Privacy
Privacy
Last updated: 22 September 2026
Bogil is an app two people draw in together. This page says what it keeps, why it keeps it, and how it is deleted. It is written as plainly as we could manage rather than as a legal document.
What is kept
- Your account: your email address, your display name and a profile picture if you set one. Your password is never stored as text - only an irreversible hash of it (bcrypt).
- If you signed in with Google: the email address and name Google gives us, and that account's Firebase identifier. We never ask for or see your Google password; the sign-in happens on Google's own screen and only those three things reach us.
- Drawings: what you draw, the brush strokes you leave on a shared canvas, and the sentences you write in Chinese Whispers rounds.
- Pairing: who you are paired with and when that pairing was made.
- Server logs: as with any request, your IP address and the time of the request are written to the server's access log. They are kept to debug problems and to notice abuse, and they roll over after a short period.
- Notification token: your device's notification address. It is collected when you allow notifications and not at all if you do not. It is deleted when you sign out, when you turn notifications off, and when you delete your account.
What is not kept
- Your location
- Your contacts, your photo library or any other file on your device
- An advertising identifier or a tracking cookie
- Third-party analytics (Google Analytics and the like) - none is used
Why
All of it is what makes the app work. Your account details are how you are recognised, the drawings are what makes the sketchbook, and the pairing is how the app knows who you are drawing with. None of it is used for anything else.
Where it lives
Everything is kept on our own server. The drawing files sit in storage on that same server; no third-party cloud storage is used. All traffic between the app and the server is encrypted (HTTPS, and WSS for the shared canvas).
Who it is shared with
Exactly one third party is involved: Google (Firebase), for two things:
- Notifications. Google's service (FCM) is what carries a notification to your phone. What reaches it is your notification token and the text of the notification itself - a sentence like "they finished a drawing". Your drawings do not go there.
- Signing in with Google. If you never press that button, nothing is said to Google at all; signing in with an email and password stays entirely on our server.
No analytics tool is used and it is switched off in the project. Your data is not sold and is not shared with anybody for advertising.
The other exception is the person you pair with. They see your display name, your drawings and the sentences you write - that is the point of the app.
Deleting
From inside the app, without having to ask us for anything:
- A single entry: in the sketchbook, press and hold a card → Delete.
- Your account: Profile → Delete account. If you signed up with a password it asks for it; if you signed in with Google it does not. Then your account, your drawings, your chains and your files are really deleted - not hidden, deleted.
If your phone is not to hand or you cannot get into the app, you can ask by email instead: account deletion page.
1. The sketchbook is shared. Deleting an entry removes it from your partner's sketchbook too - a shared canvas is one picture, and half of it cannot be deleted.
2. Deleting your account does not delete your partner's own drawings. They belong to them. Only the connection between you ends.
Children
Bogil is not designed for children under 13 and does not knowingly collect information from them. If we notice such an account, we delete it.
Changes
If this page changes, the date at the top changes with it. If what is collected changes materially, you are told from inside the app as well.
Contact
For a question, a deletion request, or if you think something here is wrong: destek@bogil.app