Aivry Privacy Policy / Polityka prywatności Aivry

English

This policy explains how personal data is processed when you use the Aivry mobile application, website, and related online services (collectively, “Aivry”).

1. Controller and contact

The controller of personal data processed through Aivry is Tomasz Jojko, Poland. For privacy questions or to exercise your rights, contact denebhyde@gmail.com.

2. Data we process and where it comes from

• Account and profile data: internal user ID, account creation and last-activity dates, profile/display name, optional nickname and profile settings, language, marketing preference, and email address. A guest account also uses a randomly generated device identifier. If you use Apple or Google sign-in, we receive the provider account identifier and information the provider makes available, such as a verified email address or display name.
• Interactive content and progress: messages, prompts, AI responses, chat history, game choices and state, saved sessions, favorites, likes, unlocked content, notifications, coin balance, and other settings required to provide and continue an experience.
• Purchase data: product and transaction identifiers, purchase status, amount, currency, purchased coin amount, and store/provider name. Apple App Store and Google Play process mobile payments. We do not receive or store complete payment-card details.
• Technical, usage, and diagnostic data: app platform, device and operating-system information available in network requests or diagnostic reports, session and navigation events, pages and experiences opened, error information, IP address, and user-agent information. Approximate country may be derived from the device locale, language settings, or network/proxy country headers. Aivry does not need GPS location for this purpose.
• Speech features: if you choose voice input, the device platform processes microphone audio for speech recognition. The resulting text is processed like a message. Aivry does not intentionally store the raw microphone recording. If you request spoken AI output, the text to be spoken and the selected voice may be sent to a speech provider.

Free-form messages may contain information you choose to provide. Please do not include passwords, payment-card details, health information, or other sensitive personal data that is not needed to use the service.

3. Purposes and legal bases

Providing data required to create an account, deliver a selected experience, or complete a purchase is necessary for those features. Optional profile fields, voice input, social sign-in, and marketing consent are voluntary.

4. AI and automated processing

Messages and the conversation or game context needed to produce a response may be sent to an AI service provider. AI output may be variable or inaccurate. Aivry uses automated processing to create entertainment content and adapt gameplay, but does not use it to make decisions that produce legal or similarly significant effects about users.

5. Recipients and service providers

We disclose only the data reasonably necessary for a provider’s task. Depending on the feature and current service configuration, recipients may include:

• hosting, database, content-delivery, security, and technical-support providers used to operate the Aivry API and website;
• Apple and Google for optional authentication, mobile purchases, and platform speech recognition;
• AI model and routing providers used by a selected experience, which may include OpenRouter, DeepSeek, Google, or xAI;
• speech-generation providers, which may include ElevenLabs, when spoken AI output is enabled;
• professional advisers, payment/accounting providers, or public authorities where required by law or necessary to establish or defend legal claims.

We require service providers that process personal data for us to apply protections consistent with this policy and applicable law. Providers may also act as independent controllers for their own account, store, or platform services; their own privacy notices then apply.

6. Analytics, advertising, and sale of data

Aivry records limited first-party usage and navigation events linked to an account or session to operate and improve the service. Aivry does not sell personal data, does not use personal data for behavioral advertising, and does not track users across apps or websites owned by other companies for advertising purposes.

7. International transfers

Some providers may process data outside Poland or the European Economic Area. Where required, transfers are protected by an adequacy decision, Standard Contractual Clauses, or another lawful transfer mechanism, together with appropriate supplementary safeguards. You may contact us for more information about safeguards relevant to your data.

8. Retention and deletion

• Account, profile, saved content, chat, gameplay, and account-linked usage data are generally retained while the account is active so the service can be provided.
• When you delete the account in Profile → Delete Account, Aivry deletes the account and associated content from the active service, subject to records that must be retained by law or are necessary for fraud prevention, security, dispute resolution, or legal claims.
• Transaction and accounting records may be retained for the period required by applicable tax, accounting, consumer-protection, and payment laws.
• Security and diagnostic logs are retained only for as long as reasonably necessary to investigate incidents, protect the service, and diagnose failures.
• Residual copies may remain in restricted backups until the backups are overwritten through their normal rotation. They are not restored for ordinary product use after an account-deletion request.

9. Your choices and rights

You can export your data and permanently delete your account inside Aivry from Profile. Additional instructions are available on the account deletion page. You may also contact us to request access, correction, deletion, restriction, portability, or to object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time. You may lodge a complaint with the data-protection authority in your country; in Poland, this is the President of the Personal Data Protection Office (UODO).

Rights may be limited where an applicable law permits or requires us to retain or process data. We may need to verify your identity before completing a request.

10. Security

We use technical and organizational safeguards including access controls, password hashing, and encrypted network connections. No online service can guarantee absolute security.

11. Children

Aivry is an entertainment service intended for adults and is not directed to children. A parent or guardian who believes that a child has provided personal data should contact us so we can investigate and take appropriate action.

12. Changes to this policy

We may update this policy when Aivry or applicable requirements change. We will publish the revised effective date here and provide additional notice where required.