privacy policy

Last updated October 5, 2026

who we are

Hyperblob Studio ("we", "us") makes the Wiggle Together app for iPhone and Android and this website, wiggletogether.com. This policy explains what we collect when you use either of them, why, and what you can do about it. Questions go to [email protected].

what we collect

Your account

The first time you open the app, it makes a guest account for you: a random ID and a secret key, kept in your iPhone's Keychain. On Android, the key is kept in the app's own storage and in Google's Block Store, which keeps it through a reinstall and can bring it to your next phone; Block Store copies it to Google's cloud backup only when that backup is end-to-end encrypted. We store the ID and a scrambled (hashed) copy of the key, never the key itself.

If you choose Sign in with Apple, Apple gives us an identifier that belongs to you and this app only, and a token we keep for one purpose: disconnecting Apple from Wiggle Together when you delete your account. We don't ask Apple for your name or email address, so we never receive them.

If you choose Sign in with Google on Android, Google sends us a token that says which Google Account it is. Google always puts your name, email address and profile picture in it too; we read only the account's identifier, and we don't store or use the rest.

Your profile

Your public name (two random words the app gives you, like "sleepy otter"), the nickname you give your friends if you share a moon, your settings (such as whether new colorings are public), the looks you choose for your planet and tubeperson, the order of your moons, and a random ID that App Store and Google Play purchases carry so they reach the right planet.

Your doodles

The doodles you draw and color, stored as pen and marker strokes rather than pictures; when they were made and colored; and where they live: in space, on your planet, or on a moon.

Your moons

Who shares each moon, its invite code while a seat is open, when each of you last drew for it (that's how streaks work), its best streak, and the look you chose for it.

Reports

If you report a doodle, we store which doodle, who made it, and the reason if you give one. We use it to hide that person's public doodles from you and to decide whether the doodle should come down.

Purchases

Apple (on iPhone) and Google Play (on Android) handle every payment: we never see your card or your Apple Account or Google Account details. From them we receive and keep the transaction IDs (on Google Play, its purchase token and order ID), the product, how many you bought, the date, and any refund. We also keep your spacefish balance and a record of what added to it and what you spent it on, what you've unlocked, where in the app a purchase started, and, when we are testing different offers, which group your planet was placed in. Groups are assigned at random, never by anything you've done.

If you ask Apple for a refund, Apple may ask us about that purchase before deciding. By buying in the app, you agree that we answer, and we tell Apple only this: whether the purchase reached you, how much of it you've used (for spacefish, the share you've spent; for a super planet or super moon, all of it, once it's on), and that you could try things out before buying. Nothing else about you, your account or your doodles goes to Apple, and Apple makes the decision.

Notifications

If you allow notifications, we keep the push token Apple gives your iPhone, or Google's Firebase Cloud Messaging gives your Android phone, so we can tell you when a friend sends you a doodle or colors yours. The notification shows that friend's nickname.

How the app is used

The app tells us what happens in it: that it was opened, and things you do, such as each step of the first-time tour, sending a sketch, making or joining a moon, or completing a purchase (which product, never how you paid). Each of these carries your account's random ID, the app's version, your phone's make and model, its system version (iOS or Android), screen size, language and time zone, whether it's on Wi-Fi or a mobile network (and on Android, that network's name), and roughly where you are: the city and country your connection comes from. None of them carries your doodles or what you type.

Crashes and errors

If the app crashes, it sends a crash report the next time you open it: where in the app's code the crash happened, with the same technical details. When something goes wrong on our servers, we record the error and which account's request it was.

Technical data

Like any online service, our servers process your IP address to answer requests, and they keep short-lived logs (such as errors and timings) to keep things running. We also keep counters of how often an account does things, to stop abuse.

