Student privacy in Rindraw
Last updated November 13, 2026
For school and district privacy reviews. Rindraw collects no personal information from students. It has no accounts, no ads and no tracking, and students' drawings never come to us. The only thing the app sends is anonymous crash and performance reports, which your device management can turn off. This page sums up how Rindraw handles student data; the privacy policy is the full account.
At a glance
| Question | Answer |
|---|---|
| Accounts or sign-in | None. Students don't create an account or sign in to anything in Rindraw. |
| Personal information collected | None, from students or anyone: no names, email addresses, ages, contacts, location, or advertising or device identifiers. |
| Student work sent to us | Never. Drawings, brushes and everything else students make stay on the device, or in the school's iCloud if you choose it. |
| Advertising and tracking | None. No ads, no tracking, no profiles of students, no in-app purchases. |
| Third-party code | None that collects data. Rindraw includes no analytics, advertising or tracking SDKs. |
| Data sold or shared | Never. There's no student data to sell or share. |
| What the app sends | Anonymous crash, performance and error reports, with nothing that identifies a student. One setting in your device management turns them off. |
| Internet needed | No. Rindraw works offline. |
What the app sends, and how to stop it
Rindraw sends crash, performance and error reports to our own server, reports.rindraw.com, so we can find and fix problems. The server and the database the reports are kept in are at Hetzner in Helsinki, Finland, in the European Union. A report says where in the app something went wrong, how quickly it ran, and roughly what it was doing then, such as whether a drawing was open and about how big it was. It also includes the app's version, the device model, the system version and the region format.
Reports contain no drawings, no names, no accounts and no advertising or device identifiers, so a report isn't linked to any student. Cloudflare passes them on to our server. It uses the device's IP address only to limit how often reports arrive, and doesn't store it. We keep reports for a year, then delete them, and never sell or share them. Rindraw's App Store privacy label lists them as Diagnostics, “Data Not Linked to You”.
To send none at all, set ShareReports to false in your device management, as described in setting up Rindraw with device management. Students can't turn them back on. On a single device, the switch is in Rindraw's Settings › Privacy.
Where students' work is kept
- On the device, unless you or the student choose otherwise. It's in Rindraw's own storage, visible in the Files app under On My iPad › Rindraw. Deleted drawings stay in Recently Deleted for 30 days. Deleting the app deletes all of it.
- In iCloud Drive, if the library is kept there. Apple stores it in the student's iCloud account, which with a Managed Apple Account is your school's, under your agreement with Apple. You can make every new library start there with
KeepLibraryInICloud, so students' work follows them between shared iPads. - In a folder chosen in Files, such as Google Drive, if that's allowed. The service providing it stores the files under its own terms.
Your device management can turn off keeping the library in iCloud Drive or a chosen folder. Wherever the library is, Sawir Studio can't see it and doesn't receive a copy.
What else goes online, and only through Apple
- Draw Together, live drawing with others, runs on Apple's SharePlay, between the devices taking part. It doesn't pass through our servers. Turn it off with
AllowDrawTogether. - Apple's fonts are downloaded from Apple when a student picks one.
- Check for Updates asks the App Store for Rindraw's newest version number, and only when a student chooses it. It's hidden, with every other link out of the app, when
AllowLinksOutisfalse. - Sharing sends a drawing only where the student sends it, using the share sheet.
Purchases through Apple School Manager are handled by Apple. We never see payment details or which students use the copies.
Camera, Face ID and AR
The camera is used only while a student has the camera color palette, Face Paint or painting and tracing in AR open. Camera frames, face shapes and room measurements stay in memory while those are open and are gone when they close. They aren't saved, sent anywhere or used to identify anyone. If a stack is locked, the device checks Face ID, Touch ID or the passcode itself, and Rindraw only learns whether the check succeeded.
Laws schools ask about
Here's how Rindraw's design relates to the laws schools most often ask about. It's a description of how the app works, not legal advice.
- FERPA. Rindraw doesn't receive education records, or personally identifiable information from them. Students' work isn't sent to us.
- COPPA. Rindraw collects no personal information from children under 13, or from anyone. The reports it sends identify no one, and you can turn them off.
- State student privacy laws, such as California's SOPIPA. We don't sell student data, build profiles of students, or use anything for targeted advertising. We hold no student data to do so with.
- GDPR and UK GDPR. The app gives us no information that identifies a student. Schools that want nothing sent at all can turn reports off for every device.
Agreements and questionnaires
If your district needs a data privacy agreement, such as the Student Data Privacy Consortium's National Data Privacy Agreement, or has a vendor questionnaire, email support@rindraw.com with “Student privacy review” in the subject, and include your district or school's name.
This page
The pages for schools, this one and the device management page don't use Microsoft Clarity or any other visit recorder, and set no cookies. Like the rest of rindraw.com, they're counted by Cloudflare Web Analytics, which uses no cookies and doesn't identify visitors.
If this changes
We'll update this page and the privacy policy, change the date above, and say so in the app before it sends anything new. We'll never collect information that identifies a student without asking first. On a device your organization manages, Rindraw won't start sending anything new unless you turn it on with a setting of its own.
Questions
Ask us at support@rindraw.com. A person reads every message.