Privacy Policy
1. Who we are
Unwritten AI ("we", "our", "us") publishes the Unwritten AI mobile application and the website at unwrittenai.app. We are the data controller for the personal data described below.
Questions, requests and complaints: privacy@unwrittenai.app.
2. What we collect
Account
- Your email address, used to sign you in
- Your display name and hero names, chosen by you
- Your subscription plan and its status
- The date the account was created
Gameplay
- Adventures, turn history and the narrative text generated for you
- Character statistics, skill levels and progression
- The choices you make and any free text you type into the story
- Daily turn usage, for enforcing plan limits
Usage
- App events such as starting a session, completing a turn or reaching an act
- Which features get used, in aggregate
- Device type and operating system version
We do not collect your location, your contacts, or any advertising identifier.
3. Why we use it
- To run the game and generate your story
- To sign you in and apply your subscription entitlements
- To enforce daily turn quotas and plan limits
- To understand how the app is used and improve it
- To send you service messages that matter, such as security or billing notices
- To detect and prevent abuse or fraud
We do not sell your personal data. We do not use it for advertising, and there are no advertising networks or data brokers in the app.
4. Legal bases
Where the GDPR applies, we rely on: performance of a contract for running your account and the game; legitimate interests for security, abuse prevention and product analytics; and consent where we ask for it, such as optional marketing email, which you can withdraw at any time.
5. Who processes it for us
We use a small number of providers, each processing only what their function requires and each bound by a data processing agreement:
- Supabase — account authentication, database and server functions
- RevenueCat — subscription status and entitlements
- Apple and Google — payment processing and app distribution
- Large language model providers — generating narrative content from your gameplay state and inputs
Payment card details are handled entirely by Apple and Google. We never see or store them.
Some providers operate outside the European Economic Area. Where that is the case, transfers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard.
6. Your story text and AI
To write the next turn, your current game state and the action you chose are sent to a language model provider. We do not use your gameplay content to train models, and we ask the same of our providers under contract.
7. How long we keep it
Account and gameplay data are kept for as long as your account exists. When you delete your account, the associated data is removed from our production systems immediately and from backups within 30 days, except where law requires us to keep something longer.
Analytics data is retained in aggregated form that no longer identifies you.
8. Security
- Encrypted connections (HTTPS/TLS) for everything in transit
- Row-level security on the database, so one account cannot read another's data
- Authenticated API access with rate limiting
- No payment details stored on our side at all
No system is perfectly secure. Please use a strong, unique password, or sign in with Apple or Google instead.
9. Your rights
You can ask us to give you a copy of your data, correct it, delete it, hand it over in a portable format, or stop processing it. Write to privacy@unwrittenai.app from the address on your account and we will respond within 30 days.
You can also delete everything yourself, without asking us: in the app, go to Profile → Delete my account. This is permanent and immediate. Note that it does not cancel an active subscription — those live with Apple or Google and must be cancelled in your device settings.
If you are in the EEA or the UK and you think we've handled your data badly, you may complain to your national data protection authority. In France, that is the CNIL.
10. Children
Unwritten AI is not intended for children. We do not knowingly collect personal data from children under the age set out in our Terms of Use, and we delete such data promptly if we discover it.
11. Changes
If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect.