Legal document

Privacy Policy

Last updated: 13 October 2026 · app version 2.17.1

VIDA RPG is an app with no user accounts and no sign-up. Everything you record stays on your device, and the whole app works offline. This policy explains plainly what is stored, where, and what happens in the optional features that talk to the internet: the AI Coach, rewarded ads and in-app purchases.

1. Summary

• There are no accounts, no registration and no passwords. We never ask for your real name, email or phone number.
• Your entire game is stored exclusively on your device. There is no remote database and no VIDA RPG cloud copy; the developer's only server is the AI Coach's, and it does not store what you send it. Since 2.16.0 it also keeps, only if you buy query credits, their balance and purchase records, tied to an anonymous identifier and deleted after 24 months without activity or earlier if you ask (section 12).
• Since 2.15.0 there are rewarded ads from Google AdMob, only if you ask to watch one, in three places: an extra AI Coach query, one more Feat and, since 2.17.0, one more encounter in the adventure. Their component is not loaded until then. Your Health Connect data is never used for advertising. VIDA RPG has no analytics or trackers of its own.
• The camera and photo gallery are used only if you choose to create your avatar from a photo, and the photo is never stored or sent.
• Notifications are local and optional.
• The AI Coach is optional and only sends anything when you tap its button; since 2.15.0 it is handled by a developer server on Cloudflare that does not store your queries. It can be switched off completely. Since 2.16.0 the model is Gemma, by Google, released as an open model and run by Cloudflare, not by Google.
• Purchases — the PRO subscription and the challenge programmes — are optional; they are handled by Google Play (or the App Store) and validated by RevenueCat. The app receives no payment data whatsoever. If you do not buy anything, it connects to no one on this account. Since 2.16.0 query credits can also be bought (section 12).
• Uninstalling the app deletes all data. The developer holds no copy of anything.
• Physical activity is optional: if you turn it on, steps and runs are read from Health Connect when you open the app, never in the background, and they never leave your phone.
• Your character's rank and aura are calculated on your phone from what you log. The app holds no data about other people and does not send yours to any server to compare them.
• Since 2.17.1 you can redeem an access code, if you have been given one. Codes are free. When you redeem one, the code goes to the Coach's server, which does not store it; of the trial code it only counts how many times it has been redeemed, with no data about who (section 11).

2. What data the app stores

Only your game data, and only on your device:

