Privacy Policy

Whiteboard is a private, invite-based collaborative canvas from DARTRI Labs. This notice explains how the Whiteboard iOS app and its supporting account, API, email, and moderation services handle personal information. It applies only to Whiteboard; other DARTRI Labs products and websites may have their own notices.

We limit collection to information needed to run, secure, and support the product:

• Account and profile information: the name and email address you provide, a server-generated user ID, password-verifier data when you use password sign-in, and MFA configuration when you enable it. Passwords and recovery codes are stored as one-way hashes, not readable text
• Whiteboard content: board names, sticky-note text, drawings, selected photos, photo captions and the captured date when available, link cards, item positions, authorship, and creation or update timestamps. Before upload, the iOS app re-renders a selected photo at a bounded size and removes location and other embedded metadata
• Collaboration information: board memberships and roles, invitations, the invited email address supplied by a board manager, and invite status
• Safety, emergency relay, beta feedback, and support information: reports, report reason and optional details, a limited snapshot of reported material, block relationships, moderation status, write-only emergency notes sent to a board, beta notes you submit, their review status, and messages you choose to send to support
• Security and reliability information: IP address, user-agent, session and authentication events, random session or trusted-device identifiers, board and item action records, and error details needed to diagnose a failed request
• On-device information: access and refresh credentials in iOS Keychain, a random trusted-device token when you choose that feature, an Apple push token and notification preference when you opt in, display and onboarding preferences, board previews, and unsent drawing batches needed to recover from an interrupted upload

Whiteboard has no advertising or third-party analytics SDKs and does not track you across apps or websites. The current iOS release does not collect payment information, precise location, contacts, calendars, microphone recordings, direct camera access, health data, or biometric templates. It does not offer phone-number account sign-up yet. Face ID or Touch ID is evaluated by iOS; Whiteboard receives only the local success or failure needed to unlock the app. Whiteboard receives a photo only when you deliberately select and post it. The in-app beta feedback flow does not secretly attach a screenshot, board name, board content, photo, password, or login credential. Sign in with Apple is not enabled in the current Release build.

We use the information above only to:

• Create and protect your account, authenticate sessions, and provide optional MFA and trusted-device controls
• Create, synchronize, recover, and display private boards and the items on them
• Deliver invitations and let authorized board members collaborate in real time
• Accept a short note through a board manager's private write-only emergency link or routing code, show it only to board members, and deliver optional urgent alerts
• Screen selected photos and their captions before sharing, prevent abuse, enforce Community Standards, review reports, separate blocked accounts, and protect users
• Review beta feedback, communicate its status, diagnose a reported problem, and improve Whiteboard
• Answer support, privacy, and security requests
• Detect fraud or unauthorized access, troubleshoot failures, maintain reliability, and comply with applicable law

Most information comes directly from you when you create an account or board, add content, invite someone, enable a security feature, submit a report or beta note, or contact us. A person holding a board's private emergency link or routing code may also submit a write-only note without an account. If you leave the beta diagnostic switch on, Whiteboard sends the app version, build, device family, iOS version, and the screen from which you opened feedback. Security metadata is generated when the app communicates with our service. A board manager may provide an email address for a person who has not yet joined Whiteboard.

• Members of the same board can see each other's display name, account email, membership role, and authored board content
• Board managers can see pending invite email addresses and can cancel those invitations
• People you block are separated from future collaboration and are not told who initiated the block
• Safety reports are visible to the reporting person and authorized moderators, not ordinary board members
• Beta notes and their status are visible to the person who submitted them and authorized DARTRI Labs operators, not board collaborators
• Emergency relay notes are visible to members of the destination board. Board managers can mark them resolved. The sender receives only a receipt and cannot discover the board, its name, its members, or its content

We do not sell personal information, share it for cross-context behavioral advertising, or use it to build advertising profiles. We disclose information only as needed for the collaboration described above and in these limited circumstances:

• Infrastructure providers that operate network delivery, application hosting, the private database, backups, and transactional email. They receive only the information needed for those functions and must provide the same or equivalent protection promised here
• Apple Push Notification service receives an encrypted-transport device token, a generic alert that does not contain the emergency note, and destination identifiers needed to open the correct board when you opt in to push notifications
• When SMS relay is enabled, Twilio processes the originating and destination phone numbers and SMS body to deliver the message webhook. Whiteboard stores the provider message identifier and a one-way payload digest for retry safety, but does not store the sender's phone number as an account field or emergency-message field
• OpenAI receives a re-rendered selected photo and its caption, but not your Whiteboard account identifier, through its Moderations endpoint solely for a pre-storage safety classification. OpenAI does not use API inputs to train its models unless the API account explicitly opts in. By default, OpenAI may retain API inputs and related safety metadata in abuse-monitoring logs for up to 30 days unless approved shorter-retention controls are enabled. If this check is unavailable or rejects the image, Whiteboard does not save or share it
• Authorities or other parties when disclosure is required by valid law or is reasonably necessary to protect rights, safety, the service, or the public
• A successor involved in a merger, financing, acquisition, reorganization, or sale, subject to this policy and applicable law
• Another party when you direct us to share information or give specific permission

Where a law requires a legal basis, we rely on performance of the service you request, our legitimate interests in operating and securing a private collaboration product, consent for a genuinely optional feature, and compliance with legal obligations. You may withdraw consent for an optional feature by disabling it or contacting us; withdrawal does not affect earlier lawful processing.

