YS Labs
doodloopdoodloop Privacy Policy
Effective date: October 25, 2026 Operator: YS Labs (a sole proprietorship registered in South Korea), Yongin-si, Gyeonggi-do, South Korea · contact@yslabs.dev
This policy explains what the doodloop app for iPad, iPhone and Android (the "App") keeps on your device, what leaves it, and why. "We" and "us" mean YS Labs.
The short version
- Drawing, making cards, saving, sharing and watching a timelapse send nothing to us. There are no accounts.
- Data leaves the device only when you make a loop (a short AI animation of a drawing), and only after a grown-up has passed the grown-up gate and allowed it on a screen that names Anthropic and xAI. To withdraw permission, stop making loops; removing the App also deletes the choice from the device.
- For a loop we send the drawing as a picture and a short text instruction. Our relay server passes them on and keeps no copy.
- The App makes a random install ID to limit loop requests per device. It is not an advertising or hardware ID.
- No advertising, no tracking, no analytics or crash-reporting SDKs, no social features, no chat. We do not sell personal information or share it for advertising.
1. What stays on your device
Drawings, layers, sketch underlays (photos you trace over), timelapse frames, your credit balance, settings and the grown-up's consent choice are stored only on your device. Photos you pick or take for a sketch underlay are processed on the device and never uploaded.
2. What leaves your device when you make a loop
When you tap Start loop creation (in the Loop sheet or the timelapse sheet), the App sends to our relay server (hosted by Netlify): - the drawing as a PNG picture, exactly as it was drawn; - a short text instruction for the motion: a fixed instruction from the App, plus the motion note if you typed one (the motion note is meant to be typed by a grown-up; we do not store it, and it is used only to make that loop); - the loop length and picture shape, the App version, the random install ID (Section 3) and the consent version.
The relay server then: - Anthropic (Claude): if a grown-up allowed it on the consent screen and no motion note was typed, sends the same PNG and a fixed instruction to Anthropic, which writes one sentence on how the drawing should move. Anthropic receives nothing else — not the install ID, not your IP address, not a motion note. A loop made with a motion note does not use Anthropic. - xAI (Grok Imagine): sends the PNG and the motion instruction to xAI, which makes the video clip (with sound effects and music, no speech). The App downloads the finished clip to your device.
The relay server does not store the picture, the instruction or the clip. When Anthropic is used and the drawing looks inappropriate, the loop is refused before anything reaches xAI.
Please keep names, faces and other personal details out of drawings and motion notes you turn into loops.
3. The install ID and request limits
With each loop request the App sends a random install ID that it created. The relay server keeps that ID with the times of the device's recent requests to limit how many loops one device can request per hour. If the App cannot keep an ID, the connection's IP address is used for the same count instead. The ID is not linked to a person, is not shown in the App and is not used for anything else.
4. Reports
Anyone can report a loop from inside the App. A report sends us the loop's request ID and video link from xAI (when the App has them), the reason picked, the install ID, the App version, the platform (iOS or Android) and the time. It never includes the drawing or the video file itself; the video link points to the clip on xAI's servers and stops working when xAI deletes it. We keep reports to review them and deal with misuse.
5. Purchases
Credit packs (consumable, no subscriptions) are sold through Apple's In-App Purchase on iPad and iPhone and through Google Play Billing on Android. Apple or Google handles payment; we never receive your payment details. The App checks each purchase with the store on the device and adds the credits to the balance kept on the device. Buying is behind the grown-up gate.
6. Saving and sharing
When you save, the App writes the file to your photo library: on iPad and iPhone to Photos (album "doodloop"); on Android to the shared gallery (Movies/doodloop and Pictures/doodloop), where saved files stay even if the App is removed. Sharing uses your device's share sheet; we do not see what you share or with whom. The App may show the store's own rating prompt (Apple or Google); we receive no data from it.
7. Device permissions
- iPad / iPhone: Photos (to pick a photo for a sketch underlay and to save your drawings, loops and timelapses) and Camera (to take a photo for a sketch underlay).
- Android: Internet (for loops) and, on Android 7–9 only, storage write access to save to the gallery. Photos and the camera are opened through the system picker; the App does not ask for camera or photo-reading permission.
