Privacy Policy

1. Who operates Doodle Dare

Kenzi.ai operates Doodle Dare and is responsible for the information described in this policy. This policy applies to the iOS and Android app, the Doodle Dare API, and doodledare.com.

2. Information the game uses

The game may process the following information:

• A randomly generated installation identifier, a protected device token, platform, app version, locale, and technical request details.
• A generated Guest alias, optional game nickname, game settings, Gems, Stars, wallet history, prompt history, timer extensions, scores, League membership, rank, and rewards.
• Drawings submitted for scoring and saved to My Paintings, together with the prompt, difficulty, timing, Match score, Creativity score, and result metadata.
• A two-letter country code supplied by Cloudflare from the request location. We use it for country-first League matching and aggregate reporting; we do not ask a child for a home address.
• Store product, transaction, receipt or purchase-token, price, currency, environment, refund, and verification data needed to validate purchases and keep an accounting record.
• For rewarded videos, the offer and reward session, completion status, verification token, credited Stars, ad transaction, and estimated ad revenue associated with the game installation.
• Security and reliability logs such as IP address, user agent, request time, route, response status, error details, and diagnostic identifiers.
• On doodledare.com, Google Analytics may process page views, link interactions, referrer, browser and device type, approximate region, and pseudonymous analytics identifiers through cookies or similar browser storage.

3. Drawings and AI processing

When a scored doodle is submitted, the drawing and its prompt are sent securely to our API and processed by OpenAI as our AI service provider. The service returns structured game feedback such as whether the drawing is meaningful, prompt relevance, Match, Creativity, and a short encouraging reaction.

Kenzi stores the drawing on its own server so the family can view it in My Paintings. Drawings are not used for behavioral advertising or shown in a public gallery. Prompt-generation requests may also be processed by OpenAI, but they do not require a child’s drawing.

When Doodle Spark is requested, the supplied challenge is processed by OpenAI to generate a drawing starter that can be erased or drawn over. We record AI usage and estimated cost to operate these features.

AI providers may keep limited service and abuse-prevention logs under their business terms and data controls. Families should avoid including names, addresses, schools, contact details, or other personal information in a drawing or nickname.

4. Optional rewarded videos and supported versions

Supported Android releases and iOS releases starting with 1.0.1 may offer an optional Google AdMob video in exchange for the Stars displayed in the offer. Ads are requested only after Watch ad is selected. iOS 1.0.1 also requires a grown-up hold; iOS 1.0.2 and later start the flow on a tap, after any required consent form. Ads do not open automatically at startup or between drawings. Declining does not spend game currency. iOS version 1.0 does not use the Google Mobile Ads SDK.

When a video is requested, Google’s Mobile Ads SDK collects and shares technical information including the IP address and approximate location, app and device information, ad interactions, diagnostics, and SDK identifiers. This supports ad delivery, measurement, reliability, and fraud prevention. Non-personalized ads still process technical data; they are not data-free.

Our ad requests use non-personalized advertising, restricted data processing, and disabled publisher first-party IDs. We maintain a General Audiences (G) ad content limit in AdMob. Android and iOS 1.0.1 also apply child-directed treatment. iOS 1.0.2 and later no longer mark every user as a child or under the age of consent; Google User Messaging Platform (UMP) manages required privacy messages and whether ads can be requested. We do not request location permission or iOS App Tracking Transparency permission. These settings do not mean all technical information or SDK identifiers are absent. We do not use these videos for interest-based advertising or remarketing.

In iOS 1.0.2 and later, UMP checks consent information at app launch without loading an ad. When Watch ad is selected, a required consent form is shown before ad loading. Depending on your location and applicable messages, Profile → Privacy choices lets you review or withdraw ad privacy choices at any time. The entry appears when UMP requires it. Consent preferences may be stored on the device and processed by Google to apply your choices. A store age rating or G ad content filter is not a substitute for an individual’s consent or age requirements.

For reward verification, Doodle Dare supplies a random, single-session token—not the child’s drawing, nickname, email, Support ID, or raw device identifier. Our server checks Google’s signed completion message and credits the promised Stars once. Our reward and anti-fraud records are linked to the game profile.

