Privacy Policy
Effective date: 07/07/2026 · Last updated: 07/07/2026
This Privacy Policy explains how MyAdventures Ltd ("we", "us") collects, uses, and shares information when you use MyAdventures.AI (the "Service"). It forms part of our Terms of Service.
1. Who we are
The data controller is MyAdventures Ltd. For privacy questions, contact support@myadventures.ai
2. Information we collect
You provide:
- Account information — email address, display name, and authentication data. If you sign in with a third-party provider, we receive basic profile information from them. Passwords, where used, are stored only as salted hashes.
- Content you create — characters, worlds, stories, rulesets, and the messages and prompts you send during play, together with the game state derived from them.
- Communications — messages you send us, feedback, and content reports.
- Payment information — when you buy credits, payment is handled by Stripe; we receive transaction confirmation and limited billing details, not your full card number.
Collected automatically:
- Usage and device data — such as pages viewed, features used, approximate actions, timestamps, and general device/browser information, collected to operate and improve the Service. [Our product analytics are designed to be privacy-preserving and to avoid storing directly identifying information — describe accurately.]
- Cookies and similar technologies — used for authentication/session and basic analytics. See Section 9.
3. How we use information
We use information to: provide and operate the Service (including generating game content and maintaining game state); create and secure your account; process purchases and manage credits; provide support and respond to reports; monitor, detect, and act on violations of our Terms and Acceptable Use Policy (including automated and human content moderation); analyse and improve the Service; send service and, where permitted, marketing communications (which you can opt out of); and comply with legal obligations.
Legal bases (GDPR/UK GDPR). Where applicable we rely on: performance of a contract (providing the Service); legitimate interests (securing and improving the Service, moderation, and preventing abuse); consent (certain cookies and marketing); and legal obligation.
4. AI processing and content moderation
- To generate gameplay, the inputs you provide and relevant game context are sent to third-party AI providers (see Section 5) which return generated text, audio, or images. This processing is necessary to provide the Service.
- We may create vector embeddings of certain content (e.g. memories and lore) to power search and consistency features.
- We operate content-moderation measures — automated screening and human review — to enforce our Acceptable Use Policy. This may involve processing your prompts and generated content, and recording moderation outcomes associated with your account, to detect and act on violations.
- Training. We do not sell your content, and we do not use your private content to train our own models. We instruct our AI providers to process your inputs only to provide the Service, and, to our knowledge, they do not use API inputs to train their models by default. [VERIFY against each provider's current API terms — Anthropic, Google, Z.ai, Stability AI, PixelLab — and update this statement to match.]
5. How we share information
We share information with:
- Service providers / subprocessors who process data on our behalf, including (as configured): Anthropic (AI Game Master), Google (AI embeddings and text-to-speech), Z.ai / GLM (AI text and images), Stability AI and PixelLab (image generation), MongoDB Atlas (database hosting), [HOSTING PROVIDER] (application hosting), [PAYMENT PROCESSOR] (payments), and Resend (email delivery). Each processes data only as needed to provide its service.
- Other users, for content you choose to publish or share through the Service's sharing features (including your display name as author).
- Legal and safety — where we believe disclosure is necessary to comply with law or legal process, enforce our Terms, protect the rights, safety, and security of our users, the public, or us, or in connection with suspected illegal activity. Suspected child sexual abuse material is reported to the appropriate authorities as required by law.
- Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
6. Data retention
We retain information for as long as your account is active and as needed to provide the Service, then for a reasonable period as required for backups, legal compliance, dispute resolution, and enforcement. Moderation and abuse records may be retained longer where necessary for safety and legal purposes. When you delete content or your account, we delete or de-identify associated personal data within a reasonable period, subject to those exceptions. [Specify concrete retention periods with counsel.]
7. Security
We use technical and organisational measures designed to protect information (for example, encryption in transit, hashed passwords, and access controls). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your personal data, to object to certain processing, and to withdraw consent. You can:
- Access and edit account details, and delete your account, from within the Service.
- Opt out of marketing email via the unsubscribe link or your settings.
- Contact support@myadventures.ai to exercise your rights.
We will not discriminate against you for exercising these rights. If you are in the EEA/UK you may complain to your supervisory authority; if you are in California you have rights under the CCPA/CPRA (we do not "sell" personal information as commonly understood — confirm and describe any "sharing" for cross-context advertising, if any).
9. Cookies
We use strictly necessary cookies for authentication and session management, and limited analytics cookies/technologies to understand and improve usage. You can control cookies through your browser; disabling some may affect functionality.
10. Children
The Service is not directed to, and may not be used by, anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact support@myadventures.ai and we will take appropriate steps to delete it.
11. International transfers
We and our providers may process information in countries other than yours, including United Kingdom, which may have different data-protection laws. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for such transfers.
12. Changes to this Policy
We may update this Policy. For material changes we will take reasonable steps to notify you. The "Last updated" date shows the latest revision.
13. Contact
MyAdventures Ltd, support@myadventures.ai