Privacy Policy

1. What information do we collect?

Personal information you disclose to us

We collect personal information that you voluntarily provide when you register on the Services, express interest in our products, participate in activities on the Services, or otherwise contact us. This may include:

• Names
• Email addresses
• Usernames

We do not process sensitive information (e.g. racial or ethnic origin, sexual orientation, religious beliefs).

Application data. If you use the app, we may automatically collect device information such as your mobile device ID, model and manufacturer, operating system and version, device/application identification numbers, browser type, hardware model, internet service provider/mobile carrier, and IP address. This is primarily needed to maintain the security and operation of the app, for troubleshooting, and for internal analytics and reporting.

Information automatically collected

We automatically collect certain information when you use the Services — device and usage information, IP address, browser/device characteristics, operating system, language preferences, referring URLs, device name, country, location, and how and when you use our Services. This does not reveal your specific identity on its own.

Log and usage data. Service-related, diagnostic, usage, and performance information our servers automatically collect and record in log files — IP address, device information, browser type, activity in the Services (timestamps, pages/files viewed, searches, features used), and device event information (crash reports, hardware settings).

Google API. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2. How do we process your information?

We process your personal information for a variety of reasons, depending on how you interact with the Services, including to:

• Facilitate account creation and authentication and manage user accounts.
• Deliver and facilitate delivery of the requested service.
• Respond to inquiries and offer support.
• Send administrative information about our products, services, and changes to our terms/policies.
• Request feedback about your use of the Services.
• Deliver targeted advertising tailored to your interests, location, and more.
• Protect the Services, including fraud monitoring and prevention.
• Identify usage trends so we can improve the Services.
• Save or protect an individual's vital interest, such as to prevent harm.

3. What legal bases do we rely on to process your information?

If you are located in the EU or UK

The GDPR and UK GDPR require us to explain our legal bases, which may include:

• Consent — you can withdraw it at any time.
• Performance of a contract — necessary to provide the Services you requested.
• Legitimate interests — e.g. developing and displaying relevant advertising, analyzing and improving the Services, diagnosing problems and preventing fraud, and understanding how users use our products.
• Legal obligations — e.g. cooperating with law enforcement or regulators.
• Vital interests — protecting someone's safety in exceptional circumstances.

If you are located in Canada

We rely on express or implied consent, which you may withdraw at any time, except in specific cases permitted by law (e.g. fraud detection and prevention, business transactions, legal or investigative obligations, or where the information is publicly available).

4. When and with whom do we share your personal information?

Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or part of our business.

5. What is our stance on third-party websites?

The Services may link to third-party websites, services, or applications, and may contain advertisements from third parties not affiliated with us. We do not guarantee the safety and privacy of data you provide to any third party, and any data collected by third parties is not covered by this notice. We are not responsible for the content, privacy, or security practices of any linked third parties — review their policies directly.

6. Do we use cookies and other tracking technologies?

We use cookies and similar tracking technologies (like web beacons and pixels) to secure the Services, prevent crashes, fix bugs, save preferences, and support basic site functions. We also permit third parties and service providers to use tracking technologies for analytics and advertising, including to tailor advertisements to your interests.

Where these tracking technologies are considered a "sale"/"sharing" under applicable US state laws, you can opt out — see "Do United States residents have specific privacy rights?" below.

Google Analytics. We may share your information with Google Analytics to track and analyze use of the Services. You can opt out at tools.google.com/dlpage/gaoptout.

7. Do we offer artificial intelligence-based products?

As part of the Services, we offer products and features powered by artificial intelligence, machine learning, or similar technologies ("AI Products") — including AI bots and AI applications such as StoryMode chat. We provide these through third-party AI service providers, including Groq and Google Cloud AI. Your input, output, and personal information may be shared with and processed by these providers to enable your use of the AI Products. You must not use the AI Products in a way that violates the terms or policies of any AI service provider.

8. How long do we keep your information?

We keep your personal information only as long as your account exists with us, unless a longer retention period is required by law (e.g. tax or accounting requirements). When we have no ongoing legitimate need to process your information, we delete or anonymize it, or, if that isn't possible (e.g. information stored in backup archives), we securely isolate it from further processing until deletion is possible.

9. How do we keep your information safe?

We have implemented appropriate technical and organizational measures designed to protect the personal information we process. However, no electronic transmission or storage technology can be guaranteed 100% secure, so we cannot promise that unauthorized third parties will never defeat our security. Transmission of personal information to and from the Services is at your own risk — only access the Services within a secure environment.

