Privacy Policy
This policy explains what data the Drawify mobile app ("Drawify", "the app") collects, why, who it is shared with and the choices you have. Drawify is developed and published by Medih Canlı, an independent developer based in Türkiye ("we", "us"), who is the data controller. "Cozus Entertainment" is the name under which Medih Canlı publishes apps; it is not a separate company. You can reach us at support@cozus.net. Your use of the app is also governed by our Terms of Use.
- Without an account, your dressers, drawers, tasks and notes stay on your phone only.
- With an account, they are synced to our server in the EU (Frankfurt) so they are available on your other devices and can be shared with people you choose.
- Anonymous usage data (for example "a task was created") is sent only if you allow it; the app asks you once. It never includes what you write, it is not linked to your account, and you can change your choice at any time.
- No ads. No advertising ID. No tracking across other apps or websites. We do not sell your data.
- You can delete your account and all its data from inside the app.
1. Data we collect
1.1 Content you create
Dressers, drawers, tasks (title, note, priority, due date, completion), notes, decorations and stickers you place, achievements, items you unlock or buy, and your app settings (language, theme, sound, haptics, reminder preferences).
- Guest mode (no account): stored only on your device. We cannot see it.
- Signed in: stored on your device and synced to our server so you can use it on several devices. If you uninstall the app without an account, this data is lost.
1.2 Account data
If you create an account we process:
- your email address and a password (the password is stored only as a secure hash by our authentication provider; we never see it);
- if you sign in with Google or Apple: the email address and, if provided, the name and profile picture that the provider shares with us. With "Sign in with Apple" you may choose to hide your real email address;
- the display name you choose in the app;
- technical sign-in data such as the time of your last sign-in.
1.3 Sharing a dresser
You can share a dresser with others using a code, with or without a password (you choose). Up to 12 accounts can use one dresser. People who join see that dresser's drawers, tasks and notes, and the display name and profile picture of its members. Your email address is not shown to them. To protect shared dressers from guessing attacks, we log join attempts (success or failure and time) for your account.
1.4 Anonymous usage data and error reports
Only with your permission: the first time you use the app, it asks whether it may send anonymous usage data. Until you answer, nothing is sent; if you say no, the events waiting on your device are deleted. If you allow it, the app sends anonymous usage events, for example: app opened, onboarding completed, dresser/drawer/task created, task completed, store opened, item viewed, purchase started/completed/failed, setting changed (which setting and its new value, e.g. "theme: dark"), decoration placed. Each event contains only:
- a random installation ID created by the app (not derived from your device, not your advertising ID) and a random session ID;
- the event name, its time, and short technical values (such as an item ID, a count, a material name, or yes/no);
- the app version, the platform (Android or iOS) and the app language;
- if we are testing a design change, which test group the installation is in.
Crash and error reports are sent even if you don't allow usage data, but then without any identifier (no installation or session ID, nothing that could tell devices apart), so we can notice and fix crashes. Error reports contain a shortened error message and the code location where it happened. Before sending, the app removes anything that looks like an email address, a link, quoted text or a long number.
Never included: the text of your tasks, notes or dresser names, your email, your account ID, your contacts or your location. Usage data is not linked to your account.
Your choice: Settings › Privacy › "Share anonymous usage data". You can withdraw your permission at any time; when you turn it off, nothing more is recorded and events waiting on your device are deleted. Uninstalling the app (or clearing its data in your phone's settings) deletes the installation ID; a new one is created next time.
1.5 Purchases
Purchases are made through the Apple App Store or Google Play. We never receive your card or payment details. To confirm and restore purchases, the app uses RevenueCat, which receives the purchase receipt (product, date, price, store transaction ID), an app user ID, and basic device information (such as country, platform and app version). If you are signed in, your purchases are linked to your account so they work on your other devices.
1.6 Reminders and notifications
Task reminders and daily summaries are scheduled locally on your phone. We do not use push notification servers and do not collect a push token. You can turn notifications off in your phone's settings.
1.7 Remote settings
The app downloads settings from our server (for example store prices or seasonal dates) so we can fix problems without an update. This request contains no personal data; as with any internet connection, the server can see your IP address. The app can show a short device code derived from your installation ID (it is hidden in Settings). It is used only if you send it to us to test new values on your phone before everyone else.
