Privacy
Smudjo does not collect anything about you or what you paint. That is the whole policy; the rest is detail.
Last updated 7 November 2026.
What we collect
Nothing. Smudjo has no account, no sign-in, no analytics and no third-party SDKs. There is no identifier for you anywhere in the app, and Smudjo itself sends no report of any kind.
Your paintings
Paintings are files, stored in Smudjo's folder in your own iCloud Drive, or on your device when iCloud is off. Smudjo does not upload them to us. Deleting the app leaves the ones in iCloud Drive exactly where they are.
Painting together
A session is opened by one person, who gets a six-character room code. There is no public directory and no matchmaking — a session cannot be found without its code.
The one exception is your choice: with Nearby people join without a code turned on (it is off unless you turn it on), the code is announced on your local network, so anyone on the same Wi-Fi can join the sessions you host. Over the internet the code is still needed.
An invite link (smudjo.com/join) carries the room code after a #, the part of an address a browser never sends: the invite page reads it on your device and sends it nowhere, and has no analytics or third-party script.
When everyone is on the same local network, devices connect directly to each other and nothing leaves the network.
Otherwise the session passes through a relay we operate (or one you set in Settings), so that two devices that cannot see each other still can. The relay cannot read anything it carries. Every message is encrypted end to end with a key derived from the room code, which never leaves the devices. The relay sees a room number and a stream of bytes, holds them only long enough to pass them on, and stores none of it. We cannot see your painting, and neither can anyone else.
Purchases
The one-time purchase is handled entirely by the App Store. We do not see your payment details, your name or your email address.
Crash reports
If you have turned on "Share with App Developers" in your device's settings, Apple may pass us anonymous crash reports. We use them only to fix bugs, and we cannot identify you from them.
Diagnostics
If you are helping us track down a bug, a developer build can record what happens during a session to a file on your device. It is off unless you turn it on, it does not leave your device on its own, and the only way it reaches us is if you export it and send it yourself.
Children
Smudjo is not directed at children, has no advertising, no chat and no public content of any kind.
Changes
When this policy changes, the date above changes with it.