Privacy Policy

1. Introduction

This Privacy Policy describes how SFB Interactive Story Game ("we," "our," or "us") collects, uses, and protects your personal information when you use our mobile application ("the App"). We are committed to protecting your privacy and ensuring transparency about our data practices.

2. Information We Collect

2.1 Account Information

When you create an account using Firebase Authentication, we collect:

• Email address (if you sign up with email)
• Unique user identifier (Firebase UID)
• Authentication method used
• Account creation and last login timestamps

2.2 Usage Data

We collect information about how you use the App, including:

• Story choices and decisions made
• Game progression and completion status
• Features accessed and time spent in the App
• Error logs and crash reports for technical improvements
• Device information (iOS version, device model, app version)

2.3 AI Interaction Data

To provide personalized story experiences, we process:

• Your story choices and preferences
• AI-generated content created for your sessions
• Context needed to maintain story continuity
• Feedback on story quality and preferences

2.4 Financial Information

For in-app purchases:

• Purchase history and credit balance
• Transaction IDs and timestamps
• Credit usage patterns

Note: Payment processing is handled entirely by Apple. We do not store credit card or payment method information.

3. How We Use Your Information

4. Third-Party Services

4.1 OpenAI

We use OpenAI's GPT-4 and text-to-speech services to generate story content and audio. Data sent to OpenAI includes:

• Story context and your previous choices
• Prompts for generating personalized content
• Text for voice synthesis

OpenAI's privacy policy applies to their processing: https://openai.com/privacy

4.2 Firebase (Google)

We use Firebase services for:

• Authentication and user management
• Cloud database storage (Firestore)
• Analytics and crash reporting
• Cloud functions for backend processing

Google's privacy policy applies: https://policies.google.com/privacy

4.3 RevenueCat

We use RevenueCat for subscription and purchase management:

• Purchase events and transaction data
• Subscription status and renewal information
• Customer analytics for revenue optimization

RevenueCat's privacy policy: https://www.revenuecat.com/privacy

4.4 Apple App Store

All payment processing is handled by Apple. We receive only transaction confirmation data necessary for credit allocation.

5. Data Storage and Security

5.1 Where We Store Data

Your data is stored in:

• Google Cloud Platform (Firebase) servers in the United States
• OpenAI's secure cloud infrastructure for AI processing
• Your device for local caching and offline functionality

5.2 Security Measures

We implement industry-standard security practices:

• Encryption in transit (HTTPS/TLS) for all data transmission
• Encryption at rest for stored data
• Access controls and authentication for backend systems
• Regular security updates and monitoring
• Minimal data retention principles

5.3 Data Retention

We retain your data for:

• Account data: Until you delete your account
• Story content: During active gameplay sessions
• Transaction records: 7 years for financial compliance
• Analytics data: 26 months maximum
• Error logs: 90 days for debugging purposes

6. Your Privacy Rights

6.1 Access and Portability

You can request access to your personal data or a copy of your data in a portable format.

6.2 Correction and Updates

You can update your account information directly in the App or contact us to correct inaccurate data.

6.3 Deletion

You can request deletion of your account and associated data. Some information may be retained for legal compliance.

6.4 Opt-Out Rights

You can opt out of:

• Analytics data collection (through iOS Settings)
• Promotional communications
• Non-essential data processing

7. Children's Privacy

The App is not intended for children under 13 years old. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it immediately.

8. International Data Transfers

Your data may be transferred to and processed in countries other than your residence, including the United States where our primary servers are located. We ensure appropriate safeguards are in place for international transfers.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

10. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation including the right to:

• Access, rectify, or erase your personal data
• Restrict or object to processing
• Data portability
• Withdraw consent
• File a complaint with supervisory authorities

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable laws. We will notify you of significant changes through the App or by email. Your continued use of the App after changes indicates acceptance of the updated policy.

12. Analytics and Tracking

We use Firebase Analytics to understand App usage patterns and improve user experience. You can opt out of analytics through your iOS device settings under Privacy & Security > Analytics & Improvements.