Last updated: 12 October 2026
1. Who we are
AR Drawing is operated by Halima Belmatrag, based in Morocco ("we", "us", or "our"). This policy explains how information is handled when you use our iOS app, including its drawing tools, AI generation, advertising, subscriptions, and support services.
For privacy questions or requests, contact belmatraghalima@gmail.com. Halima Belmatrag is responsible for the personal information processed for the purposes described in this policy.
2. Information handled by the app
Drawing content and information stored on your device
The app stores information needed for your experience, including imported reference images, generated sketches and their prompts, favorites, drawing settings, onboarding preferences, and notification preferences. These are stored in the app's local files, database, or settings.
Camera-based drawing and alignment use the live camera view on your device. The current app does not upload this camera feed to our AI service. Photo-to-sketch conversion, including supported foreground/background processing, also runs on your device; selecting a photo for this feature does not send it to Replicate.
When you record a drawing session, the recording is processed locally and can be saved to Photos with your permission. The app's recording feature does not record microphone audio. Saving or sharing a drawing or recording may create a separate copy outside the app, which is subject to the settings and policies of the destination you choose
Local app data and Photos may be included in device or cloud backups according to your Apple settings. We do not operate an account-based cloud library for your sketches in the current app.
Information you send for AI generation
Text-to-sketch generation sends your text prompt, selected style, difficulty, and generation parameters to our Google Cloud Functions backend, which forwards the generation request to Replicate. The app retrieves the generated image and saves a copy locally so you can use it in your library.
Prompts can contain personal information if you choose to include it. Avoid entering confidential information, sensitive personal information, or information about other people that you do not have permission to share. You can use the local drawing and photo-processing features without submitting an AI prompt.
We use AI requests to provide the generation feature you request. The current app does not submit training jobs to Replicate or upload your photo library to train a model. This does not represent a broader guarantee about every provider's independent data practices; see the provider information below.
Usage analytics and onboarding answers
We use Mixpanel to understand app usage and improve the app. Events may describe screens and features opened, sketch categories and items selected, onboarding progress, plan selections, purchases and restores, drawing actions, ad interactions, generation attempts and failures, and recording actions. These events can include timestamps, app/device information, a pseudonymous installation or user identifier, and subscription status.
Onboarding answers, such as how you found the app, your selected gender, drawing interests, and preferred features, are stored locally and sent to Mixpanel as event and profile properties. They help personalize the experience and understand users' preferences. These records are not necessarily anonymous simply because they do not include your name.
For text generation, the app's analytics events record characteristics such as prompt length, selected style, difficulty, and success or failure. The current analytics event implementation does not deliberately include the full prompt or image content in those events.
Advertising and privacy choices
The free version uses Google AdMob for banner, native, rewarded, and rewarded interstitial advertising. Google and advertising partners may process IP addresses, device or app identifiers, ad impressions and interactions, diagnostic information, and other advertising-related information. An approximate region may be inferred from network information such as your IP address.
We use Google's User Messaging Platform (UMP) to manage advertising privacy choices and display applicable privacy messages. Advertising requests are gated by UMP's consent state. The choices and messages available can depend on your region and the advertising configuration.
On iOS, access to the advertising identifier for tracking is subject to Apple's App Tracking Transparency permission. You can refuse tracking permission and change it later in iOS Settings. Refusing this permission does not stop every form of data processing, including subscription administration, requested AI processing, or app analytics.
The app does not request GPS or other precise location permission. References to approximate location in this policy concern network-derived location, rather than a location-based drawing feature.
Purchases and subscriptions
Apple processes in-app payments. We do not receive your full payment-card details. The app uses StoreKit and RevenueCat to verify and restore purchases and determine access to subscription features.
RevenueCat processes purchase and subscription records, transaction information, app user identifiers, and related technical information. The app uses a RevenueCat-generated identifier without requiring you to create a named account. The app also enables Apple's AdServices attribution token collection through RevenueCat to help attribute eligible installs to Apple advertising campaigns. AdServices attribution is separate from the AdMob advertising identifier and ATT choices.
Support and network requests
If you email us, we receive your email address, message, and any attachments or other information you choose to provide. We use this information to respond and resolve your request.
The app makes network requests to retrieve ad configuration from GitHub-hosted resources, download supported fonts from Google-hosted resources, obtain AI results, and communicate with service providers. The services receiving those requests necessarily receive network information such as your IP address and may keep operational logs. Opening external links or using your email or sharing app is also subject to that service's privacy practices.
3. Why we use information
We use information to provide drawing and generation features; save your choices and library; verify subscriptions; deliver and measure advertising; understand feature usage and improve reliability; respond to support and privacy requests; and meet legal obligations or address misuse and security incidents.
