Privacy · Bogil

Privacy

Last updated: 18 October 2026

Bogil is an app two people draw in together. This page says what it keeps, why it keeps it, and how it is deleted. It is written as plainly as we could manage rather than as a legal document.

In short: No ads, no tracking, no third-party analytics. To know how many people use Bogil, our own server counts the days you open the app; that goes nowhere else. Your data is not sold and not shared with anybody. You can delete your account completely from inside the app.

What is kept

Your account: your email address, your display name and a profile picture if you set one. Your password is never stored as text - only an irreversible hash of it (bcrypt).
If you signed in with Google: the email address and name Google gives us, and that account's Firebase identifier. We never ask for or see your Google password; the sign-in happens on Google's own screen and only those three things reach us.
If you signed in with Apple: the email address Apple gives us (which may be a private relay address if you chose to hide yours), your name if you shared it, and a token from Apple that lets us end the connection when you delete your account. We never see your Apple ID password.
Drawings: what you draw, the brush strokes you leave on a shared canvas, and the sentences you write in Chinese Whispers rounds.
Pairing: who you are paired with and when that pairing was made.
Server logs: as with any request, your IP address and the time of the request are written to the server's access log. They are kept to debug problems and to notice abuse, and they roll over after a short period.
Notification token: your device's notification address. It is collected when you allow notifications and not at all if you do not. It is deleted when you sign out, when you turn notifications off, and when you delete your account.
The days you open the app: which days you opened it, whether your phone was Android or iPhone that day, and which version of the app you had. One line a day. What you do in the app, which screens you look at and how long you stay are not kept. It stays on our own server, and is deleted after 400 days and when you delete your account.

What is not kept

Your location
Your contacts, your photo library or any other file on your device
An advertising identifier or a tracking cookie
Third-party analytics (Google Analytics and the like) - none is used
Which screens you look at, what you tap, how long you stay

Why

All of it is what makes the app work. Your account details are how you are recognised, the drawings are what makes the sketchbook, and the pairing is how the app knows who you are drawing with. The days you open the app are how we see how many people use Bogil and how quickly an update reaches everyone. None of it is used for anything else.

Where it lives

Everything is kept on our own server. The drawing files sit in storage on that same server; no third-party cloud storage is used. All traffic between the app and the server is encrypted (HTTPS, and WSS for the shared canvas).

Who it is shared with

Two third parties are involved, each only for the thing named here: Google (Firebase) and, if you use its button, Apple.

Notifications. Google's service (FCM) is what carries a notification to your phone. What reaches it is your notification token and the text of the notification itself - a sentence like "they finished a drawing". Your drawings do not go there.
Signing in with Google. If you never press that button, nothing is said to Google at all; signing in with an email and password stays entirely on our server.
Signing in with Apple. Only if you press that button. When you delete your account we tell Apple to revoke Bogil's access, so the app stops appearing under your Apple ID.

No third-party analytics tool is used and it is switched off in the project; the days of use are counted on our own server only. Your data is not sold and is not shared with anybody for advertising.

The other exception is the person you pair with. They see your display name, your drawings and the sentences you write - that is the point of the app.

Deleting

From inside the app, without having to ask us for anything:

A single entry: in the sketchbook, press and hold a card → Delete.
Your account: Profile → Delete account. If you signed up with a password it asks for it; if you signed in with Google or Apple it does not. For an Apple account, Bogil's access to your Apple ID is revoked at the same time. Then your account, your drawings, your chains and your files are really deleted - not hidden, deleted.

If your phone is not to hand or you cannot get into the app, you can ask by email instead: account deletion page.

Two things worth saying out loud, because they can be surprising:

1. The sketchbook is shared. Deleting an entry removes it from your partner's sketchbook too - a shared canvas is one picture, and half of it cannot be deleted.

2. Deleting your account does not delete your partner's own drawings. They belong to them. Only the connection between you ends.

Children

Bogil is not designed for children under 13 and does not knowingly collect information from them. If we notice such an account, we delete it.

Changes

If this page changes, the date at the top changes with it. If what is collected changes materially, you are told from inside the app as well.

Contact

For a question, a deletion request, or if you think something here is wrong: destek@bogil.app