DuoDoodle
1. Who we are
DuoDoodle (the “Game”) is operated by Akash Sarker (“DuoDoodle,” “we,” “us,” or “our”). Contact us at hello@akashsarker.com
2. Scope
This policy applies to the DuoDoodle Android game, its Firebase-hosted invite and legal pages, and related online services. The Game is designed for players aged 15 and older. It is not directed to children under 13.
3. Information we process
| Category | Examples | Why we use it |
|---|---|---|
| Account and profile | Firebase user ID, guest account, display name, friend code, built-in avatar choice, an optional profile photo you select, and email only if you connect Google | Sign-in, account recovery/linking, profiles, friends, challenges, Nearby identification, and drawing attribution |
| Gameplay and progression | Modes, rooms and sessions, roles, prompts, readiness, scores, XP, rank, achievements, reactions, results, timestamps, and challenge status | Run matches, synchronize players, prevent duplicate actions, calculate results, and save progress |
| Social data | Friend requests, friendships, blocks, invitations, coarse presence such as online/offline/in game, and duo streaks | Provide private friend play and protect players |
| Drawing data | Vector strokes, colors, tool settings, connection-anchor data, finalized drawing halves, and merged results | Save, transmit, reveal, score, and locally display your creations |
| Nearby Doodle data | Your display name, temporary discovery identifiers and encryption key, selected drawing style, invitation status, encrypted drawing updates, and completed drawing | Discover and connect two devices on the same local network and provide the Nearby Doodle session you request |
| Device, security, and notifications | Firebase installation and messaging tokens, App Check/Play Integrity signals, IP address and technical request data | Push invitations, prevent abuse, secure the service, and diagnose failures |
| Analytics and diagnostics | App interactions, onboarding completion, device/app information, approximate region derived by providers, performance and error information | Understand use, improve reliability, and measure features |
| Advertising and consent | Advertising ID when available, IP address, device and app information, ad impressions and interactions, diagnostics, and privacy/consent choices | Obtain and respect privacy choices, provide and measure ads, limit repetition, prevent fraud, and support non-personalized or personalized ads where permitted |
| Age group | A broad age group derived on your device from the birth year selected during onboarding; the birth year itself is immediately discarded and is not stored | Apply eligibility, privacy, consent, and advertising treatment appropriate to the age group |
| Support communications | Information you include when contacting us | Answer requests and resolve problems |
DuoDoodle does not request access to your contacts, precise location, camera, microphone, or complete photo library. If you choose a personal profile photo, Android's system photo picker gives DuoDoodle access only to the image you select.
4. Optional profile photos
You may use a built-in avatar or voluntarily select a personal image as your profile photo. DuoDoodle validates the selected file, applies its recorded orientation, center-crops it to a square, resizes it, and re-encodes it as a compressed JPEG. This process removes the original file's embedded metadata from the uploaded copy. The original image remains under the control of your device and photo provider.
The processed profile photo is stored in Firebase Cloud Storage under your account. Authenticated DuoDoodle players may receive the processed photo when necessary to display your profile in friends, challenges, Nearby invitations, completed-doodle attribution, and reveal image or video exports. Profile photos are not used for facial recognition, identity verification, advertising personalization, or biometric analysis.
5. Drawings, privacy, and sharing
DuoDoodle has no public drawing gallery, public chat, direct messaging, or voice chat. During secret-play phases, each player receives only the prompt and drawing information intended for that player. Finalized online halves become available to the match participants when the server unlocks the reveal.
Nearby Doodle: When you open Nearby Doodle, or enable Available to nearby players while DuoDoodle is open, the Game temporarily advertises a DuoDoodle service on your local network. Another DuoDoodle player on the same network may discover your availability and display name and send an invitation. You can disable idle availability in Settings and may decline any invitation.
If you accept or start a Nearby Doodle, the two devices exchange the selected mode, display names, profile-photo reference when available, drawing updates, completion state, and finished drawing directly over the local network. Nearby session content is protected in transit with ephemeral key agreement and authenticated encryption. DuoDoodle's cloud backend does not relay or store the direct drawing session; an authenticated device may separately retrieve a participant's processed profile photo from Firebase Cloud Storage. Each participating device may save the completed drawing and attribution in its Local Album.
Your Local Album is stored on your device. When you choose Share, Android sends the media only to the app or person you select through the system share sheet. Those recipients and third-party apps handle the shared copy under their own policies.
6. How we use information
- Provide authentication, friend connections, rooms, challenges, Daily Doodle, drawing, reveal, scoring, XP, and progression.
- Synchronize matches, send invitations and status notifications, and recover from interrupted sessions.
- Discover available DuoDoodle devices and securely exchange invitations and drawings on the same local network when you use Nearby Doodle.
- Display an optional profile photo beside your name and the drawing half attributed to you, including in exports you or another participant intentionally creates.
- Protect accounts and services, enforce limits, investigate abuse, and comply with law.
- Analyze aggregate use and improve accessibility, performance, content, and game balance.
- Communicate service notices and respond to support or privacy requests.
7. Legal bases where required
Depending on your location, we rely on performing our contract with you, our legitimate interests in operating and securing the Game, your consent where required (including certain analytics, notifications, or advertising), and compliance with legal obligations. You may withdraw consent through available device or in-game controls; withdrawal does not affect earlier lawful processing.