We use safeguards designed for the sensitivity of the information, while recognizing that no system can guarantee absolute security:

• TLS for Release-app network traffic and protected iOS Keychain storage for session credentials
• One-way password and recovery-code hashing, short-lived access credentials, refresh-session rotation and revocation, optional MFA, and biometric app locking
• Board membership and role checks on HTTP and WebSocket activity, plus session revalidation during live collaboration
• Strict photo type and size validation, metadata removal on the device, upload rate limits, and a fail-closed server-side safety check before an image is committed
• Rate limiting, restricted moderator access, bounded audit records, dependency review, and operational alerting

We keep identifiable information only while it serves the purposes above, then delete or de-identify it under these rules:

• Account and profile information remains while the account is active. Board content, including a photo that passed the safety check, remains until an authorized person deletes it, its board is deleted, or its author deletes the account. Rejected or failed photo submissions are not stored as board content
• Pending invitations are removed when accepted, declined, or cancelled and otherwise expire after 30 days
• Used or expired magic-link and password-reset records are swept automatically. Expired sessions are deleted; metadata for a revoked session is retained no longer than 30 days. Trusted-device records are deleted at expiry
• Recovery-code hashes remain until used, regenerated, or the account is deleted. IP address and user-agent attached to a used recovery code are removed after 30 days
• Security audit events, safety reports, and linked beta feedback are deleted within 12 months. You may delete your beta notes sooner from Settings > Beta feedback. Account deletion immediately removes linked beta feedback and reports submitted by, targeting, or containing content authored by that account
• Emergency relay message content is deleted within 12 months. Content-free request tombstones may remain longer to prevent a delayed browser or provider retry from recreating a deleted message
• An encrypted push token remains while notifications are enabled for that account and device. Disabled-device records are deleted within 90 days. Completed notification jobs are deleted within 30 days and failed jobs within 90 days
• Deleting your account in Settings revokes sessions; removes profile data, memberships, invitations, blocks, MFA records, authored items, and protected local account caches; deletes a solely owned board when no collaborator remains; and anonymizes and transfers a shared board when collaborators remain. Other people's authored content is not deleted
• A minimal non-identifying account-deletion event may remain for security evidence. Restricted disaster-recovery copies, if created, age out under the applicable backup rotation and are not used for ordinary processing
• Support correspondence is kept only as long as reasonably needed to resolve the request, protect the service, or meet a legal obligation

You can update your name or email in Settings, enable or disable push delivery in Settings > Notifications, delete individual beta notes from Settings > Beta feedback, and delete your account from Settings > Account. A board manager can rotate or disable that board's emergency relay and mark messages resolved. You can ask for access, correction, deletion, restriction, or a portable copy of information associated with you by contacting legal@dartri.com. People who received an invitation without creating an account may use the same address. We verify requests in a way proportionate to their risk and respond within the time required by applicable law.

• Because Whiteboard does not sell personal information, share it for targeted advertising, or use it for covered profiling, there is no sale, targeted-advertising, or profiling opt-out needed for the current product
• Where applicable, you may object to processing, withdraw consent, appeal a privacy-request decision, receive non-discriminatory treatment, or complain to your local privacy authority
• Some information may be retained when required by law or necessary for security, fraud prevention, dispute resolution, or the rights of another person. We will explain any applicable exception in our response

Whiteboard is not directed to people under 18, and we do not knowingly create accounts for them. If you believe a person under 18 has provided personal information through Whiteboard, contact us so we can investigate and remove it as appropriate.

Whiteboard's primary service infrastructure is in the United States. If you use Whiteboard elsewhere, information may be transferred to and processed in the United States and in locations where our service providers operate. Where required, we use an applicable legal transfer mechanism and supplementary safeguards.

DARTRI Labs is the product studio that presents and supports Whiteboard. For formal privacy and data-controller purposes, Whiteboard is operated by Dark Triad Solutions LLC, doing business as DARTRI. Privacy contact: legal@dartri.com. Mail: Attn: Whiteboard Privacy, Denver, Colorado, United States.

We may update this notice when Whiteboard's features, providers, or legal obligations change. The updated date appears at the top, and we will provide a prominent in-app or account notice before a material change takes effect when required. For privacy questions, requests, or appeals, contact legal@dartri.com. For product support use labs@dartri.com. Never email a password, login link, MFA code, recovery code, or authentication token.