This privacy policy applies to the Draw app for mobile devices, together with any related services operated by Dilman Tofiq (collectively, the "Application"). Dilman Tofiq is hereby referred to as the "Service Provider".

The Application collects information when you download and use it. This information may include information such as:

• Your device's Internet Protocol address
• The pages of the Application that you visit, the time and date of your visit, the time spent on those pages
• The time spent on the Application
• Your mobile operating system you use

For a better experience and to ensure platform safety, the Service Provider may require you to provide certain personally identifiable and sensitive information to prove human identity and verify that the user is over 18 years of age. This includes, but is not limited to:

• Personal Information: Email, Name, Phone Number, and Date of Birth.
• Sensitive Documents: Images of User ID Cards or official government-issued identification.
• Device Identifiers: Device ID / Firebase Cloud Messaging (FCM) tokens.

Images of ID cards and collected dates of birth are processed solely for age restriction validation and fraud prevention. This data is transmitted securely over encrypted protocols and is handled with strict confidentiality.

The Application or its third-party SDKs may use cookies, SDKs, pixels, and similar technologies to support functionality, analytics, or service delivery. Where required by applicable law, the Service Provider will obtain consent before using non-essential tracking technologies.

You may request access to, correction of, or deletion of your personal data held by the Service Provider. To exercise these rights, or to withdraw consent where processing is based on consent, contact the Service Provider at hawkar.omar2023@gmail.com.

If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. To exercise your CCPA/CPRA rights, contact the Service Provider at hawkar.omar2023@gmail.com.

Only aggregated, anonymized data is periodically transmitted to external services to aid the Service Provider in improving the Application and their service. The Service Provider may share your information with third parties in the ways that are described in this privacy statement.

The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms.

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions or other legally recognized transfer mechanisms
• Your consent, where required and legally permitted

You can stop further collection of information from your mobile device by uninstalling the Application. Uninstalling will stop the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted.

The Service Provider retains personal data based on its necessity for the stated purposes:

• User Provided & Sensitive Verification Data: Retained for validation purposes, and permanently deleted upon an explicit account deletion request or within 12 months of prolonged user inactivity.
• Automatically Collected Data: Retained for up to 24 months from collection.

The Application is strictly intended for individuals 18 years of age or older. The Service Provider does not knowingly solicit data from or market to children under 16 or minors under 18 years of age. If it is discovered that verification data has been bypassed by an under-age individual, it will be instantly purged from our infrastructure servers.

The Service Provider provides physical, electronic, and procedural safeguards to protect information (especially uploaded government ID documents) processed and maintained via secure production endpoints.

This privacy policy is effective as of 2026-06-14.

If you have any questions regarding privacy or data removal procedures, please contact the Service Provider via email at hawkar.omar2023@gmail.com.