Families can decline future videos or stop using the feature. This does not erase information already processed. In-app Delete game data removes the active Doodle Dare reward records; information held by Google is governed by Google’s own privacy and retention practices. The links below explain Google’s processing and available privacy controls.

• Google Privacy Policy
• How Google uses information from apps and sites

5. Why we use information

We use this information to:

• Register and recognize an installation without creating a child account.
• Deliver prompts, save paintings, score drawings, manage game balances, and show results.
• Place eligible players into fair Leagues, calculate standings, and issue rewards.
• Verify Apple and Google purchases, prevent duplicate credit, handle refunds, and maintain financial records.
• Deliver optional rewarded ads in supported releases, verify completion, issue Stars, measure ad revenue, and prevent invalid or duplicate rewards.
• Prevent abuse, investigate errors, secure the service, measure reliability, and improve game balance.
• Meet legal, tax, accounting, safety, and store-platform obligations.

6. When information is shared

We do not sell personal information and do not share it for cross-app behavioral advertising. Providers that help operate the game and website include OpenAI for AI features, Cloudflare for network delivery and country headers, Google Analytics for public-website measurement, our hosting providers, Apple and Google for billing, and Google AdMob for optional ads in supported releases. The ad data and purposes are described above; drawings and nicknames are not supplied to AdMob by Doodle Dare.

We may disclose information when required by law or when reasonably necessary to protect a child, users, Kenzi, or the public from fraud, abuse, security threats, or immediate harm.

7. Website analytics and cookies

The public website uses Google Analytics to understand visits, page performance, and navigation. Google Analytics is not an advertising feature inside the Doodle Dare mobile app. Website analytics may use cookies or similar browser storage and receive technical information such as an IP-derived approximate region, browser or device details, referrer, viewed pages, and interaction times.

We use this information to improve the website and understand general interest in Doodle Dare, not to create child advertising profiles. Visitors can restrict cookies in browser settings or use Google’s available Analytics opt-out controls.

8. Retention

Game records and paintings remain associated with the installation so My Paintings, balances, and League history can work. The in-app Delete game data action deletes the active game profile, drawings, scores, wallet history, League records, purchase records, and rewarded-ad sessions linked to that installation from the live Doodle Dare system.

Limited backups, security logs, and financial records may remain for a restricted period where reasonably needed for recovery, fraud prevention, tax, accounting, legal claims, or mandatory recordkeeping, then are deleted or de-identified according to operational schedules.

9. Security and international processing

We use encrypted transport, protected credentials, access controls, rate limiting, hashed installation identifiers, and other safeguards appropriate to the service. No online service can guarantee absolute security.

Our service providers may process information in countries other than the family’s location. We use provider contracts and technical safeguards appropriate to the information and applicable requirements.

10. Children and parent choices

Doodle Dare is intended for ages 13 and over. A parent or guardian should supervise a minor’s use and follow applicable consent requirements; the age at which a person may consent can vary by location. If a younger child has used the app or supplied personal information, contact us for help with removal.

Doodle Dare is designed to avoid collecting direct contact details from children. Families can decline rewarded videos, choose whether to make purchases, turn off sound and music, and delete game data in protected grown-up settings. Device-level network restrictions are also available, but connected game features require internet access. Selecting Watch ad is not parental consent to collect additional personal information from a child.

If a parent believes a child entered personal information in a nickname or drawing, contact us with the Support ID. We will help locate and remove the relevant data after reasonable verification.

11. Privacy rights and changes

Depending on location, you or a parent or guardian acting for a minor may request access, correction, deletion, restriction, objection, or a copy of personal information. Because the game has no email login, we may need the in-app Support ID and limited verification before acting on a request. Where available, Profile → Privacy choices in iOS 1.0.2 and later provides Google’s ad consent and opt-out controls.

We may update this policy when the game, providers, or law changes. The latest revision date appears above, and material changes will be communicated where reasonably appropriate.