Last updated: 17 August 2026
Data controller: Nexo Apex S.L., Edificio Camí Reial, c/ Camí Reial 13-17, 3a planta, 43700 El Vendrell, Tarragona, Spain — hi@nexoapex.com
Rapid Painting is a drawing game for children and families. This policy explains exactly what the app stores, why, and for how long. It is written to be readable by a parent, not only by a lawyer.
The short version
- We never ask for a name, an email address, a phone number or an account. There is nothing to sign up for.
- Playing on a single device is completely offline. Nothing is sent anywhere.
- Online play stores only what the game needs to work: the room, the drawings everyone made, and a randomly assigned animal nickname such as “panda”.
- We show no advertising, use no analytics SDK, and do no tracking, in the app or across other apps and websites.
- We never sell or share personal data, and we do not build profiles.
What we collect and why
Playing on one device (single player)
Nothing leaves the device. Words, drawings and settings stay in the app’s own storage on the phone or tablet.
Playing online (multiplayer)
To connect players in the same room, the app stores the following in Google Firebase (Cloud Firestore), on our behalf:
| Data | Why we need it |
|---|---|
| An anonymous device identifier (Firebase anonymous sign-in) | Tells one player from another inside a room. It is not linked to a name, an email or an account. |
| A randomly assigned nickname, such as “rabbit” or “panda” | Shows who drew what. The app never asks the child for their name and never uses it. |
| The room: its share code, the game settings, timestamps, and which words have been played | Runs the game and keeps every device on the same round. |
| The drawings players make, as line artwork, together with the word they drew | Shows the drawings in the shared gallery at the end. |
| Votes on drawings | Decides the winner at the end of a game. |
We do not collect location, contacts, photos, the microphone, the camera, advertising identifiers, or any device-fingerprinting signal.
Subscriptions
Rapid Painting Pro is handled by RevenueCat on top of the Apple App Store and Google Play. When someone subscribes:
- Payment details never reach us or the app. They are handled entirely by Apple or Google.
- RevenueCat stores an anonymous subscriber identifier and the subscription’s status (active, expired, renewed) so the app knows whether to unlock unlimited hosting.
- Purchases and links that leave the app sit behind a parental gate — a multiplication a young child cannot solve by accident.
On the device only
A small local counter records how many free online games this installation has hosted, so the app knows when the free allowance is used up. It never leaves the device and is deleted when the app is uninstalled.
Children’s privacy
Rapid Painting is designed for children.
- We do not knowingly collect personal information from children. The app never asks a child for their name, age, email address, photo, or location.
- Nicknames are generated by the app, not typed by the child.
- There is no chat, no free-text messaging, and no way for players to send each other anything except a drawing of the given word.
- There is no advertising and no third-party analytics or tracking SDK.
- Purchases and every link that leaves the app are behind a parental gate.
The only child-created content the app handles is the drawings themselves, which are shown to the other players in the same game and to nobody else.
Who else processes this data
| Processor | Role |
|---|---|
| Google (Firebase Authentication, Cloud Firestore, App Check) | Hosts the online game data |
| RevenueCat | Subscription status |
| Apple and Google | Payment processing and subscription management |
We do not share data with anyone else, and we do not sell it.
How long we keep it
A game room is deleted as soon as its host leaves it or the last player leaves. Drawings made during online games are currently kept on our Firebase project so a game’s gallery can be reopened; we are adding automatic expiry so they are removed after a fixed period. Until that is in place, you can have any drawing removed at any time by asking us — see below.
Nothing from single-device play is stored anywhere but the device itself.
Your rights
Because we hold no account and no identifying information, we usually cannot link stored data back to a particular person. If you believe a drawing or a room relates to you or your child and you would like it deleted, contact hi@nexoapex.com with the game’s share code and we will remove it.
Under the GDPR you have the right to access, correct, delete and port your personal data, to object to or restrict processing, and to complain to your supervisory authority (in Spain, the AEPD).
Security
Access to the online game data is restricted by Firestore security rules so that only the players in a room can read that room and its drawings, and each player can only modify their own.
Changes
If this policy changes materially we will update this page and the “last updated” date above.
Contact
Nexo Apex S.L. — hi@nexoapex.com