Privacy policy

Last updated: 2026-06-18

Who we are

DoodleSwim is a service operated by Weektaak.com (trading as DoodleSwim.com), Smidshof 31, 3862 CZ Nijkerk, Netherlands. You can reach us at [email protected] or +31 85 060 7272.

DoodleSwim turns children's printed colouring sheets into animated fish on a screen at a venue (a restaurant, waiting room, school or similar). This policy explains how we handle personal data.

Controller and processor roles

For the account holder's data (the venue's signed-in user: name, email, billing details) DoodleSwim is the data controller.

For the children's data that a venue collects through our service (the scanned colouring photo and the cutout drawing), the venue is the controller and DoodleSwim acts as the processor on the venue's behalf. The terms of that relationship are set out in our data processing agreement.

Data about business prospects

Alongside the roles above, we also process data about potential business customers. To approach venues such as restaurants and waiting rooms with our offer, we collect from public sources the name, role and business contact details of that venue's owner or manager. For this data DoodleSwim is the data controller. This is separate from our role as a processor for the children's drawings that a venue collects through our service.

We collect only data that the individual or the business has itself published openly, and we do not invent email addresses. The legal basis is our legitimate interest in direct B2B marketing of a product relevant to the audience. A person reviews every suggestion before we approach anyone. Unused suggestions are deleted automatically within 30 days.

Anyone we approach in this way has the right to access, correct and delete their data, and may object to being approached. We honour such a request right away and record it on a list so that we do not approach the individual again afterwards. For this, email [email protected]. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

What we collect

We keep the amount of data we collect to a minimum. Depending on how you use DoodleSwim, this can include:

• Account data: the name, email address and password of the venue's signed-in user, and the website address provided at sign-up.
• Billing data: subscription and payment status, handled by our payment provider Stripe. We do not store full card numbers ourselves.
• Scan uploads: the photo a parent takes of a colouring sheet on their own phone. This photo is used only to extract the drawing and is deleted immediately after processing.
• Cutout drawings: the cropped child's drawing that swims in the tank. A drawing is not linked to a child's name; it carries no identity beyond the artwork itself.
• Scan session: a short-lived, random token stored in a cookie on the parent's phone that authorises uploads to one tank for a limited time. It is not linked to a person.
• Technical data: standard server logs needed to run and secure the service.

Why we use it and the legal basis

Account and billing data are processed to provide the service and to take payment, on the basis of our contract with the account holder and our legal obligations (for example tax and accounting).

Scan uploads and cutout drawings are processed only to show the drawing in the tank, on the instructions of the venue (the controller). The venue is responsible for having a valid legal basis for collecting a child's drawing, which will usually be the consent of a parent or guardian. We support venues in meeting this responsibility but we do not collect that consent ourselves.

A note about children's data

We know that children's drawings deserve extra care. A drawing is never tied to a child's name or any identifier inside DoodleSwim. We do not profile children, we do not advertise to them, and we do not use their drawings to train any model. Venues should display only drawings that a parent or guardian is happy to show on a public screen.

How long we keep it

Original scan photos are deleted right after the drawing is cut out, within minutes.

Cutout drawings are kept while they are relevant to the tank and its short history, and are automatically purged after at most 30 days. A drawing that is removed from a tank may be kept a little longer only to power the day's activity view, but never beyond that 30-day window.

Account and billing records are kept for as long as the account is active and afterwards only as long as the law requires (for example, invoices for tax purposes).

Who we share it with (sub-processors)

We use a small number of trusted providers to run DoodleSwim. They act on our instructions and only for the purposes below:

• Stripe: payment and subscription processing.
• Mailgun: sending transactional email such as sign-up confirmations.
• OpenAI: generating optional decorative tank themes from a text prompt. Children's drawings are never sent to OpenAI.
• Our hosting provider: running the servers and storing data inside the European Union.

Your rights

Under the GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data, and the right to data portability. To exercise a right that concerns a child's drawing collected at a venue, please contact that venue (the controller), or contact us and we will help route the request. For account data, contact us directly.

You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

How to reach us

For any privacy question or request, email [email protected]. We will respond without undue delay and within the time limits the law requires.