Privacy Policy
This privacy policy applies to the Doodle Together app for mobile devices, together with any related services operated by Packet Bracket (collectively, the "Application"). Packet Bracket is hereby referred to as the "Service
Provider".
Information Collection and Use
The Application lets you send drawings to friends you choose, which appear on their home screen widgets and, if they turn it on, their lock screen. To do this, some information has to be stored online. The Service Provider
uses Google Firebase to store it.
Account
- When you first open the Application, an anonymous account is created for you automatically. You do not need an email address or phone number to use the Application.
- You choose a display name (it does not have to be your real name) and an emoji avatar with a colour. These are shown to the friends and groups you connect with.
- Each account gets a random invite code. Anyone you give your code, invite link or QR code to can connect with you.
- Optional Google sign-in: if you choose to link a Google account (so you can keep your data on a new phone), Firebase Authentication receives your Google account identifier and email address. They are used only to sign you
in. They are not shown to your friends.
- During setup you confirm that you are 13 or older. Your date of birth is not asked for or stored.
Content you create and send
- Drawings: the image of each drawing and its stroke data (used to replay how it was drawn), together with the friends or group it was sent to, the time it was sent and, if used, the daily prompt.
- Photo backgrounds: if you add a photo behind a drawing, only that one photo (chosen with Android's photo picker, or taken with your device's camera app) is sent with the drawing. The Application cannot see your other photos
and does not have the camera permission itself.
- Reactions, love taps, guess-mode words and guesses, countdown titles and dates, group names.
- Friendship data needed for the features: which accounts are connected, your streak with each friend, the day you last sent a drawing, and when you were last active (shown to your friends).
- Blocks and reports: the accounts you block, and, if you report a drawing, the drawing, its sender and the reason you chose. Reports are reviewed by the Service Provider to enforce the rules against harmful content.
Content you send is delivered only to the friends or group members you choose. It is not public.
The Application uses the following device features:
- Notifications: to tell you when a friend sends a drawing or a love tap, and to remind you about your streak. Optional; you can turn them off at any time.
- Photo picker / camera app: only when you choose to add a photo to a drawing or to the lock screen.
- QR code scanner: to add a friend by scanning their QR code. Scanning is done by Google Play services' code scanner on your device; the Application receives only the scanned code, not camera images.
- Set wallpaper: only if you turn on Lock screen mode. The newest drawing a friend sent you is then shown on your lock screen, on a gradient or on a photo you choose. That photo is kept only in the Application's private
storage on your device. Please remember that anyone who can see your phone can see your lock screen and home screen widgets.
- Vibration: for love taps and haptic feedback.
- Save to gallery: drawings and replay videos are saved to your device's gallery only when you ask for it.
Information stored on your device
The following information is stored on your device, inside the Application's private storage: your settings, your friends list, your drawing history (drawings you sent and received), widget settings, and the lock screen photo
if you chose one. Android backup is turned off for the Application.
Services that receive data
To provide its features, the Application uses the following services, which process data on the Service Provider's behalf:
- Google Firebase (Authentication, Cloud Firestore, Cloud Messaging): stores your account, profile, drawings and the other content described above, and delivers notifications. Data is stored on Google servers in the United
States.
- Firebase Crashlytics: collects crash reports and diagnostic information (such as device model, operating system version and the state of the Application at the time of a crash) to fix problems.
- Google Analytics for Firebase: collects information about how the Application is used (such as screens opened and features used) and device identifiers, to improve the Application.
- Cloudflare Workers: when you send a drawing, love tap or reaction, a small relay running on Cloudflare checks that you really sent it and asks Firebase Cloud Messaging to notify your friends. It receives your account
identifier, the item's identifier, your display name and your friends' notification tokens. It does not store them.
- Google AdMob (advertising): the Application shows ads to users who have not bought Pro. AdMob may collect and use your device's Advertising ID, IP address, and information about ad interactions to show, measure and (where
you allow it) personalise ads. In the European Economic Area, the UK, Switzerland and US states with privacy laws, you are asked for your choice through Google's consent form before any ad is requested, and you can change it
at any time in Settings → Ad privacy choices. You can also reset or delete your Advertising ID in your device settings.
- Google Play Billing: handles the one-time Pro purchase. The Service Provider does not receive your payment details; the Application only receives a confirmation of the purchase.
