← P.D.G. DrawingApp privacy

P.D.G. Drawing privacy policy

What happens to your drawings, photos, writing samples and support messages.

Effective and last updated: October 21, 2026

Overview

P.D.G. Drawing, previously named DoodleFam, is a drawing and image-composition app from Troncone Apps. It does not require a separate app account. There are no third-party advertisements, advertising SDKs or automatic analytics uploads to us. Existing technical identifiers and links retain earlier names for compatibility.

Your artwork, photos and iCloud

The initial standalone release keeps a separate drawing library on each device. Editable artwork, completed-action Undo/Redo, saved sessions and recovery information remain on the device that owns the drawing. A canvas can contain marks, text, photos, illustrated pieces and embedded handwriting-font information. Home Recents, Library and canvas history use local drawings. Creating, opening, drawing, saving and closing do not require a successful cloud upload.

Independent background iCloud services may upload a private canvas preview, saved snapshot and related details such as its identifier, title and modification/source information to your Apple Account. A pending copy is not a guarantee that backup completed. Cloud-only drawings, automatic/on-demand canvas downloads, nearby hosting, invitations and live editing are unavailable in this release. Earlier beta cloud records and shared copies are preserved, not automatically deleted. A preview alone cannot restore editable artwork. Export and verify an editable backup before removing the app or replacing a device.

Apple’s photo picker provides the images you select. Camera photos and imported images are added to the drawing you choose; filters and local adjustments run on the device. Included photos can appear in that drawing’s private backup or a chosen export. We do not upload your entire photo library or camera feed to a developer-operated server.

Reusable photos and personal stickers

In build 150, importing a photo from Photos, Files or Camera, pasting an image, or opening “Your media” does not automatically keep a second reusable copy. You can choose “Keep in Your media” for an image already in the current drawing. Before confirmation, the app explains that it will save prepared image pixels, a content-derived identifier, a display name and an import date in a separate reusable collection. Declining does not prevent using the image in your drawing. Personal stickers are saved separately when you explicitly choose Make Sticker.

These collections use the app’s private iCloud Documents when available, otherwise app-local storage. Earlier local copies may later sync to private iCloud. Existing collections from earlier beta builds are preserved; some earlier builds automatically remembered imported, pasted, camera or embedded canvas photos. Reusable storage is separate from the device-local drawing Library and its background backups. It is not an upload to a developer-operated drawing server.

Deleting a drawing or undoing an insertion does not delete a reusable image. In build 150, touch and hold an item in Your media or My Stickers, choose Remove, and confirm to remove only that reusable item. Images already embedded in drawings, saved history, backups and exports remain unchanged. Offline devices or unavailable storage may delay removal; retry an unfinished removal when storage is available. A small identifier-only removal record is retained to prevent older copies from returning. You can deliberately keep the image again as a new item. App removal does not necessarily remove private iCloud copies.

DoodleDNA and writing profiles

Profiles may contain a name or nickname, handwriting samples and practice records. DoodleDNA can also retain creative-process metrics and session checkpoints in a drawing. These help you review your work and, with enough samples, create a handwriting font on the device. Profiles and samples are saved locally and can sync through private iCloud independently of the drawing Library. Session checkpoints embedded in local artwork stay with that artwork.

A writing-profile JSON export is separate and is not password-encrypted by the drawing-backup feature. We do not use handwriting to train a third-party AI model or send it to a developer-operated drawing server. Subscription expiry or a year change does not delete historical samples/fonts or change the frozen font appearance embedded in existing artwork.

Sharing, Family Sharing and exports

You choose whether to send a picture, PDF, editable drawing backup, font or writing-profile export through Files, Apple’s share sheet or another destination. That recipient’s privacy practices then apply. An imported editable backup becomes a separate local drawing with artwork and saved sessions, but a fresh Undo/Redo history; the source device’s action journal is not exported.

Live collaboration and new canvas invitations are deferred. A subscription does not publish artwork or identify members of an Apple Family Sharing plan. Apple controls purchase and Family Sharing eligibility, separately from creative-content sharing. Older shared cloud copies may remain in Apple’s service or on somebody else’s device. A local deletion cannot recall previously downloaded or exported copies.

