Privacy Policy

1. Information We Collect

We collect only the minimum information necessary to operate the game. coUniverse is designed to function with very little personal data.

1.1 Information You Provide

• In-Game Display Name: A name you choose during the onboarding process to identify your character in the game. This does not need to be your real name.
• In-Game Conversation Messages: The text you type when interacting with AI-powered characters during quests and dialogues. These messages are transmitted in real time to our third-party AI service provider to generate character responses.
• Voluntary Disclosures: During conversations with AI characters, you may choose to share personal details. We do not require or solicit personal information for gameplay, and we encourage you not to share sensitive personal information in conversations.

1.2 Information Collected Automatically

• Device and Usage Data: Technical details such as device model, operating system, app version, language settings, crash reports, and gameplay interaction data. This information is collected automatically by Firebase Analytics (provided by Google) to help us monitor app performance and improve the user experience.
• General Location: Approximate geographic location derived from your IP address only. We do not collect precise or GPS-based location data.

1.3 Information We Do NOT Collect

The current version of the App does not require account creation or login. We do not collect:

• Email addresses
• Real names (unless you voluntarily choose your real name as your display name)
• Phone numbers
• Contacts or address book data
• Photos, videos, or files from your device
• Financial or payment card details (payments, if any, are handled entirely by Apple or Google)
• Health or biometric data
• Advertising identifiers for ad targeting or cross-app tracking

Future versions of the App may introduce optional account creation with email or social sign-in. If introduced, that information will be used solely for account management and will not be shared with our AI service provider or any other third party beyond what is necessary for authentication. This Privacy Policy will be updated before any such feature is introduced.

2. How We Use Information

We use the data we collect for the following purposes:

• AI character interactions: Your in-game display name and conversation messages are sent to our third-party AI service provider (currently OpenAI) to generate character responses during gameplay. Game context such as quest state and character information is also sent to produce relevant responses. See Section 3 for full details.
• App performance and analytics: Device and usage data is sent to Firebase Analytics to monitor app performance, identify issues, and improve the user experience.
• Legal compliance: To comply with applicable laws, regulations, and legal processes.

We do not use your data for:

• Advertising or ad targeting
• Selling to any third party
• Profiling for purposes unrelated to gameplay
• Cross-app tracking
• Any purpose unrelated to gameplay and app operation

3. Third-Party AI Service

coUniverse uses OpenAI, a third-party AI service provider based in the United States, to power in-game character conversations.

3.1 What Is Sent to OpenAI

• Your in-game display name (the fictional name you chose)
• The text of your conversation messages
• Game context (quest progress, character state) needed to generate relevant responses

3.2 What Is NOT Sent to OpenAI

• Email addresses or sign-in credentials
• Device information, IP address, or location data
• Any data from outside the App

3.3 How This Data Is Handled

OpenAI processes this data solely to generate character responses on our behalf. We do not share your conversation content with any other third party for their own purposes. OpenAI is contractually required to provide the same or equal protection of user data as stated in this Privacy Policy and as required by applicable platform guidelines. For information on how OpenAI handles data, refer to their privacy policy at https://openai.com/policies/privacy-policy.

3.4 Your Consent

Before using the App, you are presented with a mandatory consent dialog requiring you to agree to our Terms of Service and confirm you have reviewed this Privacy Policy. Our Terms of Service and Privacy Policy clearly disclose that conversations are powered by a third-party AI service (OpenAI) and that your messages are sent to OpenAI to generate responses. You must agree before any data is transmitted. If you do not agree, you cannot use the App.

4. AI Disclosure in Chat

Every chat screen in coUniverse displays a persistent notice informing you that AI-powered characters are not humans. This notice is always visible as the first message in every conversation, so you are always aware you are interacting with AI and not a real person. All character responses are AI-generated and fictional.

5. Sharing and Disclosure

We do not sell your personal information. We do not share your data with advertisers or ad networks. We share data only with the following parties, and only for the purposes described:

• OpenAI (AI service provider): Receives your display name, conversation messages, and game context solely to generate character responses.
• Firebase / Google Analytics (analytics provider): Receives device and usage data to help us monitor app performance and improve the App.
• Apple / Google (platform providers): May process in-app purchase transactions through their respective platforms, if applicable.
• Legal authorities: If required by law, court order, or to protect rights, safety, or property.

All third parties with whom we share user data are contractually required to provide the same or equal protection of user data as stated in this Privacy Policy and as required by applicable platform guidelines.

