Setting up Rindraw with device management

For IT staff at schools and companies. Rindraw reads Managed App Configuration from your device management service (MDM), such as Jamf, Mosyle, Kandji or Intune, so you can set it up for every iPad, iPhone and Mac at once. Every setting but two only takes something away, and none can turn on anything a person has turned off. Of the two that give, KeepLibraryInICloud only says where a new library starts, and AllowAIApps only lets people on Macs turn AI apps on for themselves.

Settings

Each key is a Boolean. Leave a key out to allow what it controls. Keys are read without regard to case, and true/false, yes/no, 1/0 and on/off all work, as Booleans, numbers or text. A key that's present but can't be read as yes or no is taken as no.

Key	Set to `false`
`ShareReports`	Rindraw sends no crash, performance or error reports. Settings › Privacy shows the switch off, marked “Turned off by your organization”. Setting it to `true` does nothing: reports can be turned off, never forced on.
`AllowDrawTogether`	Draw Together (live drawing over SharePlay) can't be started, invitations from others are declined, and a session already going ends.
`AllowICloudLibrary`	The library can't be kept in iCloud Drive.
`AllowLibraryFolder`	The library can't be kept in a folder chosen in Files (Google Drive, Dropbox, a network drive).
`AllowLinksOut`	No way out of Rindraw: no App Store links, rating prompts, Check for Updates, links to rindraw.com, emails to support or Instagram sharing.

Starting the library in iCloud Drive

Key	Set to `true`
`KeepLibraryInICloud`	The library starts in iCloud Drive, so people find their drawings on whichever device they sign in to. On Shared iPad with Managed Apple Accounts, a student's work follows them from iPad to iPad and isn't lost when an iPad removes a student's local data to make room.

It's a starting place, not a rule. It applies only where the person hasn't chosen where to keep their library or answered Rindraw's question about iCloud Drive, and only once the device is signed in to iCloud with iCloud Drive on; until then nothing happens and nothing is said. Drawings already on the device move with the library. Once it's there, it's the person's like any choice of their own: they can move it with Keep Library, and it isn't moved back. AllowICloudLibrary set to false wins over it. Leaving it out, or anything but a clear yes, does nothing.

Allowing AI apps on Macs

Key	Set to `true`
`AllowAIApps`	People may turn on Settings › Privacy › Allow AI Apps to Use Rindraw on their Mac, so AI apps such as Claude, Cursor or Codex can find, look at and export their drawings, and add pictures to them, while Rindraw is open. The AI app reaches Rindraw through a server that only that Mac can connect to.

On a device your organization manages, AI apps are off unless you set this to true: Rindraw doesn't send drawings anywhere, but the AI app may send what it reads, drawings included, to its own servers. Even with it allowed, each person decides; Rindraw never turns it on for them. Leaving it out, or anything but a clear yes, keeps it off, and the switch shows “Turned off by your organization”. Turning it off while an AI app is connected stops it at once. iPad and iPhone have no such switch.

What people see

Settings and menu items you've turned off stay where they are, marked “Turned off by your organization”, so nobody wonders where they went. If a library was kept in iCloud Drive or a folder that you turn off, Rindraw keeps it on the device from then on and says once that the drawings in the old place are still there. Nothing is moved or deleted. If you allow the place again later, the library stays on the device, so nothing drawn in the meantime is hidden; the person can move it back with Keep Library.

Settings take effect as soon as your MDM sends them, without restarting Rindraw, and are undone when you remove them: each person's own choices are kept underneath.

Example

Students' iPads with reports, Draw Together, personal cloud storage and links out all turned off:

<dict>
  <key>ShareReports</key><false/>
  <key>AllowDrawTogether</key><false/>
  <key>AllowICloudLibrary</key><false/>
  <key>AllowLibraryFolder</key><false/>
  <key>AllowLinksOut</key><false/>
</dict>

Jamf Pro takes what's inside <dict>; Jamf School takes the whole <dict>. On a Mac, send the same keys in a Custom Settings profile for the domain com.sawirstudio.rindraw.

An AppConfig specification file is available for MDMs that build a settings form from it, such as Jamf's AppConfig Generator.

Requirements

Rindraw 1.12 or later. Earlier versions ignore these settings.
Rindraw installed by your MDM, with licenses from Apple School Manager or Apple Business Manager. Copies installed from the App Store by hand can't receive configuration until your MDM takes over managing them.

Privacy

Rindraw has no accounts and collects nothing that identifies the people using it. With ShareReports left on, it sends anonymous crash, performance and error reports, described in the privacy policy. Rindraw counts a device as your organization's once it has received any of these settings, so send at least one. On such a device, Rindraw will never start sending anything new without a setting of its own that you turn on. For privacy reviews, see student privacy in Rindraw.

Questions

Ask us at support@rindraw.com. A person reads every message.