Privacy Policy - Polyphony

Privacy Policy for Polyphony

Last Updated: August 7, 2026

Polyphony is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application (the "App").

1. Information We Collect

A. User-Generated Content (Local)

By default, the majority of your data is stored exclusively on your device. This includes:

• Narratives and Stories: Your chat logs, story progression, and world states.

• Lore and Characters: Descriptions of characters ("Neurons"), items, and world history.

• Personal Settings: App themes, fonts, and interaction preferences.

B. Anonymous Account Data (Optional Cloud Features)

If you choose to use our cloud-enabled features (such as sharing or downloading worlds), we use Anonymous Authentication.

• No Personal Identity: We do not collect your name, email address, or any other personally identifying information.

• Unique Identifier (UID): An anonymous, randomly generated ID is assigned to your device. This ID is used exclusively to:

  • Manage Quotas: Enforce daily limits on uploads and downloads to prevent service abuse.

  • Ownership Control: Allow you to manage or "Revoke" (delete) content you have previously uploaded to the cloud.

  • Subscription Validation: Link your anonymous ID to your premium status (via RevenueCat) to unlock higher usage limits.

• Data Persistence: If you uninstall the App or clear its storage, this anonymous ID is permanently lost, and you will lose the ability to manage your previously shared cloud content.

C. Sensitive Credentials (BYOK)

As a "Bring Your Own Key" application, you may provide API keys for third-party Large Language Model (LLM) providers (e.g., OpenAI, DeepSeek). These keys are:

• Stored exclusively on your device using industry-standard encryption (EncryptedSharedPreferences / Android MasterKey / AES-256).

• Never sent to Polyphony's servers. They are transmitted directly from your device to the respective third-party AI provider to fulfill your requests.

D. Purchase Information

We use RevenueCat to manage subscriptions and premium features. We do not collect, process, or store your credit card or financial details; these are handled entirely by the Google Play Store. We only receive confirmation of your subscription status, entitlement status, and an anonymous transaction identifier.

2. How We Use Your Information

• To Provide Services: Enabling AI storytelling, character interactions, and local world-building.

• To Facilitate Sharing: Allowing users to discover, publish, and download community-created worlds.

• To Improve Performance: Using local on-device inference (e.g., DJL/ONNX) to process data efficiently without cloud dependencies.

• Safety and Moderation: Reviewing publicly reported shared content to maintain a safe community environment. Private local narratives are never reviewed or monitored.

3. Third-Party Service Providers

The App integrates with the following third-party services:

• AI Providers (User Configured): Depending on your settings, your prompt inputs are sent directly to providers like OpenAI or DeepSeek. Their handling of your data is governed by their respective privacy policies.

• Google Firebase: Used for anonymous authentication, cloud database hosting, and file storage for publicly shared assets. Firebase may collect basic diagnostic telemetry (such as IP addresses) necessary for network connections.

• RevenueCat: Used for processing and validating subscription status and anonymous purchase validation.

4. Data Retention and Deletion

• Local Recycle Bin: Deleted narratives are kept in a local "Recycle Bin" on your device for 14 days, after which they are permanently purged.

• Manual Local Deletion: You can delete your local data at any time by clearing the App's storage via your device settings or using in-app data wipe features.

• Cloud Deletion: If you wish to delete your publicly shared worlds, you may revoke them directly within the App or by contacting us.

5. Security

We implement robust security measures to protect your data:

• Storage Encryption: Sensitive settings and local credentials are secured using Android's encrypted storage frameworks.

• Secure Transport: All network communications with cloud services and AI providers occur over secure HTTPS/TLS protocols.

• No Central Logging: We do not log, track, or inspect your private story interactions on our servers.

6. Children's Privacy

Polyphony is not intended for children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children.

7. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any updates by posting the revised policy within the App and updating the "Last Updated" date at the top of this document.

8. Contact Us

If you have questions or concerns regarding this Privacy Policy, please contact us at:
hello.astrokit@gmail.com