Last updated: June 13, 2026
This page explains how Draw+ for Windows keeps your data and account safe.
Everything you create in Draw+ — diagrams, models, requirements, project files — is saved only as files on your own Windows computer. We don't upload them anywhere, and we don't have a copy. There is no cloud storage, no sync service, and no sharing feature. If your computer is off the internet, your files are still completely private.
Sign-in is handled entirely by Google's Firebase Authentication service — a platform trusted by millions of apps worldwide. When you create an account or sign in, your password goes directly to Google. Draw+ never receives it, never stores it, and never even sees it. If Google's sign-in is good enough for Gmail, it's good enough for Draw+.
Payments are processed by Stripe — one of the most widely used payment platforms in the world. When you subscribe, you enter your card details on Stripe's own secure payment page. That information goes directly from your browser to Stripe. Draw+ never receives your card number, expiry date, or security code. We only receive a confirmation that tells us your subscription is active.
The AI Co-Pilot runs directly on your Windows PC. When you ask it to generate a diagram or suggest a model, it processes your request locally — like a calculator, everything happens inside your computer. Nothing you type into the AI prompt is sent to the internet by default.
If you ever choose to connect to a cloud AI service (an optional feature you must turn on yourself), only the text you type in that moment would be sent. Your files, diagrams, and project data are never included.
To run the service, we need to know two things: who you are (so you can sign in) and whether your subscription is active (so the save feature works). That's it. Here's a simple breakdown:
| Type of data | Do we store it? |
|---|---|
| Your design files and diagrams | No — stays on your computer |
| Your password | No — handled by Google |
| Your credit card details | No — handled by Stripe |
| AI prompts you type (default mode) | No — processed on your PC |
| Your email address | Yes — so you can sign in |
| Your subscription status | Yes — so the save feature works |
We've taken steps to make sure one person can never access another person's subscription. When we check your subscription, we verify that the account belongs specifically to you — not just that an email address matches. This means even if someone knows your email address, they cannot unlock your subscription on their own account.
When you sign out, any login information stored temporarily on your device is cleared.
Draw+ does not collect usage statistics or diagnostic data by default. If you want to help us improve the app by sharing anonymous usage information, you can turn that on in Settings at any time. You can also turn it off. In fully offline or air-gapped environments, this feature can be permanently disabled.
When Stripe tells us about a payment or subscription change, we verify that the notification is genuinely from Stripe before acting on it. This prevents anyone from faking a "payment received" message to unlock features they haven't paid for.
Our server software is regularly reviewed and updated to address known security issues. As of June 2026, our latest review found no outstanding vulnerabilities. We also deleted any old administrative tools that were no longer needed, to reduce the risk of them being misused.
We use two well-known, established companies to handle the most sensitive parts of our service:
Both companies are subject to independent security audits and comply with international data-protection standards. You can read their privacy policies on their respective websites.
If you believe you've found a security problem in Draw+ for Windows, please let us know privately before telling anyone else. We'll investigate promptly and work to fix it as quickly as possible.
For more details on how we handle your personal information, see our Privacy Policy.