Privacy Policy

Account and authentication information

The current release requires a Drawn Past account. You can create or access an account with email and password, Sign in with Apple, or Google Sign-In. Supabase processes the account identifier, authentication provider, email address, and the display name you provide or make available during sign-in. We use this information to create, secure, display, and support your account.

If you choose Apple or Google, that provider processes the information needed to authenticate you under its own privacy policy. Drawn Past does not receive your Apple ID or Google Account password. Email-account passwords are transmitted to Supabase over an encrypted connection and are not stored by Drawn Past. Account-verification and password-recovery messages are sent through our email provider.

Learning information stored on your device

Saved stories, playback progress, lesson completions, activity dates, and app preferences are stored locally on your device and scoped to the signed-in account. This learning information is not synchronized to the account or uploaded to Drawn Past in the current release. Signing out does not delete it, so it is available again if the same account signs in on that device. It is never used for advertising or cross-app tracking.

Content delivery and technical information

Drawn Past retrieves lesson information, posters, captions, and video from our content systems. When the app or website requests this content, our hosting and content-delivery providers may automatically process technical information such as your IP address, request time, requested URL, response status, device or browser type, and user-agent information. We use this information only to deliver the service, maintain reliability and security, and prevent abuse.

Operational access logs are normally retained for up to 14 days. A relevant record may be kept longer when reasonably necessary to investigate a security incident, prevent fraud, resolve a support request, or comply with law.

Service providers

We use Supabase for authentication and account/profile data; Apple and Google for optional social sign-in; Hostinger for website, API, content system, and authentication-email infrastructure; and Cloudflare R2 for video and media delivery. These providers process information only as needed to perform their services for Drawn Past and under their applicable terms and privacy commitments. We do not permit them to use Drawn Past account information for their own advertising on our behalf.

Advertising, tracking, and user content

In versions offering ad-supported story unlocks, you can choose to complete an ad to permanently unlock one story for your account. Google AdMob provides these ads. We request non-personalized ads and present applicable consent choices before requesting an ad. You can revisit available choices under Profile → Ad privacy choices. Premium access does not require watching ads.

Google may process your IP address, approximate location inferred from it, app and device information, ad interactions, and diagnostic information to deliver ads, measure performance, and prevent fraud. We send an opaque Drawn Past account identifier and a random reward-session identifier to verify completion; we do not send your name, email, or story title to AdMob. See Google’s advertising privacy information. The current app version does not present a new iOS tracking-permission prompt. If you previously allowed Drawn Past to track on iOS, that permission may remain active after an update. In that case, Google may access your device's advertising identifier (IDFA) for advertising measurement, even though we request non-personalized ads. You can review or withdraw this permission in iOS Settings → Privacy & Security → Tracking. We do not sell personal information or collect general browsing analytics.

We record the selected story, account identifier, reward transaction, and unlock date to provide and verify your permanent story access across devices. These records are removed when you delete your Drawn Past account. Users cannot upload, publish, or share user-generated content through the app. The app does not request access to your location, contacts, camera, microphone, or photo library.

Purchases

In app versions that offer Premium, Apple or Google processes your payment. RevenueCat processes your Drawn Past account identifier, purchase history, product identifiers, transaction information, and refund status. We use this information to verify purchases, restore access, prevent fraud, support your Premium access, and understand purchase sales and refunds. Purchase history is linked to your account. We do not send your email address or name to RevenueCat as customer attributes, and we do not receive or store your full payment-card details.

Deleting your Drawn Past account does not automatically refund your one-time purchase. Purchase records held by Apple, Google, or RevenueCat are handled separately under their retention policies and applicable obligations. Contact us for help with a request concerning your purchase records.

Account deletion and retention

You can permanently delete your Drawn Past account from the Account section of the Profile screen. When account deletion completes, Drawn Past deletes the active Supabase account and associated server-side profile and removes the saved stories, playback progress, completions, activity, and preferences scoped to that account from the device. Information that must be retained to comply with law, protect the service, or document a resolved security or support matter may be kept only for the necessary period.

Deleting Drawn Past does not delete your Apple ID or Google Account. After deletion, the app provides the Apple settings path for reviewing or removing Drawn Past under Sign in with Apple. You can also review or remove Drawn Past from your Apple ID's Sign in with Apple settings or your Google Account's third-party connections. Those provider controls are separate from deleting your Drawn Past account.

Your choices and requests

You can sign out in the app, delete your account in Profile, or contact us to ask about access, correction, deletion, or other rights available under applicable privacy law. For privacy questions or requests relating to your account or technical logs, email support@drawnpast.com.

Changes to this policy

We may update this policy as Drawn Past evolves. The effective date at the top of this page will change when a revised policy is published.