Where applicable law requires a legal basis, requested app services and subscription administration may rely on performance of a contract; required records may rely on legal obligations; and proportionate security, support, and product-improvement processing may rely on legitimate interests, subject to your rights. Consent is required for processing where applicable law requires it, including relevant advertising/tracking and nonessential analytics. Permission to access the camera or Photos is specific to that access and is not blanket permission for unrelated uses.
4. Who receives information
We disclose information needed for the relevant services to the following providers:
Apple: Payments, StoreKit, system permissions, and applicable device services. Apple Privacy Policy (https://www.apple.com/legal/privacy/)
Google AdMob and UMP, and applicable advertising partners: Advertising delivery, measurement, and advertising privacy choices. Google Privacy Policy (https://policies.google.com/privacy)
Mixpanel: Usage events, onboarding profiles, and product analytics. Mixpanel Privacy Policy (https://mixpanel.com/legal/privacy-policy/)
RevenueCat: Purchase verification, subscriptions, and attribution. RevenueCat Privacy Policy (https://www.revenuecat.com/privacy)
Google Cloud / Firebase Cloud Functions: Handling and forwarding AI generation requests. Firebase Privacy Information (https://firebase.google.com/support/privacy)
Replicate: Running AI generation requests and returning generated images. Replicate Privacy Policy (https://replicate.com/privacy)
Information sent to these providers may include personal information or pseudonymous identifiers; it is not limited to aggregated statistics. Providers' roles and obligations depend on the service and applicable agreements.
We may also disclose information when legally required, to protect people or legal rights, or in connection with a business transfer, subject to applicable protections and notice requirements.
5. Retention and deletion
Local content: App-managed files and preferences can remain on your device while the app is installed. Removing an item from the library does not necessarily erase every underlying file or cache immediately. Deleting the app, rather than merely offloading it, removes its local app container. Photos exports, shared copies, and backups are separate and must be managed through their respective services.
AI processing: Our Firebase backend does not deliberately maintain a persistent content library of submitted prompts or generated outputs. Infrastructure providers may retain operational or security logs separately. Replicate's published API policy states that prediction input parameters, output values, files, and prediction logs are removed after one hour by default. This provider-side retention is separate from the generated copies saved on your device. See Replicate's data-retention documentation (https://replicate.com/docs/topics/predictions/data-retention).
Analytics, advertising, purchases, and support: Retention varies by provider and data type. We retain information under our control for the time needed for the purposes above, including measuring app usage, resolving support matters, maintaining or restoring subscription access, addressing disputes, and meeting applicable recordkeeping obligations. Where information is no longer needed, it should be deleted or de-identified, subject to legal requirements and backup cycles. Contact us for information about retention applicable to your records or to request deletion.
Uninstalling the app stops its future activity on that installation, but does not automatically delete records already held by providers or cancel an Apple subscription. Manage or cancel subscriptions through your Apple subscription settings.
6. Your choices and rights
- Change camera, Photos, notification, and tracking permissions in iOS Settings.
- Where required and available, use Privacy choices in the app's Settings to revisit advertising consent.
- Avoid cloud AI generation if you do not want to send a prompt for processing.
- Manage local drawings, exported Photos, and backups through the app and your device settings.
- Email belmatraghalima@gmail.com for privacy information, access, correction, deletion, objections, or other requests concerning information under our control.
Depending on your location, you may have rights to access, correct, delete, receive or transfer information, restrict processing, object to particular processing, or withdraw consent. Withdrawal does not affect processing already lawfully carried out. Advertising disclosures can fall within special definitions of "sale", "sharing", or targeted advertising under some laws, even without a payment for the information; where those laws apply, you may have corresponding opt-out rights.
We may need proportionate information to verify a request or locate records associated with an app identifier. Please do not send passwords or full payment-card details. We will respond within applicable legal time limits and explain any lawful limitation. You can also complain to the relevant supervisory authority, including Morocco's CNDP (https://www.cndp.ma/), or your local authority where applicable.
7. International processing
We are based in Morocco, and our service providers may process information in other countries, including the United States. Privacy laws may differ between countries. International processing is subject to applicable transfer requirements and provider arrangements. Contact us for information about safeguards relevant to your data.
8. Children
AR Drawing is intended for people aged 13 or older. It is not intended for children under 13. Some drawings may appeal to younger people, but this does not change the intended age group.
We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate deletion or other protective steps. Additional parental-permission or age-related rules may apply to users under the age required by local law.
9. Security
We use reasonable measures appropriate to the information handled, including HTTPS for app service requests and local app storage protections provided by iOS. No transmission or storage method can guarantee absolute security. Your device security, sharing choices, and backup settings also affect protection of local content.
10. Changes and contact
We may update this policy when app features, providers, or legal requirements change. We will revise the date above and provide additional notice or request new consent where required. Continued app use is not a substitute for consent where the law requires a specific choice.
Privacy contact: Halima Belmatrag, Morocco — belmatraghalima@gmail.com.