Privacy Policy

Information we collect and why

• Account and sign-in information: account or guest identifiers, email address, a protected password hash if you create a password, and a verified Google or Apple account identifier and email if you choose that sign-in method. With Apple you can use a private relay email. We securely store an encrypted Apple authorization token to revoke access when you delete your account. We use this to sign you in, secure your account and connect your activity. Google sign-in does not give Druno access to your Gmail, Drive or contacts.
• Quiz and personalization: answers, interests, preferences, quiz progress and assigned experience variants. We use these to deliver onboarding, recommend content and understand how onboarding performs. Essential quiz interactions may also be processed by our separate quiz service even if optional analytics is off.
• Device ID: the mobile app creates a random ID on your phone (on Android, derived from Android's own app ID) that stays if you delete and reinstall the app. We use it on our servers to recognise reinstalls and returning users, to sign you back into the guest account you used on that phone after a reinstall (accounts with an email, Apple or Google sign-in sign in again as usual), and to improve Druno. It is not shared with Meta or other advertisers; Meta only receives whether an install is a returning one, without the ID.
• Device state: while app analytics is on, the mobile app sends us battery level and charging state, low-power mode, screen brightness, network type (Wi-Fi or mobile data), free storage, memory, display and accessibility settings (dark mode, text size, bold text, reduced motion), orientation, language, time zone and local time. We use this to improve Druno and to build our own recommendation and product models. It stays with us and is not shared with Meta or other advertisers.
• Your library and viewing activity: saved books or ideas and playback progress needed for your library and continue-watching features. We also process interactions such as screen and content views, searches, playback actions, saves and paywall interactions for the choices you enabled.
• Subscriptions: product identifiers, transaction or purchase tokens, billing status, amounts and currency, renewal, cancellation, refund and expiry information. We use these to verify purchases, grant access, restore purchases, prevent misuse and keep subscription records. Apple or Google processes store payments; Druno does not receive your full payment-card details.
• Device and service information: installation identifiers, app and operating-system information, language, network information such as IP addresses, and diagnostic or security information needed to operate and protect the service.
• Crash reports and feedback: if the app hits an error, it sends a technical report (error message, app and system version, device model and the screen you were on) so we can fix it. If you rate the app or send us a note, we keep the rating and your note. Neither is linked to your account.
• Notifications: if you enable them, a push token, device platform and notification preferences, plus delivery or interaction information. This lets us deliver enabled story updates, reminders or offers.
• Support: information you choose to include in a message, used to answer your request. Please do not send passwords or full payment-card details.

Our app does not use screen recordings to monitor your activity or track what you do inside other apps.

App analytics and Meta measurement

App analytics helps us understand how people use Druno and improve the experience. Meta ad measurement helps us measure advertising and subscription outcomes. App analytics is on by default in the mobile app and on the web: it records how the app is used (screens, taps, scrolling, searches, playback and the Watch feed) on our own servers, is never shared with advertisers, and can be turned off in Profile. Meta ad measurement is on by default in the mobile app; on the web it is only used if you turn it on in Profile. You can turn Meta measurement off in Profile at any time.

We send Meta app activity and subscription events, such as quiz progress, content views, saves, shares, finished chapters, purchases, renewals and cancellations, with product, amount and currency details, and basic app and device information (app version, device model, operating system, language, screen size and time zone).

On iPhone, we only include identifiers if you allow tracking when your iPhone asks (App Tracking Transparency). If you don't, events are sent without your IP address, email, account ID or advertising ID and are marked as not tracked, so Meta can only use them for aggregated measurement. On Android (and on the web, if you accept tracking there), events may include your IP address, device user agent, the device advertising ID, hashed email address, a hashed account identifier, a hashed country code and a hashed gender, used for matching, and your age range. If you reset or delete your Android advertising ID or turn off ad personalization, we do not include identifiers. Hashing makes identifiers less directly readable but does not make them anonymous.

