Privacy Policy

Privacy Policy
Last updated: May 6, 2026

Role Play World collects only the information needed to run accounts, social features, safety tools, payments, messaging, notifications, and app performance.

Information you give us:
- Account details such as name, username, email address, and password.
- Profile details such as bio, avatar, banner, work, location, website, badges, privacy settings, and notification preferences.
- Content you create, including posts, comments, reactions, reposts, bookmarks, cribs, stories, messages, reports, sponsorship submissions, bug reports, and media uploads.
- Payment-related records for memberships, boosts, and sponsorships. Payments are handled through external providers such as Polar or RevenueCat; Role Play World stores local records like plan, amount, status, checkout reference, and expiry.

Information collected automatically:
- IP address, device ID, platform, user agent, login/session activity, country or city hints from network headers or locale, and device tokens for push notifications.
- Activity logs for security and account history, including actions such as login, logout, registration, and account activity.
- Feed and suggestion signals such as follows, views, reactions, bookmarks, blocks, reports, and suggestion feedback.

How we use information:
- To create and secure accounts.
- To show profiles, posts, messages, cribs, stories, notifications, search, suggestions, analytics, and creator tools.
- To detect abuse, enforce bans, review reports, prevent spam, and moderate harmful content.
- To process payments, memberships, boosts, sponsorships, and related support.
- To send push notifications and maintain device/session controls.
- To improve recommendations, feed ranking, safety systems, and app reliability.

Messages and encryption:
Direct chats may support end-to-end encryption when enabled by both users. Encrypted message bodies are stored in encrypted form with related encryption metadata. Group chats and public chat are not treated as end-to-end encrypted. Message metadata such as sender, recipient, conversation, timestamps, delivery/read status, attachments, and moderation/security records may still be stored.

Content moderation:
Some text and images may be sent to automated moderation services when moderation is enabled. Moderation results may include input previews, categories, model responses, and whether content was flagged. This is used for safety enforcement and admin review.

Third-party services:
Role Play World may share necessary data with service providers, including:
- OpenAI, for content moderation when enabled.
- Polar, for web membership and sponsorship checkout.
- RevenueCat, Apple, or Google, for mobile in-app purchases.
- Facebook, if you choose Facebook login.
- Push notification providers such as Expo, FCM, or APNs.
- Hosting, storage, analytics, and infrastructure providers needed to operate the service.
- AdMob, if mobile ads are enabled.

Cookies and local storage:
The web app uses cookies and sessions for login, referrals, security, and preferences. The mobile app stores authentication tokens, device IDs, cached screen data, bookmark cache, rating prompts, and encryption keys or key material in secure/local device storage where supported.

What is public:
Your public profile, username, display name, avatar, banner, bio, public posts, reactions, reposts, public chat messages, public crib activity, sponsor display information, and other public interactions may be visible to other users. Private-account and blocking features limit visibility, but they do not remove all system records.

Account controls:
You can update profile details, privacy settings, notification preferences, blocked users, sessions, passwords, recovery settings, and some security settings from your account settings. You can delete your account through settings where available. Some records may be retained when needed for security, abuse prevention, legal compliance, payment records, backups, or dispute handling.

Data retention:
We keep account and content data while your account is active. We may retain logs, payment records, moderation records, ban records, device/IP history, reports, and security records for as long as needed to operate the service, protect users, investigate abuse, comply with law, and resolve disputes.

Security:
We use authentication, hashed passwords, session controls, device tracking, trusted-device tools, private-account controls, blocking, moderation, and encryption features to protect the service. No system is perfectly secure, so users should keep passwords private and report suspicious activity.

Children:
Role Play World is not intended for children below the minimum age required by applicable law. Users who are not old enough to consent to online services should not create an account.

Contact:
For privacy questions, account requests, or safety concerns, contact Role Play World through the app’s support or report channels.