1. Who we are

Drawn ("Drawn," "we," "us," or "our") is a social connection app for Millennials, operated by Drawn (the company). Our registered contact email is hello@getdrawn.app. Our website is getdrawn.app.

This Privacy Policy describes how we collect, use, store, and share information when you use the Drawn app or visit getdrawn.app. It applies to all users, including waitlist registrants.

2. Data we collect

Information you provide directly

• Email address (required for account creation and waitlist)
• City of residence (used to prioritize launch city and match proximity)
• Age (collected during onboarding and verified through Stripe Identity)
• Gender identity and pronouns
• Interests, activities, and lifestyle preferences (selected during onboarding)
• Connection intent (friendship, romance, or both)
• Portrait photos taken through the Drawn camera during onboarding
• Files and images you voluntarily share with Drawn's planning agent
• Messages and descriptions you share with Drawn's sounding board feature

Information generated through your use of Drawn

• Call metadata (duration, timing — not content unless separately analyzed)
• Planning preferences revealed through interactions with the planning agent
• Activity type preferences derived from planning suggestion responses
• Timing and geographic preferences derived from confirmed plan interactions
• Trust and reliability signals derived from connection follow-through patterns
• AI host customization preferences (presence style, voice, focus, name)
• Tutorial completion states
• Proximity-based interaction events within the Drawn Nearby feature (if opted in)

Identity verification data (Stripe Identity)

Drawn uses Stripe Identity to verify user age and identity for the romance track and Drawn Nearby feature. When you complete identity verification:

• Your government-issued ID document is processed directly by Stripe, Inc.
• Drawn receives only a verification result (verified / not verified) and your confirmed age range
• Drawn does not receive, store, or have access to images of your identity document
• Stripe's privacy practices are governed by the Stripe Privacy Policy

Technical data

• Device type, operating system, and app version
• IP address (used for approximate location confirmation only, not stored as a profile attribute)
• App usage patterns and crash reports
• Push notification preferences

3. How we use your data

We use the information we collect to:

• Create and maintain your account
• Match you with compatible connections based on your preferences and behavioral signals
• Facilitate video and voice calls through our infrastructure
• Generate your Drawn portrait using AI image generation
• Power the planning agent, sounding board, and AI host features
• Send you notifications relevant to your connections and plans
• Improve match quality over time using anonymized aggregate behavioral patterns
• Ensure safety and enforce our community guidelines
• Comply with legal obligations

Aggregate and anonymized data

Drawn may use fully anonymized, aggregate behavioral trends (for example, what types of activities are popular in which cities among which age brackets) to provide insights to venue operators and city planners through a B2B product called Drawn City Insights. This data never contains individual-level information and cannot be used to identify you. You may opt out of contributing to aggregate data in your account settings.

Activity patterns and match recommendations

Activity patterns within Drawn, including proximity-based interactions you have opted into (such as Drawn Nearby activations), may inform match recommendations for your benefit. This is used exclusively to improve the quality of connections suggested to you and is never shared with other users or used for any commercial purpose unrelated to improving your experience.

4. Sounding board and planning agent data

When you use the sounding board feature to describe situations or share messages for reflection:

• Sounding board session data is private to you and is not shared with any other user
• Session data is retained for a maximum of 30 days, then automatically purged
• Information you share about another person in the sounding board is never used to build a profile of that person or to generate signals about them in the matching algorithm

Files you share with the planning agent (images, documents, spreadsheets) are used only within the planning session for which you shared them. If you choose to allow Drawn to remember your preferences for future planning sessions, you can enable persistent preference storage in settings. Without this opt-in, file content is cleared at the end of the session.

5. Data sharing

We share data only in the following circumstances:

• With matched connections: Your first name, portrait, and shared interest signals are visible to your connections as part of the Drawn experience
• With service providers: We use Supabase (database), Stripe (payments and identity verification), Daily.co (video calls), OpenAI (AI features), and Clerk (authentication). Each provider processes data only as necessary to provide their service
• With calendar providers: When you confirm a plan and choose to add it to your calendar, we send an iCalendar event to your chosen calendar application. No other data is shared
• For legal compliance: We may share data when required by law, court order, or to protect the safety of users

We do not sell personal data. We do not share personal data with advertisers. We do not participate in data broker networks.

6. Data retention

• Account data is retained for the life of your account and deleted within 30 days of account deletion
• Sounding board session data: maximum 30 days, then automatically purged
• Planning session data: retained for the life of your connection (serves as your planning history)
• File upload data: session-only unless you opt into persistent preference storage
• Aggregate anonymized data: retained indefinitely (contains no personal information)

7. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (right to be forgotten)
• Opt out of aggregate data collection
• Receive a portable copy of your data
• Withdraw consent for specific data processing activities

To exercise any of these rights, contact us at privacy@getdrawn.app. We will respond within 30 days.

8. Security

We implement industry-standard security practices including end-to-end encryption for sensitive communications, row-level security on all database tables, and regular security audits. No method of internet transmission is 100% secure, and we cannot guarantee absolute security. We will notify affected users of any data breach that presents a risk to their rights and freedoms.

9. Children

Drawn is not intended for users under the age of 18. We do not knowingly collect personal data from anyone under 18. Age verification is a required step for access to romance features. If we discover that a user is under 18, we will delete their account and associated data immediately.

10. Changes to this policy

We may update this Privacy Policy as Drawn's features evolve. We will notify you of material changes by email or through a prominent notice in the app. Continued use of Drawn after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions, requests, or concerns:

• Email: privacy@getdrawn.app
• General: hello@getdrawn.app
• Website: getdrawn.app