- Google Play In-App Review: may ask you to rate the Application.
These services are operated by their providers under their own privacy policies:
- Google (Firebase, AdMob, Google Play services): https://policies.google.com/privacy
- How Google uses information from apps that use its services: https://policies.google.com/technologies/partner-sites
- Cloudflare: https://www.cloudflare.com/privacypolicy/
Third Party Access
The Service Provider does not sell or rent your personal information. Apart from the service providers described above, which receive only what they need to provide their function, and the friends and group members you choose
to send content to, your information is not shared with third parties.
The Service Provider may disclose information:
- as required by law, such as to comply with a subpoena, or similar legal process;
- when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud or abuse, or respond to a government request.
International Data Transfers
Your information is stored and processed in the United States and may be processed by the service providers above in other countries outside your country of residence, including outside the European Economic Area (EEA). These
providers apply appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission or adequacy decisions, as described in their own privacy policies.
Your Rights
You are in control of your information:
- You can change your display name and avatar at any time in Settings.
- You can unfriend or block any account, hide or report any drawing, and leave any group.
- You can turn off notifications, Lock screen mode and personalised ads at any time.
- You can delete your account at any time in Settings → Delete account. This permanently deletes your profile, invite code, every drawing you sent (including their files), your friendships, your group memberships and your
sign-in account from the Service Provider's servers. If you no longer have the Application, you can ask for your account to be deleted by emailing packetbracket@gmail.com.
- Uninstalling the Application, or clearing its data, deletes everything stored on your device. Without a linked Google account, an anonymous account cannot be recovered after that.
Depending on where you live (for example in the EEA, the UK or California), you may also have the right to access, correct, export or delete your personal information, and to object to or restrict its processing. To use these
rights, contact the Service Provider at packetbracket@gmail.com.
Your California privacy rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to correct it, the right to opt out of the sale or sharing of personal
information, and the right to non-discrimination for exercising these rights. The Service Provider does not sell personal information. Advertising partners may use device identifiers for personalised advertising, which may be
considered "sharing" under California law; you can opt out in Settings → Ad privacy choices. To exercise your rights, contact the Service Provider at packetbracket@gmail.com.
Data Retention Policy
- Drawings sent by free users: deleted from the servers 90 days after they were sent.
- Drawings sent by Pro users: kept until the sender deletes their account.
- Love taps: deleted from the servers as soon as they are delivered.
- Account, profile, friendships and groups: kept until you delete your account.
- Reports: kept for as long as needed to review them and keep the Application safe.
- Information stored on your device: kept until you delete it, clear the Application's data or uninstall the Application. Drawings a friend has already received also stay in that friend's history on their own device.
- Crash reports, analytics and advertising data: kept by Google in accordance with its own retention policies.
- Emails you send to the Service Provider: kept only for as long as needed to respond to you, or as required by law.
Children
The Application is intended for users aged 13 and older (or the higher minimum age required in your country) and is not directed at children. The Service Provider does not knowingly collect personal information from children
under 13. If you are a parent or guardian and believe your child has provided personal information through the Application, please contact the Service Provider at packetbracket@gmail.com so that it can be deleted.
User Content and Safety
You are responsible for the drawings and other content you send. Do not send content that is harmful, hateful, sexual or that harasses others. Every received drawing can be reported and every friend can be blocked inside the
Application. Reported content is reviewed, and accounts that break these rules may be removed.
Security
Your information is sent over encrypted connections (HTTPS/TLS) and stored on Google Firebase, where access is limited by security rules: only you and the friends or group members you send content to can read it. Information
on your device is kept in the Application's private storage, protected by your device's screen lock and encryption. No method of transmission or storage is completely secure, but the Service Provider works to protect your
information.
Data Breach Notification
If a data breach occurs that affects your personal data held by the Service Provider, the Service Provider will notify you and the relevant authorities in accordance with applicable legal requirements.
Changes
The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with a new effective date. Previous versions of this Privacy
Policy are available on request at packetbracket@gmail.com.
This privacy policy is effective as of 2026-10-31
Your Consent
By using the Application, you agree to the processing of your information as described in this Privacy Policy. Optional permissions and features such as notifications, photos and Lock screen mode are used only when you choose
them, and you can withdraw your consent at any time in the Application's settings or your device settings.
Contact Us
If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at packetbracket@gmail.com.