Privacy Policy

Last updated: August 24, 2026

Toss and Turn ("we", "our", or "the app") is a daily art collab app: you start a drawing for a stranger to finish, and finish a stranger's drawing, once each per day. This policy explains what we collect, how we use it, and your rights.

1. Information We Collect

Account information: When you create an account, we collect your email address and a username. Authentication is handled securely through Supabase using passwordless email sign-in links — we never see or store a password.

Drawings: The drawings you create — both the pieces you start and the pieces you finish for other people — are stored so they can be matched, revealed, and kept in your own history.

Messages: If you and another user mutually connect after a piece is revealed, the messages you send each other are stored so the conversation can be displayed to both of you.

Groups and categories: Any groups you create or join, and any categories you use to organize your own drawings, are stored against your account.

Reports: If you report a drawing, we store the report and the piece it refers to so it can be reviewed.

2. How We Use Your Data

Your data is used exclusively to provide the app's features: matching you with pieces to finish, showing you your own history, enabling chat once you and another user both agree to connect, and reviewing reported content. We do not sell, rent, or share your data with third parties for marketing purposes, and we have no AI features in this app — nothing you draw or write is sent to any AI model.

3. Anonymity

You choose, per drawing, whether to stay anonymous. If you stay anonymous, the other person never sees your name, and connect requests for that piece are disabled on both sides. If you don't, your name becomes visible to your collaborator once the piece is revealed, and either of you can then send a connect request to the other.

4. Blocking and Reporting

You can report a drawing you believe is inappropriate, and you can block another user directly from a conversation. Blocking is one-directional and private — the person you block is never told they've been blocked. Once blocked, that person can no longer message you or send you connect requests, in either direction. New accounts' first two drawings are held out of circulation until reviewed, before anyone else can be matched with them.

5. Data Storage and Security

All data is stored securely using Supabase, which provides encrypted storage, secure authentication, and row-level security policies — each user can only access their own data and data they're directly involved in (a piece you started or finished, a group you belong to, a conversation you're part of).

6. Third-Party Services

Supabase: Database hosting, authentication, and file storage. See Supabase's privacy policy at supabase.com/privacy.

7. Your Rights

  • •Access the data we hold about you
  • •Change your username at any time from the You tab
  • •Delete your account and your data directly from the app, at any time
  • •Request a copy of your data by emailing hello@artwoork.app

8. Data Retention and Deletion

Deleting your account permanently removes your profile and any pieces you started that nobody has picked up yet. A piece you claimed or finished for someone else stays intact after you delete your account — since it belongs to that collaboration, not just you — but your identity is removed from it. This happens immediately when you delete your account in the app; there's no waiting period.

9. Children's Privacy

Toss and Turn is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, please contact us.

10. Changes to This Policy

We may update this policy from time to time. Continued use of Toss and Turn after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this privacy policy, your data, or to request a data export, contact us at hello@artwoork.app.