Legal
Privacy policy
In short: your projects are saved on your computer; they only go to the cloud if you have Pro (or if you publish one to Community). We do not sell your data or use advertising.
Who is responsible
Gidan.Dev, based in Colombia, is responsible for the data processed to provide Draft. Contact: soporte.gidanapps@gmail.com. This policy is adopted under Colombian Law 1581 of 2012 and its implementing decrees (personal data protection), and also serves as our personal data processing policy.
What data we process and why
Your account (every account)
- Signing up and signing in use Firebase Authentication (Google): your email, your name, your profile photo if you sign in with Google, and an account identifier.
- We keep a basic profile in our database (Cloud Firestore): name, email, photo and sign-up date. It is used to show your account and, if you publish to Community, your name as the author.
- We keep your plan status: whether you are Pro, whether it is monthly or annual, and the renewal or end dates.
Your projects
- Free: your projects and uploaded photos are saved only on your computer. We do not receive them.
- Pro: your projects and pages are copied to Cloud Firestore and your uploaded photos to Firebase Storage, linked to your account, to sync them across your computers. Only your account can read them.
- Community: if you publish a project, a copy is stored with your name so it can be reviewed and, if approved, seen and copied by other people.
Payments
Pro payments are processed by Lemon Squeezy, the Merchant of Record. Lemon Squeezy receives the payment and billing details you give it and handles them under its own privacy policy. We never see your card details: from Lemon Squeezy we receive the subscription status (active, cancelled, expired), the plan, the dates and the link to your customer portal.
Updates and downloads
The app checks a file on GitHub to find out whether there is a new version, and the installer is downloaded from GitHub. As with any request over the internet, GitHub sees your IP address.
Error reports (optional)
Draft asks you once, when you first open it, whether you want to send error reports, and you can change the answer in Settings. If you say yes, when Draft fails it sends the error to Sentry so it can be fixed: the type of error, the point of the program where it happened, the Draft version and your operating system. It does not send your projects, the texts of your screens, your email, your name or the name of your computer. As with any request over the internet, Sentry receives your IP address when the report arrives; it is set not to store it. Nothing is sent until you say yes, and you can turn it off whenever you want.
Content assistant with your own key
If you set up the content assistant with your own key from an artificial-intelligence provider (OpenAI, Anthropic or Google), the key is stored encrypted on your computer and the text you ask for is sent straight from your computer to that provider, which handles it under its own terms. We receive neither the key nor the text.
Sample images
The avatar widget shows sample faces loaded from i.pravatar.cc, a public service; that service sees your IP address when they load.
This website
This website uses no cookies, advertising or analytics tools. It remembers the language you choose in your browser (local storage). The hosting (Firebase Hosting) logs technical data about each visit, such as the IP address, to run and protect the service.
What we use your data for
We use your data only for these purposes: to create and manage your account; to provide the service (saving your projects and, with Pro, syncing them and storing your photos in the cloud); to manage your subscription and payments through Lemon Squeezy; to publish a project to Community when you ask; to answer your support requests; to keep the service secure and prevent abuse; to tell you about changes to the service, these terms or the app; and to meet legal obligations. We do not process sensitive data (health, origin, biometrics, etc.) and we do not ask for it.
Your consent
By creating your account and accepting the terms of use and this policy, you give us prior, express and informed authorization to process your data for the purposes above. You can withdraw it, or ask us to delete your data, at any time by writing to soporte.gidanapps@gmail.com, unless the law or a contractual relationship requires us to keep it. As proof of your authorization we keep a record of when and how you accepted: the date, the version of these documents and whether it was with the sign-up checkbox or by continuing with Google. That record cannot be changed and we keep it even if you delete your account, for as long as the law requires.
Who it is shared with
Only with the providers that make Draft work, and only what they need: Google (Firebase: accounts, database, storage, functions and hosting), Lemon Squeezy (payments), GitHub (downloads and updates) and, only if you turn on error reports, Sentry. We do not sell or rent your data, and we do not use it for advertising. We would only hand it to an authority if the law requires it.
Where it is stored
On the Google Cloud servers Firebase uses, which may be outside your country. Lemon Squeezy, GitHub and, if you turn on error reports, Sentry, which operate mainly in the United States, also receive your data. By accepting this policy you authorize that international transmission and transfer of data to these providers, which apply their own security measures and safeguards.
How long
For as long as you keep your account. If you leave Pro, what was in the cloud is not deleted, so you can come back without losing anything; if you want us to delete it, ask us. If you delete your account and ask us to erase your data, we erase it except what the law requires us to keep (for example, payment records, which Lemon Squeezy keeps).
Your rights
As the data subject you have the right to: know, update and correct your data; ask for proof of the authorization you gave us; be told how we use your data; file a complaint with Colombia's Superintendence of Industry and Commerce (SIC) when you believe the law was breached; withdraw your authorization and ask for your data to be deleted; and access it free of charge. You can also ask us to export it or object to a processing. You can delete your account from the app, in Profile.
To exercise these rights write to soporte.gidanapps@gmail.com from your account's email. We answer enquiries within 10 business days and complaints within 15 business days of receiving them; if we need more time, we tell you why and the new date (up to 5 and 8 more business days, respectively). If you live outside Colombia, you can also go to the data protection authority in your country.
Security
Communications are encrypted. The database and storage rules only let your own account read your projects and photos, and an account's plan can only be written by the server. No system is infallible: if we detect an incident that affects you, we will tell you.
Children
Draft is not aimed at people under 18. If you are a minor, you should use it only with the authorization of your mother, father or legal representative, who answers for you. If you think a minor gave us data without that authorization, write to us and we will delete it.
Changes
If we change this policy, we publish the new version here with its date and, if the change is important, we tell you before it applies.