Privacy Policy

Last Updated: February 13, 2026

Welcome to Doodle Magic ("the App"). This Privacy Policy describes how we collect, use, and protect your information when you use our mobile application. We are committed to safeguarding your privacy and the safety of all users, including children.

0. Controller / Who We Are

• Data Controller: Yusuf Afyon
• Address: 10709, Berlin, Germany
• Contact Email: info@doodlemagic.co
• Country: Germany
• Data Protection Contact: info@doodlemagic.co

1. Categories of Data We Collect

We believe in collecting only what is necessary. We do not sell your data or use it for advertising.

• User Content: Images (doodles, sketches, and drawings) you upload or create within the App, processed solely to generate artwork.
• Account Identifiers: If you sign in via Apple Sign-In or Google, we receive your name, email address, and a unique identifier to manage your account, credits, and purchases.
• Purchase Metadata: Records of in-app purchases (credits, tokens, subscriptions) for order fulfillment. We do not receive or store your payment card details.
• Shipping Details: Name and delivery address, collected only when you place a physical product order (3D figures, prints).
• Device & App Diagnostics: Basic device type, operating system version, and anonymous crash reports for compatibility and troubleshooting.

2. How We Use Your Data (Purposes)

• Processing your images to generate artwork in the style you select.
• Managing your account, credits, tokens, and subscription status.
• Fulfilling physical product orders (printing, 3D figures, shipping).
• Improving app stability and performance through anonymous diagnostics.
• Preventing fraud and enforcing our Terms of Service.

3. Legal Bases (GDPR Article 6)

We process your data on the following legal bases:

• Contract: Account creation, authentication, image generation, credit/token fulfillment, and physical order processing — necessary to provide the services you request.
• Legal Obligation: Retaining transaction and tax records as required by applicable law.
• Legitimate Interests: Fraud prevention, security, and anonymous crash/diagnostic analytics to maintain and improve the App.

4. How We Use Your Images

When you select a style, your sketch is sent to our service provider (Replicate) for AI-powered image generation. We do not use your images to train any AI models. Images are processed in real-time and returned to you. Processed results may be temporarily cached to enable downloading but are not stored permanently on our servers. You can delete any saved generations from your gallery at any time.

5. Children's Privacy & Parental Consent

Doodle Magic is designed to be safe and enjoyable for users of all ages, including children.

• We do not knowingly collect personal information from children under 13 without verifiable parental consent (COPPA).
• The App does not contain advertisements, in-app social features, or external links within the creative experience.
• All generated content is filtered to ensure age-appropriate results.
• We minimize data collection for children by default.
• If you are a parent or guardian and believe we have inadvertently collected information from a child under 13, please contact us immediately. We will promptly delete the child's account and associated data.

6. Data Processors & Third Parties

We share only the minimum data necessary with the following trusted processors:

• Replicate (replicate.com): Transient image processing for AI generation. Images are not retained by Replicate after processing.
• Supabase (supabase.com): Authentication, database, and user profile management. Data is hosted in the EU.
• Apple (App Store / StoreKit): In-app purchase and subscription processing. We do not have access to your payment card details.
• Stripe (stripe.com): Payment processing for physical product orders (3D figures, prints). Stripe processes payment details directly; we receive only order confirmation data.

We do not sell, rent, or share your personal information with any third parties for marketing or advertising purposes.

7. Data Retention

• User Content (images): Processed in real-time. Cached results are automatically deleted after 24 hours. Generated artworks saved to your gallery are stored locally on your device.
• Account Data: Retained for as long as your account is active. Deleted upon account deletion request.
• Transaction Records: Retained for the minimum period required by applicable tax and commercial law (typically 10 years).
• Physical Order Records: Retained as required for order fulfillment, customer support, and legal retention obligations.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including encrypted connections (TLS/SSL), secure authentication via industry-standard OAuth providers, and Row Level Security on our database to ensure users can only access their own data.

9. Your Rights & How to Exercise Them

Depending on your jurisdiction (including under GDPR), you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate personal data.
• Deletion: Request deletion of your account and associated data via the "Delete Account" option in App settings, or by contacting us.
• Portability: Request your data in a portable format.
• Objection: Object to processing of your personal data based on legitimate interests.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Supervisory Authority: You have the right to lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, contact us at info@doodlemagic.co or visit doodlemagic.co. Since most data is stored on your device, deleting the App removes the majority of locally stored information.

10. International Data Transfers

Your data may be processed in countries outside your residence (including the United States for image processing via Replicate). Where data is transferred outside the EU/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) to ensure an adequate level of data protection in compliance with applicable data protection laws.

11. Cookies & Tracking

The Doodle Magic App does not use cookies. Our website (doodlemagic.co) uses essential cookies only for basic site functionality. We do not use advertising or behavioral tracking cookies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via an in-app notification or a notice on our website. The "Last Updated" date at the top indicates the most recent revision.

13. Contact Us

If you have any questions, concerns, or data requests regarding this Privacy Policy, please contact us at:
info@doodlemagic.co