Privacy Policy

1. Introduction

Reality Engine Corp. ("we," "our," or "us") operates Lifespans ("Lifespans," "the Service"). This Privacy Policy explains what personal data we collect, how we use it, when we share it, how long we keep it, and what choices and rights you have.

Lifespans is an 18+ service. Users must confirm they are at least 18 years old before playing.

2. Data We Collect

• Account data: email address, display name, encrypted authentication credentials managed through our authentication provider, subscription status, and account preferences.
• Gameplay data: characters, chronicle entries, choices, stats, milestones, NPCs, chat conversations, moments, stories, comments, votes, exports, and other game-state records tied to your account.
• Public content: stories, moments, comments, and related profile display data when you choose to make content public.
• Payment and subscription records: subscription status, customer identifiers, billing status, renewal dates, and related transaction metadata. We do not store raw payment card numbers.
• Technical and usage data: IP address, device/browser information, session identifiers, security and rate-limit logs, and limited analytics data.
• Communications: support requests, unsubscribe preferences, and any messages you send us directly.
• Moderation and abuse-prevention data: content-filter matches, moderation audit records, and account-safety signals used to prevent abuse of the Service.

3. How We Use Your Data and Our Legal Bases

Depending on the context, we rely on one or more of the following legal bases: performance of a contract, legitimate interests, consent, and legal obligations.

• To provide the game and your account — including login, saving progress, generating gameplay, syncing subscriptions, exporting data, and restoring your account. Legal basis: contract.
• To generate AI-driven content — including narratives, outcomes, teasers, summaries, and NPC chat responses using the game context associated with your life. Legal basis: contract.
• To operate subscriptions and billing — including access control, checkout, renewals, customer portal access, and billing support. Legal basis: contract and legal obligation.
• To prevent fraud, abuse, and misuse — including rate limiting, moderation, bot prevention, safety enforcement, and account sanctions where required. Legal basis: legitimate interests.
• To analyze and improve the Service — including aggregate site traffic and product-performance analysis. For users in the EU/EEA/UK, optional analytics are enabled only if you opt in. Legal basis: legitimate interests outside those regions, and consent where we request it.
• To send product updates or marketing emails — only where you have opted in. Legal basis: consent.
• To comply with law, tax, accounting, and enforcement obligations — including keeping required billing and business records. Legal basis: legal obligation.

4. Public Stories, Moments, and Community Features

Lifespans allows you to make certain content public, including stories and moments. When you publish content, your public display name, character information, and the content you chose to share may be visible to other users and visitors.

You can manage published stories from your account tools and related game pages. If you delete your account, your public stories and moments are deleted with the rest of your account data, except where limited records must be retained for legal compliance.

5. Processors and Service Providers

We use service providers to run Lifespans. These providers process personal data on our behalf or receive data as independent service providers where necessary for their role.

• Supabase — authentication, database, storage, and account-related infrastructure.
• Vercel — application hosting, delivery, and limited analytics/performance tooling.
• xAI — AI generation for gameplay content in the web app. We send gameplay context needed to generate output; we do not intentionally send your payment card data.
• LemonSqueezy — payment processing, subscription management, and billing/customer portal services.
• Resend — transactional and product email delivery.

We do not sell your personal data.

6. Cookies, Local Storage, and Analytics

Lifespans uses cookies and local browser storage for authentication, region detection, security, saved preferences, display settings, consent state, and similar core product functions.

We also use limited analytics and performance tooling. For users in the EU/EEA/UK, optional analytics are turned on only if you opt in. For users outside those regions, analytics may run under our legitimate interests in understanding site traffic and product performance.

You can change analytics preferences from your account tools where available.

7. Data Retention

• Account and gameplay data: retained until you delete your account or we no longer need it to provide the Service.
• Public stories, moments, comments, and related community content: retained while your account remains active or until you remove them, subject to account deletion and legal retention needs.
• Moderation, security, and abuse-prevention records: retained as long as reasonably necessary to protect the Service and enforce our rules.
• Billing and tax records: retained as required by applicable accounting, tax, and legal obligations, even if you delete your account.
• Backups: may persist for a limited period before rotating out.

8. Your Rights and Choices

Depending on your location, you may have rights including access, correction, deletion, portability, restriction, objection, and withdrawal of consent where consent is the legal basis.

• Access and portability: you can request or download a copy of your account data in a machine-readable format.
• Deletion: you can request deletion of your account. This removes your account data and public stories and moments, subject to limited legal retention requirements such as billing and tax records.
• Marketing: you can unsubscribe from marketing emails at any time.
• Analytics consent: where consent is required, you can grant or withdraw it.

To exercise rights not already available in the product, contact us at admin@lifespans.app.

9. International Transfers

Lifespans and its service providers may process data in the United States and other countries outside your home jurisdiction. Where required, we rely on appropriate safeguards for international transfers, such as contractual protections including Standard Contractual Clauses or other valid transfer mechanisms.

10. Security

We use technical and organizational measures intended to protect personal data against unauthorized access, loss, misuse, or alteration. No system is perfectly secure, and we cannot guarantee absolute security.

11. Children's Privacy

Lifespans is not intended for anyone under 18. If we learn that we collected personal data from someone under 18, we will take steps to remove it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date on this page. If we make material changes, we may also provide additional notice where appropriate.

13. Contact

If you have questions about this Privacy Policy or privacy requests that are not yet available inside the product, contact admin@lifespans.app.