1.8 What we do not collect
Drawify does not access your location, contacts, camera, microphone, photos or files, and does not use an advertising ID. There are no ads and no third-party tracking SDKs.
2. Why we use your data
| Purpose | Data | Legal basis (GDPR / KVKK) |
|---|---|---|
| Provide your account, sync and sharing | Account data, content, sharing data | Performance of a contract |
| Process and restore purchases | Purchase data | Performance of a contract |
| Protect accounts and shared dressers | Join attempts, sign-in data | Legitimate interest (security) |
| Understand usage and improve the app | Anonymous usage data | Your consent (you can withdraw it at any time) |
| Notice and fix crashes | Error reports without any identifier | Legitimate interest (a working, secure app) |
| Answer your messages | Your email and message | Legitimate interest / contract |
Data is collected electronically through the app (and, if you email us, through your email). We do not use your data for advertising, profiling or automated decisions, and we do not sell or rent it.
3. Service providers
We use these providers, who process data only on our behalf and under data protection agreements:
- Supabase — database, authentication and sync. Data is stored in the European Union (Frankfurt, Germany).
- Google and Apple — only if you choose to sign in with them, and as app stores for downloads and purchases.
- RevenueCat (USA) — purchase verification and restoring purchases.
- GitHub Pages — hosts this web page.
Some providers process data outside your country, including in the EU and the USA. These transfers are covered by the providers' data processing agreements and safeguards such as the EU Standard Contractual Clauses. We may also disclose data if required by law.
4. How long we keep data
- Account and synced content: until you delete it or delete your account.
- Trash: deleted items stay in the in-app trash for 30 days, then they are removed for good.
- Deleted account: removed from our database immediately; copies in provider backups are overwritten within 30 days.
- Anonymous usage data and error reports: automatically deleted after 180 days.
- Data on your device: until you delete it in the app, clear the app's data in your phone's settings, or uninstall the app.
5. Deleting your account
In the app: Settings › tap your profile › Account › Delete account. This permanently deletes your account, every dresser you own (including dressers you shared with others), their drawers, tasks and notes, your settings and your sharing memberships. Your phone then returns to guest mode. For your safety you confirm the deletion with your password (or, if you sign in with Google or Apple, by typing your email address).
Purchases and subscriptions: they belong to your Google Play or App Store account, so deleting your Drawify account does not remove them. You can restore them in a new Drawify account signed in with the same store account (Plus screen › Restore purchases). Deleting your account does not cancel a subscription; cancel it in your store's subscription settings. The store and RevenueCat keep purchase records (receipts) as required for billing, tax and fraud prevention; these contain no task or dresser content.
Without the app: email support@cozus.net from the address you use for Drawify with the subject "Drawify account deletion". We will delete the account within 30 days and confirm by email.
Anonymous usage data is not linked to your account. To clear it from your device, turn off anonymous usage data, or uninstall the app. Purchases made through Apple or Google remain in your store purchase history.
6. Your rights
Depending on where you live (for example under the EU/UK GDPR or Turkey's Law No. 6698 on the Protection of Personal Data, "KVKK"), you have the right to ask whether we process your data; to access, correct, delete or export it; to restrict or object to processing; and to withdraw consent. Most of this you can do directly in the app. For anything else, email us from the address you use for Drawify (or send a written request). We will answer free of charge within 30 days.
You also have the right to complain to a data protection authority, for example the Turkish Personal Data Protection Authority (KVKK) or the authority in your EU country.
7. Security
Data is encrypted in transit (HTTPS) and stored with our database provider, which encrypts it at rest. Access is restricted by row-level rules, so each account can only read its own data and the dressers shared with it. Shared dresser passwords are stored only as hashes. No system is perfectly secure, but we work to protect your data and will notify you as required by law if a breach affects you.
8. Children
Drawify is not directed to children under 13 and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will delete it.
9. Changes to this policy
If we change this policy, we will update the date at the top. If a change is significant, we will also tell you in the app before it takes effect.
10. Contact
Medih Canlı (independent developer, publishing as Cozus Entertainment), Türkiye — support@cozus.net