Privacy policy

Bobbi keeps project editing on your iPad. Account services and AI Create use online services. This page explains the distinction and the choices available to you during the beta.

Your projects and artwork

Drawing, local vectorization, digitization and project storage happen on your device. Signing in does not upload your project library or provide cloud project sync. Files you export, share or back up are also subject to the service you choose.

When you use AI Create, the description and any reference image you choose are uploaded for generation or AI vectorization. This includes image-plus-description requests. Only submit images you have permission to share. Artwork you explicitly attach to a support request is also sent to us.

Information used by online services

• Account: your Firebase account identifier, connected Apple or Google sign-in identifiers, and the name and email provided by those services. Apple may provide a private relay email. Bobbi does not receive your Apple or Google password.
• Subscriptions: product, transaction and entitlement records from Apple and RevenueCat, used to verify your plan and associate it with your account. Apple handles payment details.
• AI requests: the submitted description, reference image, chosen options, generated result and request status. Our recovery cache has a 24-hour window; cleanup removes expired result data. Pictures saved to your device remain there.
• Credit history: additions, spending, refunds and the request identifiers needed to prevent duplicate charges.
• Website and support: information you submit in the beta form or by email, and technical request information used by our hosting and authentication services. Review any diagnostic report or attachment before sharing it.

Service providers

We use Google Firebase for account authentication, Apple and Google for sign-in, Apple for App Store payments, RevenueCat for purchase verification and purchase analytics, OpenAI for AI artwork processing, Vercel for hosting and Neon for database storage. Their own privacy terms apply to their services, including their operational retention. The 24-hour recovery window above describes Bobbi’s result cache, not a promise about every provider’s logs.

Sign-in providers also process technical and account information for authentication and fraud prevention, including IP-derived general location. Google’s sign-in SDK declares account contact information, identifiers and usage information; Firebase Auth declares diagnostic information used to maintain its service. Bobbi does not request location permission, access your address book or use advertising trackers.

Reliability reports

Release versions can send limited error and crash reports to Sentry to help us fix failures. Reports contain the app or service version, operating-system version and device class where applicable, sanitized code locations, error categories and random request identifiers. The API also reports whether a response had a server error to measure overall reliability; these outcomes contain no account or request identifiers. Apple’s MetricKit supplies native diagnostic summaries. These reports exclude account identifiers, email addresses, prompts, artwork, project names, file paths, request contents, screenshots and recordings of your activity. Session replay, product analytics and automatic network breadcrumbs are disabled for this reporting.

We selected Sentry’s EU event-storage region and its free plan with a 30-day lookback. This describes event storage and availability, not every provider’s account or operational records. Sentry receives the network connection needed to deliver a report; its project settings prevent storing IP addresses. Reports are used for reliability, not advertising. Diagnostic reports you choose to export from Bobbi are separate; review them before sharing.

Browser storage

Firebase stores sign-in state in browser storage so you can remain signed in. Signing out ends that session on this browser; clearing site data also removes locally stored sign-in state. Provider sign-in pages may use their own cookies. See our browser storage notice.

Your choices

• Draw, edit and save local projects without an account.
• Download your account and credit records from Account → Export account data.
• Request deletion from Account in the app or on this website. You may need to sign in again to confirm ownership.
• Contact support@bobbistudio.com for help with access, correction or deletion.

Deletion removes personal service records and cached generated images. Provider cleanup is retried if a provider is unavailable. Limited account and receipt fingerprints are retained to prevent account or purchase replay. Local projects and saved artwork remain on your devices. Deleting your Bobbi account does not cancel an Apple subscription; see account deletion and cancellation.