• The name you give your character and the look of its avatar.
• Your active life areas and their experience.
• The habits and vices you log.
• The missions, plans and goals you create, including any text you write yourself.
• Suns, experience, level, streak, shields, milestones, records, challenges, achievements and action history.
• The content of your golden card.
• Your preferences: language, currency symbol, sound, music, vibration, visual effects, game mode and reminders.
• Since 2.6.0, your mentor path: which mentors you have completed and on what date, which ones are open to you, whether a mentor chest is waiting to be collected and whether you have a change of perspective pending; and the lessons you have read. And your affinity profile with the mentors: the answers to the questionnaire and to each change of perspective, with their result, computed inside the phone and never sent to anyone, not even to the AI Coach.
• Since 2.11.0, what you answer your guide in the micro-quest dialogues (Lume or, since 2.12.0, the character you choose as your guide): questions about each area of your life — for example, whether you have a partner, how things are with your family or what weighs on you about money — where you can always choose "I'd rather not say". It is kept only on your phone, together with the last day each area was talked about, so that your guide remembers what you have already shared and does not ask you the same thing again; it is never sent to anyone, not even to the AI Coach, and you can erase it whenever you like in Settings → "What your guide and the Paladin remember" → "Forget my answers". The app also stores which suggestions in your character's speech bubble you have put off, and until when.
• Since 2.12.0, the guide you choose from the game's twelve characters (existing games keep Lume) and what you tell the Paladin when she helps you choose a Feat: only the life area, where you stand today and what you want to achieve, each answer picked from a fixed list — never text you write — with the day you gave it. It is kept only on your phone, it is never sent to anyone, not even to the AI Coach, and it is forgotten with the same button as your answers to your guide: Settings → "What your guide and the Paladin remember" → "Forget my answers".
• Since 2.12.0, also only on your phone and only for the game: the slips you log, day by day, for fourteen days, which pick the weekly boss — your most repeated slip — and decide when the Hedge Witch offers you a guided practice; the boss of the week and when the Witch appeared for each slip; the avenue album; the recent split of your experience across areas and the character class that comes from it, a game trait and not a diagnosis of anything; the low-health warnings you have already been shown, so they are not repeated; the last scene you saw; and how many Feats you have started, which is what the free plan's limit counts. None of this leaves the phone.
• Since 2.17.0, your progress in the adventure, the journey across a map inside the Compass: which screen of the map you are on, which paths you have taken and which have been revealed to you, which encounters you have completed or started, which power objects you have found, how many new encounters you have left and how many extra ones you got today, what you answer to "What would you like to work on today?" — an area of life, what is closest to what is happening to you and how much time you have, each answer chosen from a closed list and always with "I'd rather not say" — and the borrowed technique you have at that moment. It is kept only on your phone, never sent to anyone, not even to the AI Coach, and not used for advertising. It is part of your game: it travels in the export file (section 7) and is erased with "Reset the game" or by uninstalling.
• If you created your avatar from a photo: only two colours from the game's own colour catalogue, the skin tone and hair colour read from it; never the photo (see section 5).
• For the AI Coach: whether you switched it off, how many queries you made today, this week and in total, the date your month of free queries runs from, which suggestions you accepted, how many tokens those queries cost and, since 2.5.0, the coach's last reply, kept on the device so it can be shown to you in full if you activate PRO without repeating the query.
• Since 2.5.0: the free plan's counters (until 2.11.0, how many library missions you had added each week; since 2.12.0, the number of Feats started, described above), which offers you have already been shown, and your challenge programmes: the one in progress with its completed days, the finished ones with their percentage, and the badges earned.
• If you bought something: whether your subscription is active, in which state (active, on trial, in grace period, cancelled or expired), which plan and until when; which challenge programmes you bought; and whether a payment is awaiting confirmation by the store. Nothing else: not the receipt, not the amount, not the payment method.
• Since 2.16.0, if you buy query credits: the receipts for those purchases (date, product, price, credits, order number and the consent you gave before paying) and the last figure of your balance. Since 2.17.0, also a copy of which soundtrack pieces you have unlocked with credits, which does not travel in the export file (the real list is on the server). The anonymous purchase identifier is stored on the phone, outside your save (section 12).
• Since 2.17.1, if you redeem an access code: the signed grant the server returns (its type, when it was issued and its end date). The code you type is not stored. The grant does not travel in the export file or to the AI Coach. Outside the game, in the phone's storage (like the installation ID), the app also keeps the date of the first trial redeemed on that phone and the latest time the phone has seen when checking the grant, so that resetting the game or turning the clock back does not extend the trial; they never leave the phone, resetting the game does not erase them, and uninstalling the app or clearing its data does (section 11).

No identifying data is collected: no real name, no email, no phone number, no device identifiers, no location (the AI Coach's installation ID is random and does not identify the device; section 8). The country code the AI Coach uses is not stored either: it is read from your system settings at the moment of the query and never written to your save file (section 8).

3. Where it is stored and who can see it

Exclusively in the app's private storage on your device, through the system preferences API (SharedPreferences on Android, UserDefaults on iOS). It is not sent to any server. The developer cannot see it, does not receive it and has no way to access it. The only exception, since 2.16.0, is the query credit balance of those who buy credits, which is kept on the AI Coach server (section 12). Since 2.17.0, the list of soundtrack pieces you have unlocked with credits is also kept alongside that balance. Since 2.17.1 the server also keeps, for each trial code, how many times it has been redeemed in total, with no data about who and nothing from your game.

On Android, system backup is disabled for this app, so your data does not leave the device that way either. On iPhone, Apple does not let an app exclude itself from iCloud backup: if you have it enabled, your game is part of your own device's backup, encrypted and inside your Apple account, under Apple's privacy policy. You can exclude VIDA RPG from your phone's iCloud settings.

4. What the app does not do

• It does not create user accounts or profiles.
• It shows no ad you have not asked for: rewarded ads (section 9) only appear when you tap the button to watch one. Up to 2.14 this policy said there would never be any advertising; since 2.15.0, by the developer's decision, that promise is withdrawn. What remains for good is that Health Connect data does not feed advertising.
• It contains no analytics tools of its own. What Google does when it shows you an ad you have asked for is explained in section 9.
• It does not sell data to anyone.
• It does not use the microphone, location, contacts or cross-app tracking.

