Privacy
Smudjo does not collect anything about you or what you paint. That is the whole policy; the rest is detail.
Last updated 24 September 2026.
What we collect
Nothing. Smudjo has no account, no sign-in, no analytics and no third-party SDKs. There is no identifier for you anywhere in the app, and no report of any kind is sent when you use it.
Your paintings
Paintings are files, stored in the folder you choose on your own device or in your own cloud storage. They are never uploaded to us. Deleting the app leaves them exactly where they are.
Painting together
A session is opened by one person, who gets a six-character room code. There is no public directory and no matchmaking — a session cannot be found without its code.
When everyone is on the same local network, devices connect directly to each other and nothing leaves the network.
Otherwise the session passes through a relay we operate, so that two devices that cannot see each other still can. The relay cannot read anything it carries. Every message is encrypted end to end with a key derived from the room code, which never leaves the devices. The relay sees a room number and a stream of bytes, holds them only long enough to pass them on, and stores none of it. We cannot see your painting, and neither can anyone else.
Purchases
The one-time purchase is handled entirely by the App Store. We never see your payment details, your name or your email address.
Diagnostics
If you are helping us track down a bug, a developer build can record what happens during a session to a file on your device. It is off unless you turn it on, it never leaves your device on its own, and the only way it reaches us is if you export it and send it yourself.
Children
Smudjo is not directed at children, has no advertising, no chat and no public content of any kind.
Changes
If this ever changes, the date above changes with it, and any change that affected what leaves your device would arrive with the app update that caused it — not quietly.