Privacy Policy & Data Usage

Effective date: 2026-03-03

Last updated: 2026-03-03

Questions or requests: support@feedverse.app

Overview

Feedverse (“Feedverse,” “we,” “us”) is a roleplay app where you create scenarios, character profiles, posts, and messages. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have.

This policy applies to the Service, including our website and mobile apps. If you do not agree with this policy, please do not use the Service.

Data controller

Feedverse is responsible for personal information processed through the Service. Questions or requests: support@feedverse.app.

EEA/UK notice

If you are located in the European Economic Area (EEA) or the United Kingdom, you may have additional rights under the GDPR (or similar laws). You can contact us using the email above to exercise these rights.

Information we collect

We collect information in the following categories (depending on how you use the Service):

Account and identity information: email address, username, display name, and account identifiers.
Authentication and security data: password hash (not your plaintext password), session identifiers, token hashes, login timestamps, and security-related information such as IP address and user agent (browser/device string), and approximate location derived from IP address (for example, city/region/country) used to help secure accounts, manage sessions, and prevent abuse.
OAuth sign-in data (optional): if you sign in with Google or Apple, we receive and store a provider identifier (subject) and may store associated email and basic profile details you provide or the provider shares (such as a display name). We do not receive your Google/Apple password.
User Content: scenarios, character profiles, posts, comments, reactions, and messages you create, plus related metadata needed to organize and deliver them.
Files and media: avatars and other files you upload. These may be stored in object storage and delivered via public URLs.
Notification data: notification preferences and, if you choose to enable push notifications, a push token (for example, an Expo push token) tied to your device.
Communications: messages you send to us (for example, support requests or privacy requests) and our replies.
Technical and diagnostic data: logs and diagnostics generated when you use the Service. If enabled, we may use error monitoring tools to help debug and improve reliability.
Purchase and entitlement data (if offered): if you buy paid features, we may receive limited information about your purchase or subscription status from our payments/subscription providers.

How we use information

We use information for the following purposes:

Provide the Service: create accounts, authenticate you, and deliver scenarios, posts, and messages.
Security and abuse prevention: protect accounts, prevent fraud, apply rate limits, detect suspicious activity, and enforce our Terms of Service.
Account communications: send verification codes, password reset codes, and respond to support requests.
Notifications: send in-app and (if enabled) push notifications based on your preferences.
Service improvement: debug issues, measure reliability, and improve features.
Legal compliance: comply with applicable laws and respond to valid legal requests.

Legal bases (EEA/UK and similar jurisdictions)

Where required by law, we rely on one or more of the following legal bases to process personal information:

Contract: to provide the Service you request under our Terms.
Legitimate interests: to secure, maintain, and improve the Service (balanced against your rights).
Consent: where you choose optional features (for example, push notifications), and where required for certain processing.
Legal obligation: to comply with laws and lawful requests.

How we share information

We do not sell your personal information, and we do not share personal information for cross-context behavioral advertising. We share information only as described below:

With other users: your username, profile information, and User Content may be visible to others depending on the scenario(s) you join and your settings.
With service providers: vendors that process information on our behalf to operate the Service. Examples include:
- File storage/CDN (for example, Cloudflare R2) to store and deliver uploaded media.
- Email delivery (for example, Resend) to send verification and account emails.
- Error monitoring (for example, Sentry) if enabled to diagnose reliability and security issues.
- Push notification delivery (for example, Expo) if enabled to deliver push notifications.
- Subscription/entitlement services (for example, RevenueCat) if we offer paid features.
With OAuth providers: if you use Google/Apple sign-in, those providers process your information under their own policies.
For legal reasons: to comply with law, protect rights and safety, and respond to lawful requests.
Business transfers: if we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

International transfers

We and our service providers may process and store information in countries other than where you live. Where required, we take steps intended to provide appropriate safeguards for international transfers (for example, using contractual protections).

Data retention

We retain information for as long as necessary to provide the Service, maintain security, comply with legal obligations, and resolve disputes. Retention varies based on data type and context.

If you request account deletion, we will take steps to delete or de-identify personal identifiers where feasible. Shared scenario history may need to remain to preserve the integrity of collaborative stories. See Data Deletion for details.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Cookies and similar technologies

Feedverse does not use third-party advertising cookies on our legal pages. The Service may use similar technologies (such as device storage) to keep you signed in, remember preferences, and operate core functionality.

Your choices and rights

Depending on where you live and applicable law, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to object to or restrict certain processing.

EEA/UK (GDPR): where applicable, your rights may include access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent (where we rely on consent). You also have the right to lodge a complaint with your supervisory authority.

Access/updates: you can update certain information in the app (where available).
Deletion: you can request deletion in-app (where available) or follow the instructions on the Data Deletion page.
Push notifications: you can typically disable push notifications through your device settings, and the app may provide controls for notification preferences.
How to exercise rights: email us at support@feedverse.app. We may ask you to verify your identity before responding.

Children’s privacy

Feedverse is not intended for children under 13 (or the minimum age required by local law). If you believe a child has provided personal information, contact us and we will take appropriate steps.

Changes to this policy

We may update this policy from time to time. We will update the effective date above when changes are made. If changes are material, we may provide additional notice as required by law.

Contact

Email: support@feedverse.app