ArtLevelUp
Privacy Policy
Last updated 28 July 2026
ArtLevelUp is a drawing-practice app operated by TrashPanda Studios, the data controller for the purposes of this policy. It explains what the app stores about you, why, and how to get rid of it. It covers the mobile app and this website.
What we collect
Only what the app needs to work. There is no advertising and no tracking for advertising.
- Your account — email address and the display name you choose. Your password is handled by Firebase Authentication and is never visible to us.
- What you draw — journal entries: the quest title and prompt, the date and time, which skills it trained, and any note or title you add.
- Photos you attach — optional. A quest can always be logged without one.
- Your progress — skill levels and experience, account level, streak, achievements and customisations you have unlocked, and your subscription status.
- Crash reports — diagnostic data when the app fails, through Firebase Crashlytics, so it can be fixed.
We do not collect your location, contacts, calendar, microphone, or anything from other apps. Camera and photo-library access is requested only when you choose to attach a picture, and the photo goes only where you send it.
Why we hold it
To provide the service you asked for: your board, your journal, your progress, and your subscription. The legal basis under GDPR for all of that is performance of a contract, and none of it is bundled with a marketing opt-in. Marketing email is the one thing we hold on a different basis — your consent — and it is described below.
Notifications
Practice reminders are optional, off until you switch them on, and scheduled entirely by your own phone. We do not hold a push token and nothing is sent to your device from our servers — the only thing stored is the time and days you chose, so the setting follows you to a new phone. Turning reminders off in the app, or off for ArtLevelUp in your phone's settings, stops them immediately.
Marketing emails
Now and then we may email you about a new feature or a special offer. These are sent only if you opt in, and the legal basis is your consent under GDPR. The opt-in is a single, unticked checkbox when you sign up — never a condition of creating an account — and we record whether and when you agreed so we can honour your choice.
You can withdraw at any time, as easily as you gave it: turn it off under Settings → Account → Email consent in the app, or use the unsubscribe link in any marketing email. Withdrawing does not affect the occasional service messages we may need to send about your account itself.
Who processes it
- Google (Firebase) — authentication, database, file storage, server functions, and crash reporting.
- RevenueCat — subscription status, so the app knows whether Plus is active.
- Apple and Google — payment processing for subscriptions. We never see your card details.
We do not sell your data, and we do not share it with anyone else.
How long we keep it
- Photos on the free plan are deleted after 90 days. With Plus they are kept until you delete them or your account.
- Journal entries are kept until you delete your account. On the free plan you can see the last 30 days; the older ones are hidden rather than removed, and reappear if you subscribe.
- Everything else — account, progress, achievements — is kept until you delete your account.
Deleting your account
You can delete your account and everything in it from Settings → Account → Delete Account in the app. It is immediate and cannot be undone. If you no longer have the app installed, see Delete your account.
Deleting your account does not cancel a subscription. Subscriptions are held by Apple or Google, not by us — cancel yours in your App Store or Google Play account settings.
Your rights
If you are in the UK, EU, or another region with similar laws, you can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email us from the address on your account and we will respond within one month. We ask you to write from that address so we can be sure the request is really yours.
Children
ArtLevelUp is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will remove it.
Changes
If this policy changes materially we will update the date at the top and note the change in the app.