8. Who processes data for us
| Provider | Role | What | Where |
|---|---|---|---|
| Netlify, Inc. | Hosting and our relay server | Loop requests in transit, install ID and request times, reports | United States |
| SpaceXAI LLC (xAI) | Makes the loop clip | Drawing PNG and motion instruction | United States |
| Anthropic, PBC | Writes the motion sentence (Claude) | Drawing PNG and a fixed instruction | United States |
| Apple / Google | Payments, app distribution, Photos and share sheet | As described in their own policies (independent controllers) | Their locations |
Netlify, as a hosting provider, may also process technical connection data such as IP addresses to deliver and secure its service, under its own policy.
9. How long data is kept, and deleting it
| Data | Kept |
|---|---|
| Drawings, underlays, timelapses, credits, settings | On your device until you delete them (Gallery → press and hold a drawing → Delete) or remove the App. Unused credits are lost when the App is removed. |
| Drawing PNG and instruction | Not stored by our relay server. SpaceXAI LLC (xAI) keeps the request and its result for up to 30 days and does not use them to train its models. Anthropic deletes them within 30 days (if flagged for breaking its usage policy: inputs and outputs up to 2 years, safety classification scores up to 7 years). |
| Install ID (or IP address) and request times | Times older than one hour are dropped; the record is deleted at most 2 days after the last loop request. |
| Reports | Until reviewed, at most 90 days after receipt. |
doodloop has no accounts, so there is no account to delete. To ask us to delete a report or anything else, email contact@yslabs.dev.
10. What we do not do
No advertising or advertising IDs, no tracking across apps or websites, no analytics, crash-reporting or third-party SDKs that collect data, no social features or chat, no profiling or automated decisions about you. We do not sell personal information or share it for advertising.
11. Your rights in the EEA and UK (GDPR / UK GDPR)
- Controller: YS Labs (contact above). YS Labs is in South Korea, which the European Commission and the UK Government recognize as providing adequate protection.
- Legal bases: making the loop you ask for and limiting requests so the service keeps working — performance of a contract (Art. 6(1)(b)); reviewing reports — legitimate interests in keeping the service safe (Art. 6(1)(f)).
- Processors and transfers: Netlify, SpaceXAI LLC (xAI) and Anthropic process data for us in the United States. Netlify is certified under the EU-U.S. Data Privacy Framework (with Standard Contractual Clauses as back-up); xAI's and Anthropic's transfers are covered by Standard Contractual Clauses in their data processing terms. Email us for a copy of the safeguards.
- Your rights: access, rectification, erasure, restriction, objection and data portability, and the right to complain to the data protection authority where you live (in the UK, the ICO). The install ID is random and not shown in the App, so we usually cannot tell which records are yours (Art. 11 GDPR); removing the App deletes the ID from your device, and what the relay server keeps is deleted on the schedule in Section 9. For a report, tell us the date and reason you picked and we will find and delete it. We reply within one month.
- Do you have to provide data? Only to make loops — the drawing is what a loop is made from. Drawing, saving and timelapses work without sending anything.
12. California (CCPA/CPRA)
- Categories collected in the last 12 months: identifiers (the random install ID, or an IP address as a fallback) and user content (a drawing and motion instruction, passed to our providers to make the loop you ask for and not stored by us).
- Purposes: to provide loops, limit requests and review reports.
- Sale and sharing: we do not sell or share personal information, including for cross-context behavioral advertising, and have not done so in the last 12 months. We do not use sensitive personal information.
- Your rights: to know, delete and correct, and not to be discriminated against for using them. Email contact@yslabs.dev; an authorized agent may act for you with your written permission.
13. Children
doodloop is made for children and grown-ups to use together (App Store age rating 4+). A child can draw, save and watch timelapses without anything leaving the device. Buying credits, Settings, and the first time a drawing is sent are behind a grown-up gate — a question a young child cannot answer. The first time a drawing is sent, the grown-up gate is followed by a screen that says what is sent and where. We do not ask for or knowingly collect a child's name, contact details, photos or location. The random install ID is used only to limit requests (support for the internal operation of the service). It is never used to contact a child, build a profile or show ads, and it is not combined with other information. Parents and guardians can ask us to delete a report or anything else at contact@yslabs.dev. This applies to children under 13 in the United States, under the age set in each EU country (13–16), and under 14 in South Korea.
14. South Korea
See the Korean summary below for the notices required by the Personal Information Protection Act.
