Legal
Privacy Policy
This Privacy Policy explains how Spawnzy ("Spawnzy", "we", "us" or "our") handles personal data when you use the Spawnzy services: our website, our game engine and our apps (together, the "Services"), and what rights you have. Where the GDPR or the UK GDPR applies, we are the data controller.
1. The data we collect
- Account data: your email address and your username. If you sign in with Google or Apple, we receive the name your provider shares with us. Your name is private and is never shown to other users.
- Creation data: the prompts and options you submit to create or change a game, and the games, titles and descriptions generated from them.
- Activity data: games you play and publish, scores, likes, follows, levels and badges, and reports and blocks you make.
- Device data: a push notification token and your device platform (iOS or Android), if you allow notifications.
- App usage data: which screens of the app you open and what you do there (for example, starting a game or a create), with a random app ID, your device model and operating system, used to count how many people use the app and come back. It is not linked to your name, email or username.
- Technical data: IP address, device and browser type, and request logs created when you use the Services, and crash reports from the app (what failed and on which device and app version, without your name or email).
- Purchase data: if you subscribe to Spawnzy Plus, the transaction and subscription identifiers Apple or Google give us, the product, the store, and the subscription's status and dates (start, renewal, expiry, cancellation or refund). Apple or Google take the payment: we never receive your card or other payment details.
- Messages: what you send us by email.
This website uses no cookies, no analytics and no advertising trackers. We also use aggregated data, such as counts and costs, that does not identify you.
2. How we collect it
- From you: when you create an account, submit a prompt, play, publish or write to us.
- Automatically: through server logs as you use the Services.
- From sign-in providers: Google or Apple, if you choose to sign in with them.
- From app stores: Apple (App Store) or Google (Google Play), about your Plus subscription when you buy, renew, cancel or get a refund.
3. How we use it
- To provide the Services (performance of a contract): your account, generating and running your games, leaderboards and notifications.
- To keep the Services safe (legitimate interests): every prompt and every generated game is checked automatically for safety, and reported content may be reviewed by our team.
- To run and improve the Services (legitimate interests): measuring the quality, speed and cost of game generation, fixing problems and preventing abuse.
- App usage analytics (legitimate interests): counting daily players, how many come back and which features are used, to decide what to improve.
- To provide Spawnzy Plus (performance of a contract): checking your purchase with Apple or Google, keeping your subscription status up to date and giving you its benefits while it is active, including the Plus badge next to your name unless you hide it. We keep purchase records for accounting (legal obligation).
- Push notifications (consent): sent only if you allow them on your device. You can turn them off at any time.
- Legal compliance: where a law or regulation requires it.
4. AI processing
Your prompts, options and the game code generated from them are processed by Anthropic, with its Claude models, to create, check and moderate games. The app asks for your agreement before your first create. Under its commercial terms, Anthropic does not train its models on this data. Please do not put personal information in a prompt. Generated games run inside a sandbox with no internet access and no access to your personal data.
5. Who we share it with
- Service providers who process data for us under contract:
- Amazon Web Services: hosting, storage, game files and our emails;
- Supabase: sign-in and database;
- Anthropic: creating, checking and moderating games from your prompts;
- Google (Firebase): app usage analytics and push notification delivery on Android;
- Apple: push notification delivery on iOS;
- Expo: sending push notifications to Apple and Google;
- Sentry: crash reports from the app;
- Cloudflare: a security check that keeps bots out of sign-in;
- Google and Apple: sign-in, if you choose to use them.
- App stores: Apple (App Store) and Google (Google Play) sell Spawnzy Plus and take the payment under their own terms and privacy policies, and tell us the subscription's status.
- Other users: your username, the games you publish, your scores, likes, follows and level are visible to others in the Services, and so is your Plus badge if you subscribe, unless you hide it in the app's Settings.
- Legal authorities: where the law requires it or to protect our rights and our users.
- Business transfers: a buyer or successor if we sell or merge all or part of our business, under the same protections.
We do not sell or rent your personal data, and we do not share it for advertising.
6. International transfers
Our servers and database are in the United States. Where data leaves the European Economic Area or the UK, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.
7. Security, retention and deletion
- Security: data is encrypted in transit, and access to production systems is restricted and protected.
- Retention: we keep account data while your account is open. Server logs are kept for 30 days and database backups for 14 days. App usage analytics is kept for at most 14 months. Purchase records are kept as long as accounting and tax law requires.
- Deleting your account: you can delete your account in the app (Settings, Delete account), or ask us to without the app (how). We then erase your email and sign-in identity, your name, follows, likes, push tokens, notifications and progress, and the prompts behind your games. Games you published and your scores stay available under an anonymous name, with the technical game description the engine derived from each prompt. Records we must keep for safety, moderation and accounting (reports, moderation results, AI usage and purchase records) are kept without your profile details. Backups expire within 14 days. Deleting your account does not cancel a Plus subscription: cancel it in your App Store or Google Play account settings first.
8. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- have your data erased;
- object to or restrict our processing;
- receive your data in a portable format;
- withdraw consent at any time, where we rely on consent;
- complain to your local data protection authority.
To use these rights, email dev@spawnzy.com. We answer within the time the law requires.
9. Children
The Services are not designed for children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
10. Changes to this policy
We may update this policy. We will change the effective date above and, for significant changes, tell you in the Services before they apply.
11. Contact
Questions or requests about your data: email dev@spawnzy.com.