Privacy Policy

1. Information we process

• Account and profile: a guest or registered account identifier, email address when you save or sign in to an account, supported sign-in provider information, display name, avatar, and profile details you provide. Guest play still uses an account identifier to keep your progress.
• Gameplay and relationships: journeys, progress, saved state, preferences, activities, matching choices, Duo and Crew relationships, and interactions with the game.
• Messages and other content: conversations with people or AI companions, reflections, personal logs, profile text, attachments, and support or safety reports you submit. Companion features can retain conversation summaries, memories and derived representations to provide continuity and personalized responses.
• In-game reflections: answers about energy, rest, movement, mood and financial worries, together with game scores and personalized recommendations. These are game and self-reflection features, not medical checks or diagnoses. Your answers are linked to your account and may reveal information about your wellbeing, activity or financial circumstances.
• Photos, video and audio: media you choose to upload or send, images you ask us to generate, voice messages, and audio or video transmitted during calls. Voice features may send audio for transcription and text for generated speech.
• Optional birth information: date, time and place of birth, and the charts and interpretations generated from them.
• Location: a city, region or country you provide, and device location when you allow it. For player map presence, the app requests reduced accuracy and our server rounds the device position to an approximately 2 km grid before storage. Other features, including nearby searches, can transmit more precise coordinates; request logs can retain those coordinates. Map-pin rounding does not apply to every location request. Place searches and birth-place selection also process the places you enter.
• Searches: queries you enter to find places, experiences or other in-app content. Some search queries and derived representations are cached to provide and improve search results.
• Technical information: device and app-instance identifiers, notification tokens, IP addresses used in service delivery, app and operating-system versions, usage events, errors and performance diagnostics.

Information may be linked to your account, device or a stable pseudonymous identifier. Product analytics can include public display names, avatar image URLs, coarse profile location and derived interaction categories. A pseudonymous identifier does not make this information anonymous.

We do not request access to your address book or payment card details. Please avoid putting sensitive information into messages or attachments unless it is necessary for the feature you choose to use.

2. Photos, camera, microphone and location choices

Our photo chooser combines device photos, your saved or generated images, built-in choices and camera capture. Limited or selected-photo access exposes only the photos you authorize; full photo access lets the chooser browse the accessible photo library. Library permission does not itself upload the library. Selecting a reference image for generation, adding a profile photo, or sending an attachment sends the chosen content for that action.

Camera, microphone and location permissions are requested for the features that use them. You can deny them or change them in system settings. The photo chooser provides a one-photo selection option when library access is off. Saving an image to your device is a separate action from uploading it.

On supported devices, face detection for framing a photo runs on the device. Framing coordinates can be saved with an uploaded photo so it displays correctly. A selected reference photo can still be sent to an AI image provider when you request an avatar, and generated images can be saved to your account. Local face detection does not make that separate upload local.

Photo visibility choices control who can see photos through the app. Your current profile avatar is public. Ghost Mode hides your player map pin; it does not delete a previously saved location. Content that you send or share may be seen or copied by its recipients.

3. Why we use information

We process information to provide accounts and game progress, personalize activities and recommendations, connect players, deliver messages and calls, generate AI responses and media, send transactional email and notifications, handle support and safety reports, prevent abuse, diagnose failures, and understand and improve the product.

The app does not serve advertisements, sell personal information, or use it for cross-app advertising. Product analytics and personalization are separate from advertising tracking.

We may use your email address for coUniverse news or promotional messages where permitted, including with consent where required. Promotional messages provide a way to unsubscribe; you can also contact us to stop them. Account, security and service messages are handled separately.

4. Service providers and AI

We use service providers for the features described here:

• Google Cloud and Firebase: hosting, databases and media storage, authentication, notifications, configuration, analytics, crash reporting and operational diagnostics. Google Cloud also supports analytics and AI processing through services including BigQuery and Vertex AI.
• Stream: chat, message attachments and audio/video calling.
• Mixpanel: product usage analytics and approved profile and interaction information.
• Resend: sign-in codes and other transactional email.
• Google Maps and Places: maps and place lookup.
• AI providers, including Google/Vertex AI, Anthropic and OpenAI: model processing for the feature you use, such as companion responses, search, generated images, speech or transcription. The provider depends on the feature and current service configuration.
• ElevenLabs, when configured for a voice: speech generation from text.