We do not share data with any other third parties. We do not sell or "share" (as defined under the California Consumer Privacy Act) your personal information for cross-context behavioral advertising.

6. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), we process your personal data on the following legal grounds:

• Consent: When you accept our Terms of Service and this Privacy Policy at first launch, you consent to the processing of your data as described herein, including sharing with our third-party AI service provider. You may withdraw this consent at any time (see Section 8).
• Performance of a contract: To provide the gameplay experience, including AI-powered character interactions, which are a core part of the service you have agreed to use.
• Legitimate interests: For app performance monitoring, issue resolution, and service improvements via Firebase Analytics, balanced against your rights and freedoms.
• Legal obligation: To comply with applicable laws and regulations.

7. Data Retention

• In-game display name: Retained on your device and our servers for as long as you use the App. Deleted upon data deletion request.
• Conversation data: Retained on our servers to maintain narrative continuity across game sessions. Deleted upon data deletion request.
• AI provider data: Data sent to OpenAI may be retained by OpenAI for up to 30 days for abuse and safety monitoring, in accordance with their API data usage policies and our contractual agreements. After that period, it is deleted unless required by law.
• Analytics data: Device and usage data is retained by Firebase Analytics according to Google's standard retention policies (typically up to 14 months). This data is not linked to your identity.

We do not retain your data longer than is necessary for the purposes described in this Privacy Policy.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your data, including your display name, conversation history, and any data shared with third parties on your behalf. Upon receiving a valid deletion request, we will delete your data from our servers and request deletion from our third-party service providers where applicable.
• Restrict processing: Request that we limit how we use your data.
• Data portability: Request your data in a portable, machine-readable format.
• Withdraw consent: You may withdraw your consent at any time by discontinuing use of the App and requesting deletion of your data. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Opt out of sale/sharing: We do not sell your personal information or share it for cross-context behavioral advertising. No opt-out is necessary, but you may contact us to confirm.
• Lodge a complaint: File a complaint with a data protection authority in your jurisdiction.

How to exercise your rights:

You can request data access, correction, deletion, or exercise any other right by contacting us at info@flagshipgamestudio.com. We will respond to your request within 30 days (or sooner if required by applicable law). We may ask you to verify your identity before processing your request.

In-App data management:

You can delete your data directly within the App. For step-by-step instructions on how to delete your account and data, please visit: https://www.flagshipgamestudio.com/couniverse/delete. You may also request data deletion by contacting us at the email address above.

9. Data Security

We implement reasonable technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) between the App and our servers, and between our servers and third-party service providers
• Secure server infrastructure with access controls
• Regular review of our data collection, storage, and processing practices

While we strive to protect your data, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. International Data Transfers

Your data may be transferred to and processed in countries outside your own, including the United States, where OpenAI and Firebase/Google operate. If you are located in the EEA or UK, such transfers are made based on appropriate safeguards, including contractual protections (such as Standard Contractual Clauses approved by the European Commission), to ensure your data receives an adequate level of protection.

11. Children's Privacy

coUniverse is not targeted to children under 13 (or the applicable age of digital consent in your jurisdiction, such as 16 in some EU member states). We do not knowingly collect personal data from children under this age. If we become aware that a child has provided us with personal data, we will promptly delete it. If you believe a child has provided us with personal data, please contact us at info@flagshipgamestudio.com.

12. Advertising

coUniverse does not contain advertisements. We do not serve ads, we do not use ad networks, and we do not share your data with advertisers or for cross-app tracking purposes.

13. Cookies and Tracking Technologies

The coUniverse App does not use cookies. Our website (flagshipgamestudio.com) may use cookies for basic functionality and analytics. You can manage cookie preferences through your browser settings.

We do not use any cross-app or cross-site tracking technologies. We do not use the AppTrackingTransparency framework because we do not track users across other apps or websites.

14. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to know: You can request information about the categories and specific pieces of personal information we have collected about you, the sources of collection, the purposes for collection, and the categories of third parties with whom we share your data.
• Right to delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to opt out of sale/sharing: We do not sell your personal information or share it for cross-context behavioral advertising.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your California privacy rights, contact us at info@flagshipgamestudio.com. We will verify your identity before fulfilling your request and will respond within 45 days.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or on our website before the changes take effect. The "Last Updated" date at the top of this policy indicates when it was last revised. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

16. Contact Us

If you have questions about this Privacy Policy, want to exercise your rights, or have any privacy-related concerns, please contact us: