Last updated October 4, 2026. This covers the KinoDraw app (called Doodle Studio before version 0.2.0), its KinoDraw Cloud AI director, the optional voice server and feedback you send from the app. The Chrome extension for teachers has its own policy.
KinoDraw turns a script you write into a hand-drawn video on your own computer. The app and KinoDraw Cloud have no ads, no analytics and no tracking; the site counts visits without cookies (see below), and nothing about you is ever sold.
With the offline director you need no account. Unless you choose your own voice server or send feedback (both below), your scripts, projects, narration and videos stay on your computer; Style > "Choose for me" then picks the style on your computer too, from words in your script. The app only downloads its voice model (from GitHub; the Chinese voice also needs a small settings file from Hugging Face) and its doodle-search model (from Hugging Face) the first time they are needed. Those downloads send nothing about you beyond what any download does: GitHub and Hugging Face see your IP address. (Before version 0.2.0, if Hugging Face could not be reached, the Chinese doodle-search model came from Google Cloud Storage instead.)
KinoDraw Cloud needs no account. If you choose "KinoDraw Cloud AI" without signing in, the app sends a random ID for this installation of the app, and no email, to get an anonymous KinoDraw Cloud token, and uses that token for your videos. Signing in with your email is optional. This is what is sent, and to whom:
| Where | What | Why |
|---|---|---|
| KinoDraw Cloud (api.doodlecloud.org, run by KinoDraw) | a random ID for this installation of the app (and your email, only if you sign in), then each section's sentences, the video and section titles, the language, short phrases the offline draft picked from the sentences, and the names of candidate doodles; with Style > "Choose for me", once per new video, the title, the section headings and the first 600 characters of the script, its language and format, and the names of the styles it can use | to give this installation a token (or sign you in), count videos, and ask GPT-6 Luna for picture suggestions and a style |
| Resend (email delivery) | only if you sign in: your email address and a 6-digit sign-in code | to email you the code |
| OpenAI (GPT-6 Luna), through KinoDraw Cloud | the same sentences, titles, language and doodle names (and, for "Choose for me", the same headings, opening text, format and style names) | to suggest pictures and a style; OpenAI's API terms apply |
| Cloudflare (hosting) | ordinary request data, such as your IP address; the service's request logs keep it for 3 days | to run the service, fix errors and limit abuse |
KinoDraw Cloud stores the install ID, the plan, counts of the videos and their AI cost, and a scrambled (hashed) form of each token it gives out, never the token itself; if you sign in, it also stores your email. Without a sign-in it has no email or name for you. It never stores your script, the suggestions, your narration or your video. A Gmail address counts as one account however it is written (with dots or a "+tag").
Sign-in codes are deleted when used, or within about two days after they expire. Rate-limit records, which contain an IP address or email, are deleted within about four days. On your computer, the token (the anonymous one, or your sign-in's) is kept in your system's keychain.
If you turn on Settings > Advanced directors and choose "My OpenAI key", "My Anthropic key" or "OpenAI-compatible server", the app sends the same section request (sentences, titles, language, picked phrases and candidate doodle names) straight from your computer to that provider with your key: OpenAI, Anthropic, or the server address you entered. With Style > "Choose for me", it also sends that provider one style request per new video (the title, the section headings and the first 600 characters of the script, its language and format, and the names of the styles it can use). KinoDraw Cloud is not involved, and that provider's own terms and privacy policy apply. With "My own command", the app hands the request to the program you chose on your computer; where it goes from there is up to that program. Your keys and command are kept in your system's keychain, never in project files.
This is off by default: the built-in voice reads your script on this computer. If you turn on Settings > Voice server, the app sends each beat's text (the words to be spoken), the model and voice names, and your API key if you entered one directly to the server address you choose, and nothing else. KinoDraw does not run that server or see those requests; the server's own terms and privacy policy apply. Your key is stored in your system's keychain for that address, never in project files, and is sent only to the address it was saved for. Only your own settings choose the server: a project file someone sends you cannot. Test (whether it is on or off) and Hear it (while it is on) send it one sample sentence. To offer the server's voices as choices, the app also asks that address for its list of voice names when you press Test and, while it is on, each time Settings, New video or a project's Narrator tab opens. That request sends only the model name (and your key for that address, if you entered one); for OpenAI's own API, which has no such list, it shows OpenAI's documented voices without asking. Your own recordings stay on your computer.
The app's "Feedback or a problem? Tell us" form (also offered in a small card after each video you make) needs no
account, whichever director you use, and sends nothing until you press Send. When you press Send, exactly this goes
to KinoDraw Cloud (api.doodlecloud.org, run by KinoDraw): what you typed; your rating, what the video was for and
your video link, if you gave them; whether you ticked "KinoDraw may quote what I wrote" and "I am 13 or older";
your email, if you typed one; and the app version, your computer type (Mac, Windows or Linux), the language and
this installation's install ID (made then if you never used KinoDraw Cloud). KinoDraw Cloud keeps your email only
if you are 13 or older and typed it: without that box ticked, the app does not send it. What you wrote is quoted, on
KinoDraw's site and in reports about KinoDraw, only if you ticked that box, and never with your name. To delete
your feedback, email privacy@doodlecloud.org with this installation's
ID (kinodraw cloud-id prints it). You can open an issue on GitHub instead; that needs a GitHub account,
and issues are public.
This site counts visits with Cloudflare Web Analytics, which is cookieless (it sets no cookies and stores nothing on your device), and it is hosted on GitHub Pages, whose server logs record your IP address when you visit. Its Download button asks GitHub's API for the latest release so it can offer the file for your computer.
To delete what KinoDraw Cloud keeps (the install ID, the plan, the usage counts and any feedback you sent), email
privacy@doodlecloud.org. If you signed in, send it from the address you
signed in with. If you used KinoDraw Cloud without signing in, include this installation's ID: the app shows it in
Settings > KinoDraw Cloud, and kinodraw cloud-id prints it. Uninstalling the app does not delete what
the cloud keeps.
KinoDraw Cloud, with or without a sign-in, is not meant for children under 13. Anyone can use the offline director, which needs no account and sends nothing unless you choose your own voice server or send feedback. Anyone can send feedback; KinoDraw Cloud keeps an email only from someone who ticks "I am 13 or older".
If this policy changes, this page and its date change with it. Questions: the project's GitHub page or privacy@doodlecloud.org.