Privacy Policy
BEFALL is a story you type your own lines into, so what happens to those lines matters. This draft explains what we collect, exactly how your input is processed, and the lines we won’t cross.
1. What this policy covers
This policy covers the BEFALL mobile app and the BEFALL website (together, the “Service”), operated by [LEGAL ENTITY NAME] (“we”, “us”), [REGISTERED MAILING ADDRESS]. BEFALL is an interactive fiction service for ages 16 and up, offered in the United States. Questions go to support@befall.today.
2. Notice at collection
This is the summary California and other state laws require: the categories of personal information we collect, why, and how long we keep them. Details follow in the rest of the policy.
| Category | Examples | Why we collect it | How long we keep it |
|---|---|---|---|
| Identifiers | Email address, account ID, push subscription, IP address | Create and secure your account, sync your progress, prevent abuse | While your account is active |
| Sensitive personal information | Birth year (age gate only); the free-input lines you type in episodes | Enforce the 16+ gate; generate the characters' replies within the story. Never used to infer characteristics about you or for advertising | While your account is active |
| Commercial information | Coin balance, episode unlock history, purchase history | Operate coins and episode access, support | While active, plus up to 7 years for tax and accounting records |
| Internet or network activity | Feature usage, error and diagnostic logs | Keep the Service working, apply limits, debug failures | Logs up to 90 days; aggregate counters retained de-identified |
| Preferences you set | Notification opt-in | Send the new-episode notifications you asked for, and nothing else | While your account is active |
| Moderation records | Rule category and a one-way hash of a short excerpt — not the readable text | Enforce content rules and audit the moderation system | Up to 2 years, de-identified; survives account deletion in hashed form |
We collect this information directly from you, automatically as you use the Service, and — once purchases open — from app stores and our purchase infrastructure for billing status. We do not buy personal information from data brokers, and we do not use advertising or cross-site tracking technologies on the website.
If you play on the web without an account, your progress and coin balance are stored locally on your device, not on our servers, until you sign in.
3. How we process your information
- Generating replies. When you make a choice or type a line, relevant story context (the episode script state, your recent inputs, and your story state for that series) is sent to our AI model providers to generate the characters’ replies. These providers act as our service providers under contract and may not use your data for their own purposes, including model training.
- Story state. Your progress is stored per user and series — choices made, episodes unlocked, endings earned — so the story can remember what you did.
- Moderation. Every free-input line passes through automated moderation before the AI sees it, and generated output is screened too. When a rule triggers, we log a moderation event containing the category and a one-way hash of a short excerpt (not the readable text of your line).
- Billing and support. To operate coins and episode access, respond to you, and keep the Service running.
- Notifications. If you opt in, we send content-fact notifications — a new episode exists — and nothing engineered for emotional urgency. You can turn them off anytime.
Automated screening decides whether a line is deflected. It does not produce decisions with legal or similarly significant effects about you. If repeated violations lead to account suspension, a person reviews it first, and you can contest it at support@befall.today.
4. What we never do
- We do not train AI models on the lines you type. Your input is used to generate replies to you, not as training data for our models or anyone else’s, and our contracts with model providers prohibit them from training on your data.
- We do not sell or share your personal information as those terms are defined by the CCPA/CPRA and comparable state laws, we have not done so in the preceding 12 months, and we do not use your story input for advertising or targeted advertising.
- We do not read your conversations except where strictly necessary: automated moderation and safety systems, aggregate analytics that do not expose content, a specific report you file that asks us to review a line, or a narrow investigation of fraud or abuse or a credible threat to someone’s safety.
5. Who we share information with
Service providers acting on our instructions and under contract: Supabase (cloud database and authentication, hosted in the US), Anthropic (AI model provider for reply generation), Vercel (web hosting), app stores and RevenueCat (purchase infrastructure, once purchases are live), and push notification delivery. We may also disclose information if required by law or valid legal process, to protect safety, or as part of a merger, acquisition, or sale of assets — and we will tell you before your data becomes subject to a different privacy policy.
6. Retention
Retention periods by category are in the table in section 2. In general, account data and story state are kept while your account is active; moderation records are kept in hashed, de-identified form for auditing; billing records are kept as long as tax law requires. When you delete your account, personal data is removed as described below, and residual copies in encrypted backups are purged on a rolling basis within 30 days.
7. Deleting your data
In-app account deletion is coming; until it ships, email support@befall.today from your account address and we will delete your account. Deletion permanently removes your profile, story progress, endings, coin balances, and push subscriptions. This cannot be undone, and unused coins are forfeited.
If you played on the web without signing in, that progress lives only in your browser’s local storage — clear the site’s browsing data on your device to erase it.
8. Your privacy rights
Depending on where you live, you have some or all of the following rights. We honor them for every US user regardless of state, because drawing a line by geography would be worse than just doing it for everyone.
- Know and access what personal information we collect, use, and disclose (this policy is that disclosure), and get a portable copy.
- Delete your personal information (see section 7).
- Correct inaccurate personal information — contact us and we will fix it.
- Opt out of sale, sharing, or targeted advertising — we do none of these, so there is nothing to opt out of, and we honor the right regardless.
- Limit use of sensitive personal information — we use your birth year only for the age gate and the lines you type only to run the story, which is already the narrowest permitted use.
- Opt out of profiling that produces legal or similarly significant effects — we do not do this.
- Appeal a decision we make about your request (required in Virginia, Colorado, Connecticut, and elsewhere): reply to our response and a different person will review it within 45 days.
- Non-discrimination for exercising any of these rights.
These rights are recognized under the California CCPA/CPRA, and under the comprehensive privacy laws of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states as they take effect.
How to exercise them. Email support@befall.today. We verify requests against your account email and respond within 45 days (extendable once by 45 more, with notice). Authorized agents may submit requests with proof of authorization.
Global Privacy Control. We honor GPC and similar browser opt-out preference signals on our website. Because we do not sell or share personal information, the signal does not change how we treat your data — but we recognize it rather than ignoring it.
Shine the Light. California Civil Code §1798.83 lets residents request details about disclosures to third parties for their direct marketing. We make no such disclosures.
9. Age requirement
BEFALL is for ages 16 and up, and some content may be unsuitable for anyone under 16. We ask for your birth year at the age gate and use it for nothing else. We do not knowingly collect personal information from anyone under 16; if we learn an account belongs to someone under 16, we delete the account and its data. If you believe someone under 16 has created an account, tell us at support@befall.today.
10. Security
Data is encrypted in transit, access is scoped per-user at the database layer (row-level security), and story processing runs through service credentials that clients never hold. No system is perfectly secure; if a breach affects you, we will notify you as required by law.
11. Where your data is processed
The Service is operated in the United States, and your information is processed and stored there. If you access it from elsewhere, you are sending your information to the US.
12. Changes to this policy
We’ll post changes here and, for material changes, notify you in the app before they take effect. This document is a draft and will be finalized following legal review before launch. See also our Terms of Service.
13. Contact
[LEGAL ENTITY NAME]
[REGISTERED MAILING ADDRESS]
support@befall.today