8. When information is disclosed
- Other players: Match participants can see your display name, built-in avatar or optional processed profile photo, coarse status, gameplay results, reactions, and revealed drawing. Friends can see limited social/profile information.
- Nearby players you choose: DuoDoodle players on the same local network can see that your device is available and may see your display name. A player you invite or accept receives the information needed for your direct Nearby session, including your display name and drawing.
- Service providers: We use Google services including Firebase Authentication, Firestore, Realtime Database, Cloud Functions, Cloud Messaging, Analytics, App Check, Hosting, Google Mobile Ads, and Google's User Messaging Platform. Google processes data under its applicable terms, Firebase privacy information, and Google Privacy Policy.
- Legal and safety: We may disclose information when reasonably necessary to comply with law, protect players, investigate fraud or abuse, or defend legal rights.
- Business changes: Information may transfer as part of a merger, financing, acquisition, reorganization, or sale, subject to applicable law and continued privacy protections.
We do not sell your personal information.
9. Advertising and privacy choices
DuoDoodle includes the Google Mobile Ads SDK. Closed-testing builds currently request Google test advertisements; public builds may request live advertisements. Google may process an advertising identifier, IP address, approximate location inferred from IP, device and app information, consent choices, ad impressions/interactions, and diagnostics to deliver, limit, measure, and secure ads and—only where permitted—personalize them.
Where required, DuoDoodle uses Google's User Messaging Platform to request and record advertising privacy choices before requesting ads. When applicable, you can revisit those choices through Settings → Privacy choices. You can also use Android's advertising privacy controls.
Ads are limited to designated content-list placements and natural breaks after completed doodles. DuoDoodle does not intentionally show ads while drawing, scanning for or connecting to Nearby players, handling invitations, waiting for another player, or revealing a completed drawing.
Turning off personalized ads does not necessarily remove ads; it generally means contextual or non-personalized ads may be shown. Provider-specific retention and processing will be described when providers are selected.
10. Purchases — if enabled in a future release
The current version does not offer real-money purchases. If purchases are added, Google Play will process payment information. DuoDoodle may receive product, purchase-token, entitlement, price/currency, and transaction-status information needed to grant and restore content, prevent fraud, and support refunds. We do not receive your complete payment-card details. This policy and the Play disclosure will be updated before release.
11. Retention
We retain information only as long as reasonably needed for the purposes above. Current service design uses short-lived online data where practical: pending live invitations generally expire within minutes; private room codes generally expire within about 30 minutes; live round secrets and submitted drawing payloads are generally scheduled for deletion within about 24 hours; and pending friend requests generally expire after 14 days. Asynchronous challenges expire according to their published challenge deadline.
Nearby discovery identifiers and ephemeral encryption keys exist only for the active availability or session period. Direct Nearby network messages are not retained by DuoDoodle's backend. A completed Nearby drawing may remain in each player's Local Album until that player deletes it, clears app data, or uninstalls the Game.
Profile, friendship, achievement, score, XP, and match-summary records may remain while your account is active. Security, integrity, backup, legal, or transaction records may be retained longer where reasonably necessary and then deleted or de-identified. Provider backups may take additional time to cycle out.
Your current processed profile photo remains in Cloud Storage while it is selected for your active account. Replacing it overwrites the previous active copy, selecting a built-in avatar removes the active cloud copy, and account deletion targets the account's avatar-storage folder. Previously exported images or videos and copies saved or shared by participants are not controlled by DuoDoodle after export.
12. Security and international processing
We use access controls, backend-authoritative state changes, App Check, encrypted network transport, and data-lifecycle rules intended to protect information. Nearby Doodle uses an ephemeral P-256 key agreement and AES-256-GCM authenticated encryption for invitation and drawing content sent between devices. No system is perfectly secure, so we cannot guarantee absolute security. Google and other providers may process information in countries outside yours, using safeguards required by applicable law.
13. Your choices and account deletion
- Control game sound, haptics, motion, contrast, Nearby availability, advertising privacy choices where required, and notification permission in the Game or device settings.
- Choose whether to link a guest account to Google.
- Choose a built-in avatar instead of a personal photo, replace a selected photo, or remove the cloud photo by saving a built-in avatar.
- Block players and decline or cancel invitations.
- Delete your account in Profile → Delete account, or follow the external instructions at duodoodle.web.app/delete-account.
Account deletion removes the Firebase account and associated private cloud data targeted by the deletion process, including profile, friend/social data, active rooms/challenges, private drawing payloads and secrets, achievements, XP, and Daily scores, subject to limited legal, security, integrity, backup, and fraud-prevention retention. Local Album files remain on your device until you delete them, clear app data, or uninstall the Game.
14. Your privacy rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, withdraw consent, and complain to a data-protection authority. Email hello@akashsarker.com. We may need to verify that you control the account before responding.
15. Younger users
DuoDoodle is intended for ages 15+. During onboarding, the selected birth year is used on the device to derive an age group and is then discarded; only the broad group is retained. A user identified as under 13 cannot continue into the Game. If you believe a child provided information contrary to this rule, contact us so we can investigate and delete it.
16. Changes to this policy
We may update this policy as the Game, providers, law, advertising, or purchases change. We will post the new date here and provide additional notice when required. Material changes apply prospectively unless law permits otherwise.
17. Contact
Akash Sarker
Privacy: hello@akashsarker.com