1 · Scope and developer
Who this policy covers.
This policy describes Cub Draw, a Cub Suite drawing app developed by Nanda Kusumadi. Contact: cubdrawsupport@nandakusumadi.com.
Cub Draw is designed for young children under parent or guardian control. Core drawing is local-first, works without creating a Cub Draw account, and does not require family synchronization.
2 · On-device data
What Cub Draw stores on the device.
- Drawings: editable PencilKit strokes, page orientation, optional template image and settings, sticker placements, creation/modification dates, and derived thumbnails.
- Drawing history: a bounded local undo/redo history for strokes and sticker actions. This history is not synchronized through CloudKit.
- Stickers and templates: imported sticker images, category names/order/pictures, child-visibility settings, tracing templates, maze themes and scene/template choices.
- Device setup: the selected installation role, active Child Space reference, app-only preferences and synchronization tokens.
- Parent gate: a salted PIN hash stored in a device-only Keychain item. Cub Draw does not store the readable six-digit PIN.
- Identifiers: random drawing, sticker, category and Child Space identifiers used to keep files and synchronization records separate and consistent.
These files live in Cub Draw’s app container or the Cub Suite App Group container used for same-device suite sharing. Other apps cannot browse these containers through Cub Draw.
3 · Optional private family sync
What can use Apple iCloud and CloudKit.
When a parent creates or joins a private Child Space, Cub Draw uses Apple CloudKit and CKShare. Nanda Kusumadi does not operate a separate Cub Draw content server.
Depending on the features a family uses, the Child Space can contain:
- the parent-entered child display name;
- editable drawing strokes, thumbnails, page orientation, templates/settings and sticker placements;
- imported sticker imagery, categories, child-visibility state, deletion state and maze-theme assignments;
- record, drawing, sticker, category and Child Space identifiers; and
- the Apple CloudKit account identifier needed to scope the correct account and Child Space.
Cub Draw’s Apple privacy manifest conservatively declares linked Name, Photos or Videos, Other User Content and User ID, all used only for app functionality and not for tracking.
4 · Use and disclosure
Who can see family content.
CloudKit content is private to the owner unless the parent creates a CKShare. It is shared only with the Apple Accounts and devices the parent invites to that Child Space. Each Child Space uses a separate CloudKit zone so one child’s family content is not intentionally mixed with another’s.
External sharing is parent initiated through Apple’s system share sheet. A child or shared iPad must pass the parent gate before a drawing can leave Cub Draw. Parent-only devices rely on the device lock.
No public profiles or feed
No chat
No advertising
No third-party analytics
No tracking
No in-app purchases in 1.0
5 · Photos and sensitive images
Photo access is requested only at the point of use.
Parents choose source pictures through Apple’s system Photos picker, which does not give Cub Draw broad access to the photo library. Cub Draw requests add-only Photos permission only when a parent chooses Save to Photos for finished artwork. The app does not request camera, microphone, location, contacts or tracking permission.
Foreground extraction and tracing conversion run on-device. A selected tracing source remains in memory; only the derived template becomes part of a drawing and may synchronize if that drawing belongs to a paired Child Space.
When the person has enabled Sensitive Content Warning or Communication Safety, imported or synchronized child-visible images can be screened on-device using Apple’s Sensitive Content Analysis framework. Flagged stickers remain parent-only; flagged tracing sources are not accepted. The classification result is used in memory for that decision and is not persisted, synchronized or uploaded by Cub Draw.
6 · Retention and deletion
How drawings and family data can be removed.
Local drawings
Past drawings can be deleted after the parent gate. On an unpaired installation, there is no CloudKit recovery copy. The active Current Drawing is not deletable from My Drawings.
Recently Deleted
For a paired Child Space, cloud drawings marked deleted stay in the parent’s Recently Deleted view until a parent restores or permanently deletes them. Cub Draw 1.0 does not apply an automatic expiry period.
Permanent drawing deletion
A parent can confirm Delete Permanently in Recently Deleted. Cub Draw deletes the CloudKit drawing record/assets and its scoped parent cache entry. This cannot be undone.
Sticker deletion
Deleting a custom sticker removes it from library views. If a local, synchronized or recoverable drawing still references that sticker, a hidden scoped backing asset is retained so the drawing does not change.
Unpairing and participants
The Child Space owner can use Manage invitation to change participants or stop sharing through Apple’s CloudKit sharing controls. Revoking access stops future shared access but may not erase local copies already stored on another device.
Removing the app
Removing Cub Draw should not be used as the sole cloud-deletion method. CloudKit data remains in the owner’s Child Space and may return after reinstalling and pairing. Unsynchronized local work and local-only undo history are not stored in CloudKit and may not return.
Deletion from Cub Draw does not promise immediate removal from Apple backups, disaster-recovery copies, temporary caches or records Apple must retain under its own terms. Apple controls those systems and their retention.
7 · Children and parental control
Parents control setup, imports and sharing.
Cub Draw is intended for the App Store’s Made for Kids — Ages 5 and under category, with ages four to five as the primary design and testing cohort. A parent or guardian controls setup, imported content, family invitations, external sharing and deletion.
The child experience does not ask a child to register, enter contact details, create a public profile, send a message, or submit information to Nanda Kusumadi. Parents should use the support email on a child’s behalf and send only the information needed to answer the request.
8 · Security and international processing
How Cub Draw protects family data.
Cub Draw uses Apple app-container and Keychain protections on the device, private CloudKit zones, explicit CKShare invitations and parent gates for sensitive actions. No system can be described as completely secure; families should protect their Apple Accounts and device passcodes and remove participants they no longer trust.
Optional CloudKit content is processed by Apple under the family’s Apple service terms. Apple may store or process that data in countries other than the family’s own. Nanda Kusumadi does not choose Apple’s data-centre location and does not operate a parallel Cub Draw content server.
9 · This website
The website is separate from the app.
This policy primarily covers the Cub Draw app. These Support and Privacy pages add no advertising, analytics, tracking script, contact form or new cookie. nandakusumadi.com may process ordinary web-server request data such as IP address, requested URL, time and browser information for delivery, reliability and security. Any Ghost sign-in or subscription features and their essential cookies are part of the website, not Cub Draw family synchronization.
10 · Changes, questions and parent requests
Contact the developer.
This policy may change when Cub Draw’s features or privacy practices change. A revised policy will show a new effective date. A parent or guardian may ask what Cub Draw data is involved, request correction where possible, ask for participant removal, or request help with permanent deletion.
Developer: Nanda Kusumadi
Email: cubdrawsupport@nandakusumadi.com