5. Camera, gallery and the photo avatar

You can create your character's avatar from a photograph. The camera and the gallery are used only at that moment and for nothing else:

• The system asks for the camera permission when you choose to take the photo. You can deny it: you simply will not be able to use this feature, and the rest of the app works the same. Picking a photo from the gallery needs no permission at all: the system photo picker opens and the app receives only the image you choose; since 2.6.0 the package declares no image-reading permission.
• The image is opened in memory so you can frame it, and right then and inside your device it is reduced to a 20 × 20 pixel grid with a palette of about 14 colours. From that grid the app reads the most frequent colour in the hair area and in the face area, and matches each one to the nearest colour in the game's own colour catalogue. No external service, no facial recognition, no biometrics and no artificial intelligence are involved.
• The photograph is never stored or transmitted. It is not copied to any app folder, not saved to the gallery, not uploaded to any server and not shared with anyone. It stays in memory only while you are on the photo screen, and is released when you confirm the avatar or leave that screen.
• The only thing kept in your game is those two colours: your character's skin tone and hair colour, the same ones you could pick by hand in the editor, and the photo cannot be reconstructed from them. The grid is not saved: it is used on that screen and discarded when you leave it.
• Up to version 2.13.0 your game kept that grid. Updating to 2.14.0 deletes it; if it was your avatar's head, the two colours are taken from it first. You can change skin and hair by hand at any time.

6. Notifications

Reminders are local notifications: your own phone generates them from your game, offline and without any server. They are optional: you can turn them on or off in Settings and in the system's notification settings. The app does not know whether you read them and sends nothing to anyone about them.

7. Exporting and importing your game

From Settings you can export your game to a file (including your avatar's appearance, but never a photograph). The app opens the system share sheet so that you choose where to save it or whom to send it to. That file is under your control and your responsibility: the app never sends it anywhere on its own. The import option reads a file you select and replaces the current game. Since 2.17.1, the grant of an access code is not included in the exported file, and importing a game keeps the one already on the phone.

8. The AI Coach

The AI Coach is an optional feature that analyses your goals and progress and proposes concrete adjustments and actions. The entire app works the same without it.

When something is sent

Only when you explicitly invoke it by tapping its button, in one of three places: when refining a goal, when requesting the weekly analysis in Progress, or when asking for a suggestion about a specific mission. The app never sends anything on its own: not in the background, not on launch, not on close.

Where it goes

Since version 2.15.0, to the VIDA RPG coach server, a small program that runs on Cloudflare (Cloudflare, Inc.) and queries an open language model right there through Workers AI: in 2.15, Llama; since 2.16.0, Gemma, by Google, released as an open model and run by Cloudflare, not by Google. Up to 2.14 the query went to Google (Firebase AI Logic and the Gemini model); that has been removed entirely and the app no longer includes Firebase.

• That server passes the query to the model, checks that the answer is in the app's language and returns it to you: it does not store or log what you send or what it replies. Cloudflare logs are switched off on it.
• Cloudflare does not use that content to train models or to improve its services.
• The processing is governed by Cloudflare's data processing agreement, which includes the European Union's standard contractual clauses and its participation in the Data Privacy Framework for transfers outside the European Economic Area.

What is sent

A structured summary of what you are asking about: the goal with its figure, date and committed hours; your experience per day over the last two weeks; how many habits you completed in each area; your streaks; the vices you logged; your active missions with their progress; and the language it should answer in.

Since 2.12.0 the app works out, on the phone, the kind of goal you have — body, fitness, income, saving or debt, project, study, creative, relationships, service to others, inner life, habit or open goal — and its shape (a figure, a habit or milestones), and that kind travels in all three requests. When you refine a goal, the answers to the questions asked for that kind travel too, each one picked from a fixed list and never text you write: the time of day, your previous experience, where the income will come from, whether it is about saving or paying off a debt, whether it means spending less, earning more or both, whether the learning has an exam or is at your own pace, where you stand with it today, whether it depends on you or on other people too, and whether you picture doing it on your own or with a group; and, only for the kinds where they mean something, how well you know the subject, whether you focus on one thing at a time and your motivation, which until 2.11.0 travelled with every goal. The question about physical limitations is neither sent nor stored in your game: it is only there to show you, on that same screen, the reminder to talk it over with a health professional. Since 2.16.0 those questions are asked by the Sage, one at a time; whatever you prefer not to say is not sent, and you can choose the kind of goal yourself instead of the one the app suggests.

Since version 1.9.0 it also sends your device’s country code: two letters, such as ES, GB or PL. It serves one purpose only: if a sign of harm to yourself or to others appears in what you are asking about, the coach has to be able to point you to the right emergency resource. Language is not enough — someone using the app in English may be in any country — and the wrong emergency number is worse than none. That code comes from the regional settings you already have in your system, the same ones that decide how dates are shown to you: it is not geolocation, it does not use GPS and it requires no permission. It is not stored anywhere: it is read at the moment of the query. If it cannot be determined, nothing is sent, and the coach gives 112 as the European emergency number and also refers you to your local one.