When you use AI companions, coUniverse's AI services and the AI providers listed above may process your messages and relevant conversation history to generate responses, analyze the conversation, and maintain summaries and memories for continuity and personalization. This applies to conversations with an AI companion and shared chats in which an AI companion participates. A companion joining a shared chat may use earlier messages from that chat as context.

AI processing may also include selected media, profile or birth information, and relevant game context needed to answer your request. AI companions are identified in the app; their responses may be inaccurate and are not professional advice.

We may also disclose information when required by law or when necessary to investigate abuse, protect safety, or defend legal rights. Information you deliberately make public or send to other players is shared with the audience for that feature.

5. Purchases

If purchases are enabled in the version you use, the checkout identifies the store or payment provider and the terms before you pay. Payment card details are entered with that provider. Purchase receipts, subscription status and transaction identifiers may be linked to your coUniverse account to provide paid access, restore purchases and handle refunds. For mobile subscriptions, this can involve Apple or Google and RevenueCat. Availability varies by platform and version; this paragraph does not mean purchases are currently enabled.

6. Retention and deletion

Account, progress and saved content are kept to provide your ongoing experience. You can delete your account in Settings or request deletion at info@couniverse.app. See account deletion instructions.

Account deletion removes account-owned product records and media and initiates chat and authentication cleanup. Shared Crew or event content may remain for other participants. Copies already received by other people are outside our control.

Operational logs, analytics, backups and provider records have separate retention and deletion processes. The current production configuration keeps ordinary operational logs for 30 days, maintains 30 database backup copies, and keeps deleted media recoverable in storage for seven days. Thirty backup copies is not a guarantee that every backup is erased within 30 days. Exported analytics and security/audit records can have different retention periods.

Records needed for security, legal obligations or dispute resolution may be retained for those purposes. A deletion request may require separate action with analytics or other providers and verification that the request is yours. Contact us for a request covering those systems. Deleting an account does not itself cancel an Apple or Google subscription.

7. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete or receive a copy of your personal information, object to or restrict certain processing, and withdraw consent where processing relies on consent. You may also complain to your local data protection authority. Contact info@couniverse.app to exercise these rights. We may ask for information needed to verify your request, and will respond within the applicable legal time limit.

You can change device permissions, notification preferences and available profile visibility controls. Withdrawing a permission stops the related future device access; it does not automatically erase information you previously submitted. You can contact us about analytics processing or to object to direct marketing. You do not need to send a password to request help or deletion.

8. Legal bases and international processing

Where applicable data protection law requires a legal basis, processing may be necessary to provide the service you request, based on consent for optional processing, necessary for legitimate interests such as security and service reliability subject to your rights, or required by law. Accepting the Terms does not waive your privacy rights.

Our providers may process information outside your country, including in the United States. We use the applicable providers' data-processing terms and international-transfer arrangements, which may include standard contractual clauses where required. Contact us for information about the safeguards applicable to your data or to request a copy.

9. Minimum age

coUniverse is for people aged 16 or older. A higher minimum applies where required by local law. It is not intended for children under 16. If you believe someone below the applicable minimum age has provided personal information, contact info@couniverse.app so we can investigate and take appropriate action.

10. Security and changes

Chat messages are encrypted in transit and at rest by Stream. Chats are not end-to-end encrypted; AI services can process conversation content for the companion features described in section 4.

We use access controls and encrypted network connections to protect information. No service can guarantee complete security. Our app and website use local storage and similar technologies for sessions, preferences and operation; they are not used for cross-app advertising.

We will update this policy when our practices change and provide notice of material changes as required. The revision date identifies the version of this policy.

11. Contact

Narek KOSTANYAN, operating coUniverse under the Flagship Game Studio name.
Email: info@couniverse.app
Website: couniverse.app