What we don't collect

Your name or email (Google's sign-in token carries them, but we don't read or keep them), phone number, contacts, precise location, microphone, camera roll, or advertising identifier. The app contains no advertising code, and it doesn't track you across other companies' apps or websites.

what stays on your phone

• Photos you trace. When you trace a photo, from the camera or one you pick, it sits faintly under your paper while you draw. It is kept in memory only, and is never saved or sent to us.
• Saving to Photos. The app adds a doodle to your photo library only when you ask it to.
• A local copy. The app keeps doodles on your phone so they load quickly, along with your preferences and your guest key.

who can see what

• Strangers can see a doodle you throw into space while it's there, with your public name and nothing else about you. If you color a stranger's doodle and leave the coloring public, the person who drew it can see your version.
• Your friend on a moon sees everything on the moon you share, your nickname, and the looks of your planet and tubeperson.
• Anyone with an invite link you sent sees your nickname: the link carries it.
• We can see public doodles, reports, and the records described above, to run the service and keep it safe. We don't browse the doodles on moons, though we may look at one that someone reported.
• Nobody else. We don't sell or rent your data, and we don't share it with advertisers or data brokers.

how we use it

• To run the app: saving your doodles, delivering them to friends and to space, keeping streaks, and sending notifications.
• To keep people safe: acting on reports, taking doodles out of space, and limiting what an account can show strangers when it breaks the rules.
• To handle purchases: granting, restoring and refunding them.
• To improve what we offer, by comparing how groups respond to different offers. Prices are never personalized.
• To fix and improve the app: crash reports and errors show us what broke, and counting what people do shows us what works and what doesn't.

If you're in the European Economic Area or the UK, our legal bases are: performing our agreement with you (running the app you asked for), our legitimate interests (safety, preventing fraud and abuse, fixing crashes, and understanding how the app is used so we can improve it), your consent (notifications, which you can turn off in your phone's settings, and answering Apple about a purchase you ask it to refund), and legal obligations (keeping records of purchases).

who helps us run it

• Convex hosts our servers and database, in the United States.
• Apple provides Sign in with Apple, push notifications and App Store payments. What Apple processes is covered by Apple's own privacy policy.
• Google provides Sign in with Google, push notifications on Android (Firebase Cloud Messaging), Google Play payments, and Block Store, which keeps your guest key on Android. What Google processes is covered by Google's own privacy policy.
• Render hosts this website.
• PostHog receives the app's usage events and crash reports, and our servers' logs and errors, and shows them to us.

They process data only to provide their services to us. Because they are in the United States, your data is stored and processed there.

how long we keep it

We keep your data for as long as you have an account.

When you delete your account, your account and profile are deleted at once, and so is every moon you share with a friend: it's gone for your friend too. Moons you left that a friend stayed on go the same way. Every doodle on those moons, whoever made it, and all your other doodles, your reports, your spacefish history and your sign-in sessions are deleted in the minutes that follow. A few things stay:

• Colorings strangers made of your public doodles are theirs, so they stay, with your lines in them.
• Records of App Store and Google Play purchases are kept, no longer linked to you, so refunds and restores keep working.
• Reports other people made about your doodles stay on their records.

When you leave a moon, it stays with your friend if they're still on it. If you were the last one there, the moon and every doodle on it are deleted.

your choices and rights

• Delete your account in the app: My Account, then delete my account. If you used Sign in with Apple, you can also remove Wiggle Together in iPhone Settings under Apple Account, Sign in with Apple. If you used Sign in with Google, you can also remove it from your Google Account, under your connections to third-party apps and services.
• Take a doodle out of space, or make a coloring private, with the switch on its card.
• Turn off notifications in your phone's settings.
• Ask us for a copy of your data, to correct it, to delete it, or to stop using it for a purpose, by emailing [email protected]. We'll answer within 30 days. Depending on where you live (for example in the EEA, the UK or California), these are your legal rights, and you can also complain to your local data protection authority. We don't sell or share personal information as California law defines it, and we won't treat you differently for using your rights.

children

Wiggle Together isn't meant for children under 13, and we don't knowingly collect information from them. If you think a child under 13 has an account, email us and we'll delete it.

security

Everything between the app and our servers is encrypted in transit. Guest keys are stored only in hashed form, Apple's token is kept apart from everything the app can read, and access to our moderation tools is restricted. No system is perfectly secure, but we work to protect what you trust us with.

this website

wiggletogether.com uses no cookies, analytics or trackers, and loads nothing from other companies. The coloring toy on the front page runs entirely in your browser: nothing you draw there is saved or sent. Our host keeps standard server logs, such as IP addresses and browser types, for security and operations. On an Android phone, the invite page's Google Play button passes the invite itself (the sender's nickname and the moon's code) to Google Play, so the app can pick it up once it's installed.

changes

If we change this policy, we'll update the date at the top, and tell you in the app if the change is significant.

contact

Anything at all about your privacy: [email protected].