Skip to content

Privacy Policy

Last Updated: February 2026

Introduction

NomadLink ("we," "our," or "us") operates the DrawToLife mobile application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using DrawToLife, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access the application.

Information We Collect

Information You Provide to Us

Account Information

  • Email address (required for account creation; or OAuth token via Google/Apple Sign-In)
  • Password (stored securely with encryption, if using email sign-up)
  • User ID (automatically generated)
  • Device identifier (for Guest Mode users without an account)

User-Generated Content

  • Original drawings/images uploaded to the app
  • Transformation style preferences (Photorealistic, Pixar 3D, Anime, Watercolor, Claymation)
  • Generated images stored locally and synced to cloud storage
  • Stories, story characters (names, extracted images), and story parts
  • Videos generated via Movie Director mode

Child Profile Information

  • Display name and emoji avatar for each child profile
  • Association of transformations, stories, and achievements to individual profiles
  • Up to 10 child profiles per account

Purchase Information

  • In-app purchase history (credit packs and subscriptions)
  • Transaction records (processed through Apple App Store/Google Play Store)
  • Subscription status and renewal dates
  • Credit balance and usage

Engagement Data

  • Achievement progress and unlocked achievements
  • Collectible sticker collection
  • Daily challenge completion history

Information Collected Automatically

Usage Data

  • App interaction data (features used, frequency of use)
  • Transformation types selected
  • Story and video creation activity
  • Error logs and crash reports

Analytics Data

  • Anonymous usage events tracked via Amplitude Analytics within the app
  • Feature engagement metrics (e.g., transformations created, stories started, videos generated)
  • No personally identifiable information is sent to Amplitude
  • The DrawToLife website uses Plausible Analytics, a privacy-friendly, cookieless analytics tool that collects no personally identifiable information

Device Information

  • Device type and model
  • Operating system version
  • App version

Information from Third-Party Services

Payment Processing

  • Apple/Google handle all payment processing (including subscriptions)
  • RevenueCat manages subscription status and entitlements
  • We do not store credit card or payment method details

AI Processing

  • Google Gemini API processes image transformations, character extraction, and story generation
  • xAI API processes video generation (Movie Director mode)
  • Images and content are sent for processing and immediately deleted after generation
  • These providers do not retain your content beyond the processing duration

Authentication Providers

  • Google Sign-In (OAuth token exchange)
  • Apple Sign-In (nonce-based authentication, iOS only)
  • Only authentication tokens are shared; passwords are never sent to these providers

How We Use Your Information

We use the collected information for the following purposes:

Service Provision

  • Enable account creation and authentication (email, Google, or Apple Sign-In)
  • Provide Guest Mode access via device identifier
  • Process image transformations through Gemini API
  • Generate stories, characters, and story parts through Gemini API
  • Generate videos through xAI API
  • Manage credit balance, purchases, and subscriptions
  • Sync transformations, stories, and videos across devices via cloud storage
  • Track achievements, stickers, and daily challenge progress
  • Manage child profiles and per-profile galleries

Service Improvement

  • Analyze anonymous usage patterns via Amplitude to improve features
  • Debug and fix technical issues
  • Develop new transformation styles and features

Communication

  • Send service-related notifications
  • Respond to support inquiries

Legal and Safety

  • Comply with legal obligations
  • Enforce our Terms & Conditions
  • Protect against fraudulent activity

Data Storage and Security

Storage Locations

  • User Data: Stored securely on Supabase servers (SOC 2 Type 2 compliant)
  • Images: Stored locally on your device and synced to Supabase cloud storage for backup and cross-device access
  • Stories & Characters: Stored locally (SQLite) with automatic cloud sync when online
  • Videos: Stored locally and synced to cloud storage
  • Authentication: Managed through Supabase Auth with industry-standard encryption
  • Guest Data: Associated with device identifier; migrated to account upon sign-up

Security Measures

  • All data transmissions are encrypted using TLS/SSL
  • Passwords are hashed using bcrypt
  • Secure API authentication tokens
  • OAuth tokens used for Google/Apple Sign-In (nonce validation for Apple)
  • Cloud storage secured with authenticated access policies

Data Retention

  • Account data is retained while your account is active
  • Transformation history is stored locally and in cloud storage until manually deleted
  • Stories, characters, and videos are retained until manually deleted
  • Credits and subscription information retained until account deletion
  • Guest Mode data is retained on device and associated with device identifier

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information only in the following circumstances:

Service Providers

  • Supabase (database, authentication, and cloud storage)
  • Google Gemini API (image transformation, character extraction, and story generation — temporary processing)
  • xAI API (video generation — temporary processing)
  • RevenueCat (subscription and purchase management)
  • Amplitude (anonymous in-app analytics)
  • Plausible Analytics (anonymous, cookieless website analytics)

Legal Requirements

  • When required by law or legal process
  • To protect our rights, privacy, safety, or property

Business Transfers

  • In connection with merger, acquisition, or sale of assets
  • Users will be notified of any change in ownership

Children's Privacy

DrawToLife is designed to be family-friendly and safe for children.

  • Age Requirements: Users must be 13+ years old, or 4+ with parental supervision
  • Parents/guardians must create and manage accounts for children under 13
  • Child profiles allow parents to organize each child's content separately
  • We do not knowingly collect personal information from children under 13 without parental consent
  • No social features, no communication between users, no external links
  • No advertising or behavioral tracking
  • Zero ads throughout the entire app
  • Content moderation to ensure child-appropriate transformations and story generation

If you believe we have inadvertently collected information from a child under 13 without proper consent, please contact us immediately at admin@nomadlink.tech or admin@nomadlink.tech.

Your Rights and Choices

Access and Control

  • View and edit your account information
  • Access your transformation, story, and video history
  • Download your images and videos at any time
  • Delete individual transformations, stories, or videos
  • Manage child profiles and their associated content

Account Deletion

  • Request complete account deletion through app settings
  • All associated data (account, transformations, stories, videos, child profiles) will be permanently removed from our servers
  • Local device data remains until manually deleted or the app is uninstalled

Data Portability

  • Export your transformed images and videos at any time
  • Save images directly to device photo library
  • Share creations via device sharing options

International Data Transfers

Our servers are located in the United States. If you access DrawToLife from outside the United States, your information may be transferred to, stored, and processed in the United States.

Third-Party Services

Our app integrates with the following third-party services:

California Privacy Rights (CCPA)

California residents have additional rights:

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt-out of the sale of personal information (we do not sell personal information)
  • Right to non-discrimination

European Privacy Rights (GDPR)

EEA residents have additional rights:

  • Right to access your personal data
  • Right to rectification
  • Right to erasure
  • Right to data portability
  • Right to object to processing

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

  • Posting the new Privacy Policy in the app
  • Updating the "Last Updated" date
  • Sending an email notification for significant changes

Contact Information

For questions about this Privacy Policy, please contact us at:

Email: admin@nomadlink.tech or admin@nomadlink.tech
Subject Line: DrawToLife Privacy Inquiry

Data Protection Officer
NomadLink
Municipiul Iasi, Str. Fantanilor, Nr. 43
Bloc B14, Apartament B39
Judet Iasi, 700337
Romania

© 2025–2026 NomadLink. All rights reserved.

Back to Home