact us (section 13).

7. Security

We take security seriously:

• HTTPS/TLS encryption for all communications between the app and our servers
• At-rest encryption of files stored on AWS S3
• Restricted access to data by our employees (principle of least privilege)
• Mandatory two-factor authentication on internal tools
• Regular encrypted backups

No method is 100% secure. If a security breach affects your data, we'll notify you within 72 hours, in accordance with GDPR.

9. Your rights (GDPR)

If you reside in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights over your personal data:

• Right of access: get a copy of all data we hold about you
• Right of rectification: correct inaccurate data
• Right to erasure: delete your account and data
• Right to portability: receive your data in a structured, readable format
• Right to object: object to processing for legitimate reasons
• Right to restriction: temporarily restrict processing
• Right to withdraw consent anytime for consent-based processing

To exercise these rights, write to animatemydrawing.contact@gmail.com. We respond within 30 days.

You can also file a complaint with the CNIL (cnil.fr) or your country's data protection authority.

10. Account and data deletion

You can delete all your data anytime:

1. From the app: Profile > Delete my account
2. By email: write to animatemydrawing.contact@gmail.com

Deletion is effective within 30 days. Some data may be kept longer when required by law (e.g., invoices, for 10 years for tax reasons).

11. Cookies and trackers

In the mobile app: we don't use cookies. We only use the device's local storage to keep your session logged in and your preferences.

On this website: we only use strictly necessary technical cookies (session, security). No advertising cookies, no third-party behavioral tracking cookies.

12. Policy changes

We may update this policy to reflect technical, legal, or service developments. The last-update date appears at the top of this document.

Significant changes will be notified to you by email and via a banner in the app before they take effect.

13. Contact us

For any question about this policy or your data:

We respond to all requests within 30 days maximum.