15. Changes
If this policy changes, we post the new version here with a new effective date. Earlier versions: September 9, 2026 (first version); September 28, 2026 (Android, install ID, reports); October 6, 2026 (EEA notice); October 15, 2026 (Anthropic added).
16. Contact
YS Labs · contact@yslabs.dev
한국어 요약 (개인정보 보호법 고지)
- 처리 목적·항목: ① 루프 생성 — 그림 PNG, 움직임 지시문(입력한 경우 움직임 메모 포함), 루프 길이·화면 비율, 앱 버전 ② 기기당 요청 수 제한 — 앱이 만든 무작위 설치 ID(보관할 수 없으면 접속 IP 주소)와 최근 요청 시각 ③ 신고 검토 — 루프 요청 ID·xAI 영상 링크, 신고 사유, 설치 ID, 앱 버전, 플랫폼, 시각. 그림·밑그림 사진·타임랩스·크레딧·설정은 기기 안에만 있습니다.
- 보유 기간: 그림 PNG·지시문은 중계 서버에 저장하지 않습니다(xAI 최대 30일, Anthropic 30일 이내 삭제 — 이용 정책 위반 표시 시 입력·출력 최대 2년, 안전 분류 점수 최대 7년). 설치 ID·요청 시각은 마지막 요청 후 최대 2일. 신고는 검토 후, 최대 90일.
- 제3자 제공: 하지 않습니다.
- 처리 위탁·국외 이전: 국외 이전 근거: 보호자가 앱의 동의 화면에서 허락한 경우에만 전송합니다(개인정보 보호법 제28조의8 제1항 제1호).
- Netlify, Inc.(미국) — 중계 서버·호스팅 / 그림 PNG·지시문(전송 중에만), 설치 ID(또는 IP 주소)·요청 시각, 신고 내용 / 최대 2일(신고는 최대 90일) / 연락처: privacy@netlify.com
- SpaceXAI LLC(xAI, 미국) — 루프 영상 생성 / 그림 PNG·움직임 지시문 / 최대 30일 / 연락처: privacy@x.ai
- Anthropic, PBC(미국) — 움직임 문장 작성 / 그림 PNG·고정 지시문 / 30일 이내 삭제(이용 정책 위반 표시 시 최대 2년) / 연락처: privacy@anthropic.com
- 이전 시기·방법: 루프를 만들거나 신고할 때 암호화된 네트워크(HTTPS)로 전송.
- 거부 방법·효과: 동의하지 않으면 루프를 만들 수 없지만, 그리기·저장·타임랩스·카드는 그대로 쓸 수 있습니다. 동의를 철회하려면 루프를 만들지 않으면 되며, 앱을 삭제하면 기기에 저장된 선택도 지워집니다.
- 만 14세 미만 아동: 크레딧 구매와 첫 루프 생성(그림 전송)은 보호자 확인(어린아이가 답할 수 없는 질문) 뒤에만 열리고, 그림 전송은 무엇을 어디로 보내는지 알리는 화면에서 보호자가 허락해야 진행됩니다. 아동의 이름·연락처·사진·위치는 요청하거나 수집하지 않습니다. 앱은 이름·연락처 등 아동을 알아볼 수 있는 정보를 받지 않으며, 설치 ID는 다른 정보와 결합하지 않습니다.
- 파기: 보관 기간이 지나면 전자 파일을 복구할 수 없는 방법으로 자동 삭제합니다.
- 정보주체 권리: 열람·정정·삭제·처리정지를 contact@yslabs.dev로 요청할 수 있으며, 지체 없이 조치합니다. 법정대리인도 같은 방법으로 요청할 수 있습니다.
- 자동 수집 장치(쿠키 등): 쓰지 않습니다. 광고 식별자도 쓰지 않습니다.
- 안전성 확보 조치: 전송 구간 암호화(HTTPS), 중계 서버 접근 제한(앱 전용 키), 보관 데이터 최소화·자동 삭제.
- 개인정보 보호책임자: YS Labs 개인정보 보호 담당 · contact@yslabs.dev
- 권익침해 구제: 개인정보분쟁조정위원회(1833-6972, www.kopico.go.kr), 개인정보침해신고센터(118, privacy.kisa.or.kr), 대검찰청(1301), 경찰청(182).
- 변경: 방침이 바뀌면 시행 전에 이 페이지와 시행일을 갱신합니다.