From your quiz answers, we only send Meta your age range and gender, and only when identifiers are included as described above (in the mobile app only, and never for iPhone users who did not allow tracking). We do not send your other quiz answers or your password to Meta. Meta processes information under its own Privacy Policy. Turning off Meta measurement stops future optional delivery from Druno; it does not automatically erase information previously received by Meta.

We do not sell personal information for money. Optional sharing with Meta may qualify as sharing for cross-context behavioral advertising under some privacy laws. You can opt out using the Meta measurement control in Profile or contact us to exercise applicable rights.

Who receives information

Information is handled by Herogram FZ-LLC and service providers needed to operate Druno, such as hosting, technical infrastructure and support services. Our separate quiz service handles connected quiz and app features.

Apple and Google handle their store purchases and related verification. Google or Apple handles its sign-in option when selected. Apple Push Notification service delivers iOS notifications, and Firebase Cloud Messaging delivers Android notifications. Meta receives optional measurement information as described above. These providers may also process information independently under their own policies: Apple and Google.

We may disclose information when required by law or when reasonably necessary to protect people, enforce rights or investigate misuse. If ownership of the service changes, relevant information may transfer with it, subject to applicable privacy requirements.

Storage, retention and security

We keep account, quiz, library and subscription information for as long as needed to provide the service and meet applicable security, dispute or legal needs. Optional app event logs and queued measurement events are currently subject to a rolling 90-day retention setting. Records in our connected quiz service are managed separately; the 90-day setting does not describe every account, payment or quiz record.

We use access controls, encrypted network connections and protected password hashes. No online service can guarantee absolute security. Information in backups may remain until those backups are replaced or deleted; backup use is restricted to recovery, security or legal needs. Contact us for information about retention relevant to your request.

Herogram FZ-LLC operates from the UAE. Hosting and service providers may process information in other countries with different privacy laws. Where applicable, international transfers are subject to legally required safeguards.

The app uses local device or browser storage for sign-in, preferences, progress and queued actions. These legal pages do not load optional analytics, advertising scripts or third-party tracking cookies.

Your controls and rights

• Change optional analytics and Meta measurement choices in Profile. Where supported, you can also change tracking permission in your device settings.
• Control notification preferences in Druno and disable notification permission in your device settings.
• Manage billing and renewal through the store where you subscribed.
• Request access, correction, a copy of your information or deletion by contacting us. Depending on your location, you may also have rights to object to processing, restrict it, withdraw consent, opt out of certain sharing, appeal a decision or complain to a privacy regulator.

Where required by law, we rely on consent for optional tracking, the need to provide a requested service for core account and purchase processing, and applicable legitimate interests or legal obligations for security and compliance. Withdrawing consent does not affect processing already performed lawfully. We will not deny your applicable privacy rights because you exercise them.

Delete your account and data

In the app: open Profile, choose “Delete my app account” and confirm “Permanently delete”. This removes your Druno account and its associated app records, such as library data, preferences and stored receipt records.

Without the app: email contact@herogram.app with the subject “Druno account and data deletion”. Include the email or identifier associated with your account so we can locate it. You do not need to sign in to this website or make a purchase to request deletion. We may ask for limited information to verify ownership; never send your password.

Connected quiz records: deleting your app account does not automatically remove quiz or lead records already sent to our separate quiz service. Ask us to include those records in your deletion request. We will explain any information we must retain and why. Records held independently by Apple, Google or Meta are governed by their policies and applicable law.

Cancel your subscription separately. Account deletion does not stop Apple or Google billing. Use your Apple or Google Play subscription settings to cancel renewal.

Children

Druno is intended for adults and is not designed for children. If you believe a child has provided personal information to Druno, contact us so we can investigate and take appropriate action, including deletion where required.

Changes and contact

We may update this policy as the service changes. We will update the effective date and provide notice or request consent for material changes where required.

For privacy questions or rights requests, contact Herogram FZ-LLC, Dubai, United Arab Emirates, at contact@herogram.app.