10. Do we collect information from minors?

We do not knowingly collect, solicit, or sell personal information from children under 18 (or the equivalent minimum age in your jurisdiction). By using the Services, you represent that you are at least 18, or the parent/guardian of a minor consenting to their use. If we learn we've collected data from someone under 18, we will deactivate the account and delete such data. Contact us at helloskrolla@gmail.com if you become aware of any such data.

11. What are your privacy rights?

These rights may include the right to (i) request access to and a copy of your personal information, (ii) request rectification or erasure, (iii) restrict processing, (iv) data portability, and (v) not be subject to solely automated decision-making that produces legal or similarly significant effects. You can exercise these by contacting us — see "How can you contact us about this notice?"

If you're in the UK and unhappy with how we've handled your information, you can complain to us directly first; we'll acknowledge within 30 days, investigate without undue delay, and keep you informed. If unresolved, you can refer your complaint to the Information Commissioner's Office (helpline 0303 123 1113). EEA/UK residents may also complain to their Member State/UK data protection authority, and Switzerland residents may contact the Federal Data Protection and Information Commissioner.

Withdrawing consent. Where we rely on your consent, you may withdraw it at any time by contacting us — this won't affect the lawfulness of processing before withdrawal.

Account information. You can review or change your account information in-app, or by contacting us. Upon a termination request we'll deactivate/delete your account and information from our active databases, though we may retain some data to prevent fraud, troubleshoot, assist investigations, or comply with legal requirements.

Cookies. Most browsers accept cookies by default; you can set your browser to remove or reject them, though this may affect certain features.

12. Controls for Do-Not-Track features

No uniform technology standard for recognizing and implementing Do-Not-Track ("DNT") signals has been finalized. We do not currently respond to DNT browser signals or similar mechanisms. If a standard is adopted that we must follow, we'll update this notice accordingly. California law requires us to note that because there is no industry or legal standard for honoring DNT signals, we do not respond to them at this time.

13. Do United States residents have specific privacy rights?

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have rights to request access to and details about the information we hold, correct inaccuracies, obtain a copy, delete it, or withdraw consent.

Categories of personal information we collect

We retain Category A and B information for as long as the user has an account with us. We have not sold, shared, or disclosed personal information to third parties for a business or commercial purpose in the preceding twelve months, and will not do so going forward.

Your rights

• Right to know whether we are processing your personal data.
• Right to access your personal data.
• Right to correct inaccuracies.
• Right to request deletion.
• Right to obtain a copy of data you previously shared with us.
• Right to non-discrimination for exercising your rights.
• Right to opt out of targeted advertising, sale/sharing of personal data, or profiling with legal or similarly significant effects.

Depending on your state, you may also have rights to obtain lists of categories or specific third parties we've disclosed data to, review/correct how your data has been profiled, limit use of sensitive data, or opt out of collection via voice/facial recognition features.

How to exercise your rights

Email helloskrolla@gmail.com. You may designate an authorized agent to submit a request on your behalf, subject to proof of authorization. We'll verify your identity using only the information provided in your request before acting on it.

Appeals. If we decline to act on your request, you may appeal by emailing us; we'll respond in writing with our reasoning. If denied, you may submit a complaint to your state attorney general.

California "Shine the Light" law. California residents may request, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes in the prior calendar year — email us to make such a request.

14. Do other regions have specific privacy rights?

Australia

We collect and process your information under Australia's Privacy Act 1988. You have the right to request access to or correction of your personal information at any time, and to submit a complaint about a breach of the Australian Privacy Principles to the Office of the Australian Information Commissioner.

15. Do we make updates to this notice?

Yes — we'll update this notice as necessary to stay compliant with relevant laws. The "Last updated" date at the top will reflect the revision. For material changes, we may notify you by prominently posting a notice or sending a direct notification.

16. How can you contact us about this notice?

If you have questions or comments about this notice, email us at helloskrolla@gmail.com or write to us at:

17. How can you review, update, or delete the data we collect from you?

Based on the applicable laws of your country or US state of residence, you may have the right to request access to the personal information we collect from you, learn how we've processed it, correct inaccuracies, or delete it — and to withdraw your consent to our processing. To make such a request, email helloskrolla@gmail.com.