Legal

Privacy Policy — Draw Anything: Paint Canvas

Last updated 2026-09-29

Draw Anything ("the app") is made by VELOZ ("we", "us"). This policy explains what information the app collects, why, and the choices you have. If you have questions, write to hello@veloz.dev.

The short version:

  • Your drawings stay on your device. We don't upload your drawings or the photos you import to our servers.
  • There are no accounts. We never ask for your name, email or phone number.
  • We use trusted services for analytics, ads, notifications and purchases. They receive device identifiers and usage information, as explained below.
  • Ads are only personalized if you allow it, through Apple's tracking prompt and, where the law requires it, a consent form.

1. Information that stays on your device

  • Drawings, layers and imported photos. Everything you create is saved inside the app on your device. Photos you pick with the photo picker are copied into your drawing. The app never gets access to the rest of your photo library.
  • Saving to Photos. When you tap "Save to Photos", the app asks for permission to add images to your library. It can only add images, never read them.
  • Settings, streaks and stats. Your preferences, daily streak, drawing statistics and recent colors are kept on your device.
  • Widgets. Widgets show images of your drawings and today's drawing idea, using storage shared between the app and its widgets on your device.

If you delete the app, all of this is deleted with it, unless you saved or shared images elsewhere.

2. Information we collect and why

2.1Analytics: PostHog (United States)

We use PostHog to understand how the app is used and to improve it. It receives:

  • A random identifier created by the app. It isn't linked to your identity.
  • Events about how you use the app, for example which onboarding steps you finish, your score on the drawing test, which tools you use, paywall views and purchases, and how much ink you've drawn.
  • The answers you give in the onboarding (what you want to draw and your skill level).
  • Device information: device model, iOS version, app version, language, and approximate location derived from your IP address (country or city level).
  • Session recordings: screenshots of the app's screens while you use it, which can include your drawings and imported photos. Text you type is masked. We use these only to find bugs and improve the design.

2.2Advertising: Google AdMob (Google LLC)

Free versions of the app show ads. Google may collect your device's advertising identifier (IDFA, only if you allow tracking), your IP address, device information and your interactions with ads. It uses them to show, measure and, with your consent, personalize ads. In the European Economic Area, the UK and Switzerland, a consent form from Google lets you choose how your data is used for ads. See Google's policy: policies.google.com/technologies/ads.

2.3Notifications: OneSignal (United States)

If you allow notifications, OneSignal receives a push token for your device, a OneSignal ID, device information, and whether you have PRO. We use it to send notifications. For example, if you started a free trial offer but didn't subscribe, you may get one reminder. Reminders about your free trial are scheduled on your device itself.

2.4Purchases: Apple and RevenueCat (United States)

Payments are handled entirely by Apple; we never see your payment details. RevenueCat helps us check your subscription and purchase status. It receives your App Store purchase receipts, an anonymous app user ID, and the analytics and notification identifiers above, so we can connect purchases to app usage.

2.5Remote settings

The app downloads settings from PostHog, such as which plan is pre-selected and how often ads appear. This uses the same random identifier.

3. Tracking and Apple's App Tracking Transparency

When the app first opens, iOS asks whether the app may track you. If you choose "Ask App Not to Track", the app can't access your advertising identifier and ads are not personalized with it. You can change this at any time in Settings → Privacy & Security → Tracking.

4. How we use information

  • To provide the app and its features, and to unlock PRO or remove ads after a purchase
  • To understand usage, fix bugs and improve the app
  • To show ads in the free version
  • To send notifications you agreed to receive
  • To prevent fraud and comply with legal obligations

We don't sell your personal information for money. Personalized advertising through Google may count as "sharing" under some US state laws. You can stop it by denying tracking, as described above.

5. Legal bases (EEA, UK and Switzerland)

We rely on your consent for personalized ads, tracking and notifications. We rely on our legitimate interests for analytics and improving the app. Where it applies, we rely on performing our contract with you for purchases and PRO features. You can withdraw consent at any time.

6. How long we keep data

Data on your device stays until you delete it or the app. Analytics data is kept by PostHog for up to 7 years (event data), and session recordings are kept for a much shorter time (usually 30–90 days). Other providers keep data according to their own policies. We delete or anonymize data when it's no longer needed.

7. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or get a copy of your personal data, and to object to or limit how it's used. To exercise these rights, email hello@veloz.dev. Because there are no accounts, please describe your device and roughly when you used the app so we can try to find your data.

You can also:

  • Deny tracking (see section 3)
  • Turn off notifications in Settings → Notifications → Draw Anything
  • Reset your advertising identifier or limit ad tracking in iOS Settings
  • Delete the app to remove all data stored on your device

8. Children

Draw Anything is made for a general audience and is not directed at children under 13, or the minimum age in your country. We don't knowingly collect personal information from children. If you're a parent and think your child has given us information, contact us and we'll delete it.

9. International transfers

Our service providers may process data in the United States and other countries. Where required, transfers are protected by safeguards such as the European Commission's Standard Contractual Clauses.

10. Security

We use providers with industry-standard security, and data is sent over encrypted connections. No method of transmission or storage is completely secure.

11. Changes to this policy

We may update this policy. When we do, we'll update the date at the top, and for significant changes we'll let you know in the app.

12. Contact

VELOZ
Email: hello@veloz.dev