This Privacy Policy explains what data Rosy Bae collects, why, and what your rights are.

1. Data We Collect

Account: email address and hashed password (for sign-in).
Profile: display name and avatar image you provide.
Gameplay: messages you send, scenarios played, anger scores, session outcomes, credits balance, characters unlocked.
Presence: last-seen timestamps to show online status.
Technical: IP address, browser type, and basic request logs for security and abuse prevention.

2. Why We Use It

To provide the game (authentication, saving progress, running chat sessions).
To generate AI responses (your typed messages are sent to our AI provider — see below).
To display leaderboards and public profiles (only your display name, avatar, and stats — never your email).
For safety, moderation, and legal compliance.

3. Who Processes Your Data

Our backend host — stores your account, profile, and gameplay data.
Our AI provider (OpenRouter and the underlying model) — receives the chat context (recent messages and character/scenario details) to generate replies. Do not share personally identifying information in chat.
Payment providers — if/when purchases are enabled, they handle payment info directly; we never see your card details.

4. Data Retention

We retain your account data as long as your account is active. Chat messages are stored to power the game and may be reviewed for safety violations. You can request deletion at any time via Contact; we will delete your account and personal data within 30 days, except where retention is required by law.

5. Your Rights

Depending on where you live, you may have the right to:

Access, correct, or delete your data.
Export your data.
Withdraw consent.
Complain to your local data-protection authority.

Send requests to our contact address.

6. Cookies and Local Storage

We use essential browser storage to keep you signed in and to remember your active character. We do not use third-party advertising cookies.

7. Children

The Service is for users 18 and older. We do not knowingly collect data from anyone under 18. If we learn we have, we will delete it.

8. Security

We use industry-standard measures (HTTPS, encrypted-at-rest storage, row-level access controls) to protect your data. No system is 100% secure — please use a strong, unique password.

9. International Transfers

Your data may be processed in countries other than yours. We rely on standard contractual clauses or equivalent safeguards where required.

10. Changes

We may update this Policy. Material changes will be notified in-app.

11. Contact

Data-related questions: Contact us.