Diagnostics, usage counts and feedback

In build 150, recent diagnostic recording and aggregate feature counting are off until you explicitly enable their described switches in Help, usage & diagnostics. An earlier beta’s default-on flag is not treated as consent: new recording stops while its existing records are preserved. When enabled, the app can keep up to 40 recent predefined feature/error codes without timestamps or document contents. Active monthly feature counts maintain a window of up to 12 months. Home, the editor’s save/status area and the diagnostics controls show when local recording is enabled. Neither recording option uploads automatically.

You can switch recording off at any time without losing drawing features or Pro access. This stops new recording and excludes earlier records from those diagnostic/usage reports, while retaining them locally until you explicitly clear them. Clear local usage & diagnostics removes those records, not drawings or profiles.

Report a Bug and Request a Feature prepare a message for your review; you choose whether to send it. If you include diagnostics, feature totals or a copied support snapshot, the report can contain predefined feature/error codes, app and OS versions, device model and display details, canvas dimensions and object counts, tool and experience selections, Pro status and technical sync/error status. These reports do not automatically attach your artwork, photos or handwriting samples. Your email provider sends your sender address, message and any name you include to joseph@troncone.net. A name is received only if it is included in your email. We use voluntarily submitted support information only to respond to and troubleshoot your request—not for analytics, advertising, marketing or tracking. Names and email addresses are not retained to track you. You decide whether to attach private content. Temporary report files prepared by the app are cleared at the next app launch. The App Store support-data disclosures and privacy manifest describe this voluntary correspondence, not automatic telemetry.

Our support mailbox is hosted by Apple through iCloud Mail and is not forwarded to another provider or helpdesk. Apple processes messages to provide that mail service under its own privacy information. Your sending provider also handles delivery. Ordinary iCloud Mail is not end-to-end encrypted; see Apple’s iCloud data security overview. Avoid including passwords or other sensitive information that is not needed for your request.

Apple services and purchases

Apple provides iCloud, the photo picker/share sheet and StoreKit. Apple manages payments; we do not receive full payment-card details. On supported devices, optional Image Playground uses Apple’s system experience and applicable terms/privacy information. Apple may separately provide reliability information under its own settings and policies. We do not sell personal information or share it with advertisers.

Children and families

Kids mode is a creative workspace, not a separate child account. A grown-up arithmetic check restricts certain routes, including administrative actions, purchases and exports; it does not verify age or identity. Pro does not bypass it. A parent or guardian should review profile names/samples, iCloud use, exports, purchases and support reports, along with the receiving service’s privacy practices. Drawings remain device-local in this release; writing profiles can sync through the same Apple Account. Contact us if private information was sent to us in error.

Retention, access and deletion

You can manage local drawings/profiles, export copies and clear diagnostics. Deleting a local drawing does not delete retained cloud copies. Deleting a synced writing profile may affect that profile across your devices. App removal does not necessarily remove iCloud profiles, previews, snapshots or older shared copies; Apple’s iCloud storage controls apply separately. Removing the app or losing a device can lose local artwork without a usable backup.

Ask joseph@troncone.net to correct or delete support correspondence you sent us. We keep it only as reasonably needed to respond and follow up, subject to applicable security/legal retention requirements. Contact other recipients about their retention of copies you sent them.

Protected backups and security limits

New editable drawing exports use a password-encrypted .doodlebackup file. The app does not automatically store the password and cannot recover a forgotten password. Outer filenames and sizes remain visible. This feature does not encrypt ordinary existing canvas files, older JSON backups or the separate writing-profile JSON export. Private local temporary files are used to prepare/open protected backups; secure erasure of flash storage or every in-memory copy is not promised.

Device storage, Apple services and chosen recipients have their own security protections. No system can promise perfect security. We review this policy and App Store disclosures when practices change and update the date above.

Contact

For privacy requests, email joseph@troncone.net. For help, visit P.D.G. Drawing support. This policy covers the app; website privacy covers this site.