Privacy Policy

Effective 2026-05-21.

HankyDoodle is operated by Hankinsoft Development, Inc. ("we," "us," "our"), a corporation based in Canada. This Privacy Policy explains what information we collect when you use the HankyDoodle iOS app and our related services (collectively, the "Service"), how we use it, and the choices you have.

1. Information We Collect

a. Information you provide

• Sign-in identifiers. When you sign in with Apple or Google, we receive a stable identifier from the provider, plus the email address and (for Google) display name and profile picture you choose to share. If you sign in with Apple, you may opt to share or hide your email; we honor your choice.
• Profile. The username and avatar you choose inside the app.
• Drawings and game content. Drawings you create, words you submit, captions, and Showcase posts.
• Friends and game state. Friend requests you send or accept, game rounds with friends, and outcomes (win/loss, streaks, scores).
• Reports. Content reports you submit, including the drawing or user reported and any optional reason text.
• Support correspondence. If you email support, we keep that correspondence to respond and to maintain a record.

b. Information collected automatically

• Authentication tokens. Short-lived session tokens that keep you signed in.
• Push notification tokens. Device tokens issued by Apple's Push Notification service so we can deliver game and friend notifications.
• Service logs. Standard server logs (IP address, timestamps, request paths, user agent) for security and debugging. These are kept for a limited time.
• Analytics events. We send a lightweight stream of usage events to our analytics service at hankinsoftanalytics.azurewebsites.net, which we operate. Each event includes:
  • An event name and small set of parameters (for example: login_completed, menu_action, game_created, drawing_submitted, guess_submitted, showcase_quality_gate).
  • A pseudonymous analytics user ID (a UUID generated on first launch and stored on the device) and a per-launch session ID.
  • App version, operating system, device model and type, screen resolution, CPU architecture, user-agent string.
  • Locale information derived from your device settings: language, timezone, and country code. This is your iOS region setting; it is not GPS-derived or IP-geolocated.
  We use these events to understand how features are used and to investigate bugs. We do not sell or share them with third parties, do not use them for advertising, and do not use them to track you across other apps or websites.

c. Information we do not collect

HankyDoodle does not track you across other apps or websites and does not share your information with third-party advertising networks. The app's privacy manifest declares NSPrivacyTracking = false.

2. How We Use Information

• To provide and operate the Service (sign-in, drawing storage, multiplayer matching, push notifications, leaderboards, the Showcase feed).
• To moderate user-generated content and enforce our Terms of Service.
• To respond to support requests and reports.
• To detect, prevent, and address abuse, fraud, and security issues.
• To meet legal obligations and respond to lawful requests.

We do not sell or rent your personal information. We do not use your content to train machine-learning models.

3. How We Share Information

We share information only with service providers that help us run the Service, and only as necessary for that purpose:

• Apple Inc. – Sign in with Apple, Push Notifications, App Store Connect.
• Google LLC. – Google Sign-In.
• Amazon Web Services (CloudFront). – Content delivery for drawings and avatars.
• Microsoft Azure. – Hosts our first-party analytics endpoint at hankinsoftanalytics.azurewebsites.net; receives the analytics events described in Section 1.b on our behalf.
• Hosting and database providers we use to operate the backend.

We may also disclose information if required by law, to protect the safety of our users, or in connection with a merger or acquisition (in which case the acquirer assumes this Privacy Policy).

Other HankyDoodle players see the public information you choose to share: your username, avatar, drawings you submit to multiplayer rounds or to Showcase, and your friends list (visible only to you and the friend in question).

4. Purchases and Subscriptions

The HankyDoodle Ad-Free yearly subscription is sold through Apple's App Store. All payment transactions are processed by Apple via StoreKit; Hankinsoft does not receive, store, or have access to your payment method, billing address, or card details.

When you subscribe, the device sends us a transaction identifier issued by Apple. We use that identifier solely to grant the ad-free entitlement on your device and (optionally, when the device is online) to sync subscription state across the devices signed into your Apple ID. We do not link transaction identifiers to advertising identifiers or share them with third parties.

Subscription status (active / lapsed / never-purchased) may appear in our analytics events as a coarse-grained boolean so we can understand feature uptake, but no payment amount, currency, or Apple-account identifier is included in those events.

5. Data Retention

• Account data is kept while your account is active.
• Drawings and Showcase posts remain until you delete them, you delete your account, or we remove them under our Terms.
• Reports of objectionable content are retained for moderation history and audit purposes.
• Server logs are kept for a limited time (typically 30-90 days) before automatic deletion.

6. Your Choices and Rights

You can:

• Edit your username and avatar from the in-app Settings.
• Block another user from the in-app context menu on their content.
• Delete drawings you created.
• Request deletion of your account and associated personal data by emailing kyle@hankinsoft.com. We will action verified requests within 30 days.
• Request a copy of the personal information we hold about you.
• Withdraw consent for processing where consent is the legal basis (this may limit your ability to use the Service).

These rights are recognized under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and equivalent provincial and international privacy laws.

7. Children

HankyDoodle is rated for users 12 and older on the App Store. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at kyle@hankinsoft.com and we will take steps to delete it.

8. International Transfers

Our servers and service providers are located in Canada and the United States. By using the Service, you understand that your information may be processed in countries other than your own, where data-protection laws may differ. We rely on contractual and technical safeguards, including encryption in transit (TLS 1.2 or higher), to protect your information.

9. Security

We use industry-standard security measures, including encrypted transport (HTTPS), access controls, and audit logging. No method of electronic storage or transmission is perfectly secure; we cannot guarantee absolute security but we work to protect your information as much as is reasonably practical.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Material changes will be communicated through the app or by email when reasonably possible.

11. Contact

Hankinsoft Development, Inc.
Email: kyle@hankinsoft.com