Legal
Privacy Policy
Effective 7 August 2026
What Drafty Collects
Drafty collects the email address used for account authentication, your display name and username, your accepted Drafty relationships, invitations, basic presence information, legal-consent records, and safety reports you submit. Drafty does not upload your phone contacts.
Live Draft Text
Text is temporarily stored so both participants can see the current live Draft. Each new message replaces the previous message. The service is designed to erase the current text when either participant leaves or the session ends. Drafty does not provide a conventional message-history feature.
Screenshots and Screen Capture
iOS notifies Drafty after a screenshot is taken and when the screen is being recorded, mirrored, or shared. If iOS reports either event during an active Draft, Drafty automatically ends that Draft. Drafty may retain limited end-reason metadata such as the capture type, participating account identifier, and time so both participants can be told why the session ended. Drafty does not receive or store the screenshot, recording, or shared-screen content. Because iOS reports screenshots after they are taken, Drafty cannot prevent a screenshot that has already occurred or guarantee that every capture will be detected.
Technical and Security Information
Drafty and its service providers process technical information such as IP address, device or request metadata, authentication events, push-notification tokens, and service logs. This information is used for account security, abuse and fraud prevention, routing, reliability, troubleshooting, and protecting the service.
Verification and Service Providers
Drafty uses Supabase for authentication, database, realtime service, and hosting, and Resend for authentication, invitation, and safety-report notification emails. These providers process information only as needed to operate, secure, and deliver the service under their applicable terms.
How Information Is Used
Information is used to authenticate accounts, connect accepted Drafties, operate live sessions, prevent abuse, investigate reports, maintain security, comply with applicable legal obligations, and provide support. Personal information is not sold to advertisers.
Retention and Deletion
Account, authentication, relationship, and legal-consent records are retained while necessary to operate your account and meet applicable legal or security requirements. Safety records may be retained when legally or operationally necessary to investigate abuse. Live Draft text follows the temporary session lifecycle described above. You can permanently delete your account from Settings inside the app.
Lawful Requests
Drafty may preserve or disclose information it lawfully holds when required by applicable law, a valid legal process, or a competent authority. Drafty does not promise that use of the service is anonymous, untraceable, or exempt from lawful process.
Age and Safety
Drafty is intended only for people aged 18 or older. Users can report or block another Drafty. Drafty may use proportionate technical safeguards to restrict clearly prohibited abusive or exploitative use.
Contact
Privacy, support, business, and general enquiries can be sent to hello@draftychat.com.