Privacy policy

Who is responsible for your information

Dillon Pinto, based in New Zealand, operates DropDraft and is responsible for the personal information handling described in this policy.

At a glance

• Core artwork, projects, garment captures, and exports remain on your device unless you choose a cloud feature.
• We do not sell personal information or use it for cross-app advertising or tracking.
• An account uses your email address and an internal user ID for sign-in, security, purchases, and deletion.
• Campaign Assist uploads only the product reference and instruction you approve for that specific job.
• Optional artwork analysis uploads a reduced preview and your brand notes only with your consent.

Information we process

Account information

If you sign in, Supabase processes your email address, authentication information, and a unique account ID. Passwords are handled by the authentication service and are not visible to DropDraft in plain text.

Purchases

Apple handles payment details. DropDraft and RevenueCat process product identifiers, entitlement status, transaction timing, and an account identifier so the app can unlock and restore Creator access. We do not receive your full card number.

Local creative content

Artwork, photos, masks, project documents, renders, PDFs, ZIP files, and local approval records stay in app-controlled storage unless you deliberately export, share, publish, or submit them to an optional AI feature.

Optional artwork analysis

When you choose Analyze artwork and consent to the upload, DropDraft sends a reduced JPEG preview of the selected artwork, the brand notes you enter, and the selected garment’s name and available colours to OpenRouter for processing by Google’s Gemini 3.1 Flash Lite model. This creates three optional creative directions and colour suggestions. Your original artwork stays on your device. You confirm that you are at least 18 and are using the feature for professional or business creation.

We request providers that do not retain request content or use it for training, and we do not allow fallback to providers that fail these requirements. DropDraft does not store the uploaded preview or your brand notes on its servers. A generated result is available for recovery for 24 hours and is then removed by scheduled cleanup; minimal request and accounting records are kept for up to 120 days. Account deletion removes those account-linked records, while anonymous spending totals may remain.

Directions you choose to save remain with your local project until you delete them. Analysis is optional, and you can continue creating without uploading artwork. These suggestions are creative guidance and do not approve manufacturing accuracy or ownership rights.

Optional Campaign Assist

Campaign Assist is an optional AI feature. Before each remote job, the app shows the provider and retention details and asks for explicit upload consent. You also confirm that you are at least 18 and are using the feature for professional or business creation.

The approved product reference and your campaign instruction are stored privately in Supabase and processed through a server-only Google Cloud Gemini route. The Google credential never ships in the app. DropDraft deletes private AI inputs within 7 days and private AI outputs within 30 days. A supported deletion removes DropDraft’s private copies sooner. Google may independently retain a flagged prompt—including the campaign instruction and product reference included in that prompt—for abuse review for up to 90 days; that safety log is not controlled by DropDraft’s deletion. DropDraft has not enabled Vertex request-response logging, and Google does not use this data to train or fine-tune models without permission.

AI results are concepts, not verified production proofs. The app presents the source and result for your manual review. Campaign images you approve are saved locally with your project and can be included in a launch pack you choose to export or share. Deleting a cloud job does not remove copies you already exported.

After an AI asset is deleted, we retain a minimal account-linked record of the job, consent, credit use, outcome, and deletion for security, billing, dispute handling, and proof of deletion. The campaign instruction, input identifiers, private object location, and generated output are removed. This minimal record is deleted with the account unless limited information must be kept longer for legal, fraud-prevention, or dispute purposes.

Analytics and diagnostics

Product analytics is disabled unless a production analytics project is configured and you separately opt in. If enabled, only allow-listed product events are sent; artwork, prompts, generated images, filenames, signed URLs, tokens, and email addresses are excluded. Crash reporting is likewise disabled unless configured and must exclude creative content and account secrets.

Service providers and locations

DropDraft may use Apple, RevenueCat, Supabase, OpenRouter, and Google Cloud to provide purchases, authentication, private storage, account deletion, and optional AI processing. Some providers may process information outside New Zealand. Dillon Pinto remains responsible for the handling described in this policy and assesses applicable provider terms and privacy safeguards before enabling a public data flow.

Your choices

• Use the local-first features without submitting content to artwork analysis or Campaign Assist.
• Decline optional analytics consent.
• Ask for access to or correction of personal information we hold about you, subject to identity verification and applicable law.
• Export or remove local projects using the controls in the app and on your device.
• Initiate permanent account deletion from Account → Password and account deletion.
• Manage or cancel an Apple subscription in your Apple Account subscription settings.

Account deletion does not cancel an Apple subscription. See Delete your account for the exact steps and scope.

Children

DropDraft is not directed to children under 13. Artwork analysis and Campaign Assist are limited to users who confirm they are at least 18 and are using them for professional or business creation.

Contact and changes

Privacy questions or requests for Dillon Pinto can be sent to dropstudiosupport1@gmail.com or through our support page. We may update this policy when features, providers, or laws change. Material changes will be reflected by the updated date on this page.