Doodlesake
Privacy policy
Last updated 14 October 2026
Doodlesake is made by 01001011 Stam BV, [address], the Netherlands (Chamber of Commerce number [KvK number]), called "we" in this policy. We are the controller of the personal data described here. Privacy questions and requests: privacy@doodlesake.app. Help with the app: support@doodlesake.app.
The short version
- Your drawer lives on your phone. Nothing leaves it unless you sign in to back it up.
- We don't show ads, don't sell data, and don't track you across other apps or websites.
- Films are made on your phone. If we ever make them on a server, we will ask you first and send only the one drawing and its story, never your child's name or age.
- You can export everything, and delete your account and backup, from inside the app.
Who the app is for
Doodlesake is for parents and carers. An adult sets it up, adds children, signs in and buys films. Children may look at their drawings and films with you, but the app never asks them for any information.
What we collect, and why
Without an account
Everything stays on your phone: your children's first names, birth month and year, photos of their art, titles and stories. We receive none of it. We do receive anonymous usage events and error reports (see "Analytics and errors").
With an account
An account is optional. You need one to back up your drawer, move it to a new phone, and make films.
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Email address (from Apple, Google or the address you type) | Signing in and account emails | Contract |
| Account id | Linking your backup, purchases and films to you | Contract |
| Children's first names, birth month and year, titles, dates, story lines | Backing up your drawer and restoring it on another phone | Contract |
| Photos of drawings and crafts | Same | Contract |
| Purchases (subscription status, film packs) and films used | Giving you the films you paid for | Contract |
| Your agreement to the film notice (date and version) | Proof that you agreed before your first film | Legitimate interest |
We ask for a birth month and year, not a full date of birth, because that is enough to show a child's age on each piece.
To stop the free films from being claimed again and again, we keep a one-way hash of each email address that has received them, also after the account is deleted. It cannot be turned back into the address.
Films
In this version of the app, films are made on your phone from the drawing and its three-line story. Nothing is sent to an AI provider.
We plan to make films on our servers with an AI video service. Before we do, we will update this policy, name the provider, and ask for your agreement in the app before your next film. We would send only the chosen drawing and a short description of how it should move: no names, no ages, no other drawings and not your email.
Analytics and errors
We use PostHog (EU servers) to see which features are used and to catch crashes. Events describe actions such as "artwork saved" or "film requested", with counts and choices. They never contain names, photos or story text. Before you sign in they are linked to a random install id; after you sign in, to your account id, never your email. We do not record your screen or sessions. Legal basis: our legitimate interest in keeping the app working and improving it. There is no switch in the app; to object, email privacy@doodlesake.app and we will stop analytics for your account.
This website
doodlesake.app sets no cookies and runs no analytics or advertising scripts. Our host, Cloudflare, processes your IP address to deliver the pages and protect them from attacks.
If you join the waitlist, we store your email address with our email provider, Resend, to send you one message when the app is out. Legal basis: your consent. Every email has an unsubscribe link, and we delete the list after launch.
Who processes data for us
| Provider | What for | Where |
|---|---|---|
| Supabase | Accounts, backup database and photo storage | EU (Ireland) |
| RevenueCat | Checking purchases with Apple and Google | United States |
| PostHog | Analytics and error reports | EU |
| Cloudflare | Hosting this website | Worldwide network |
| Resend | Waitlist emails | United States |
| Apple and Google | App stores, payments, Sign in with Apple and Sign in with Google | Their own privacy policies apply |
Each provider works under a data processing agreement with us. Transfers outside the EU rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
How long we keep it
- Your backup stays until you delete it or your account.
- Deleting your account (in the app under Settings, Account and backup, Delete account, or by asking on our delete account page) removes your photos and all backup data straight away. The copy on your phone stays until you delete it there.
- Purchase records are kept as long as Dutch tax law requires (7 years).
- Analytics events are deleted after [12 months].
- The waitlist is deleted after the launch email is sent.
Your rights
You can ask to see, correct, export or delete your data, to restrict its use, or object to analytics. Most of this you can do yourself in the app: Export everything, edit any piece, Delete account. For anything else, email privacy@doodlesake.app. We reply within one month. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Security
All connections are encrypted. Each account can only read its own data, enforced in the database. Photos are kept in private storage and only reachable through short-lived links.
Changes
If we change this policy in a way that matters, we tell you in the app before the change takes effect.