What is never sent

• Your real name, your character's name, or any identifying data.
• No photograph, and not your avatar's appearance either.
• The content of your golden card.
• No calendar dates: days travel as "three days ago".
• Your answers to your guide (since 2.11.0), neither the whole block nor a single answer.
• The name of the "Compulsive porn use" slip from the catalogue (since 2.11.0): it travels as a vice of your own, with its category, frequency, impact and how many times you logged it, never with its name.
• Nothing that 2.12.0 keeps on the phone: not what you tell the Paladin, not the answer about physical limitations, not the guide you choose, and not your slips by day, the weekly boss, the Hedge Witch, the album, the split across areas, your character's class or the low-health warnings.
• No other location data: not your time zone, not your city, not coordinates, nothing of the sort. Only the two-letter country code explained above.
• No Health Connect data.

This is verified by an automated test suite that inspects every request and fails if any of that data slips in, and since 2.6.0 the same check runs on your phone before each request is sent: if it finds your name, your avatar, your card, the name of a vice of your own, since 2.11.0 any answer to your guide or, since 2.12.0, what you tell the Paladin, the block of slips by day, the boss, the Witch, the album, the split across areas or the class, or an assistant answer that is not from its fixed list inside the request, the request does not go out.

Since 2.15.0 a random installation ID also travels, in a separate header: the app generates it the first time you send a query, keeps it on the phone outside your game (it does not travel when you export it) and it is not tied to you, to any account or to the device; it serves only to limit how many queries each installation makes. And, as in every HTTPS connection, the server sees the IP address the request comes from: it uses it only to curb abuse. Of the IP and the ID it keeps only, for that day, a digest (fingerprint) of each, salted with the date, which changes every day, together with a counter; the next day it is replaced. That fingerprint is not irreversible: from it, an IPv4 address could be recovered by trying them all; that is why it is kept for that day only. Since 2.16.0, if you pay for a query with a query credit, the anonymous purchase identifier is sent as well (section 12).

How to switch it off

From Settings you can switch the AI Coach off completely. All its entry points disappear and absolutely nothing is sent. While it is on, nothing is sent until you tap its button.

Limits

Since 2.16.0: without paying, two queries a month (in 2.15, one a week); with PRO, one a day; and each extra query, only if you ask for it, by watching a rewarded ad (section 9) or with a query credit (section 12). Above everything there is a cap of twelve queries per day per device. The counter is visible on screen.

The server runs on the free daily quota of Workers AI, shared by the whole community. If it runs out on a given day, the coach says so, does not count the query against you and is back the next day; before offering you an ad for an extra query, the app checks that quota remains, and if none does it offers you no ad. The server also limits queries per installation and per IP address. If that query was going to be paid for with a credit, the credit is not deducted either.

9. Rewarded ads

Where, and only when you ask for them

Since version 2.15.0 there are rewarded ads in three places and nowhere else (the third since 2.17.0), and in all three a button appears that you decide to tap:

• AI Coach: once you have used the queries in your plan, you can watch an ad for one more query, valid that day. Before offering it, the app checks that the coach server has quota left; if it does not, it offers you no ad.
• Feats: from the third Feat on, instead of PRO, an ad opens one new Feat, at most one a week.
• The adventure (since 2.17.0): only once you have used up the new encounters you have, and from that same notice, you can watch an ad for one more encounter, at most two a day. It never appears when you open the map or inside an encounter. It is the same Google component, with the same data and the same consent as in the other two places.

In all three places, instead of the ad you can use a query credit if you have bought one (section 12). An ad gives no EXP or suns. An ad never appears when you open the app, when you mark habits, when you log slips, when you close the day, in low-health alerts, in the rest of the Compass (outside that adventure notice), in timed practices, at checkout or on the screens that show Health Connect data (Inn, Progress, Statistics, the kilometre quests and the death screen).

Who serves them and what it receives

They are served by Google AdMob (in the European Economic Area, Google Ireland Limited). Its component only loads when you ask for the first ad, never when the app opens. To show it, according to the information Google publishes for developers, it collects and sends to Google the IP address (from which an approximate location is inferred), technical data about the phone and the app, how you interact with the ad, diagnostic data and the phone's advertising ID (and the app set ID), to serve and measure ads, for analytics and to prevent fraud, encrypted in transit and under Google's privacy policy.

VIDA RPG does not pass any data from your game to Google: not your name, your goals, your habits, anything from the AI Coach, your progress in the adventure or what you answer in it. Your Health Connect physical activity data is never sent to the ad component or used, in any way, for advertising.

Consent

Before the first ad, if you are in the European Economic Area, the United Kingdom or Switzerland, you will see Google's consent form (Google User Messaging Platform, a certified consent management platform). There you choose whether ads may be personalised. You can change your choice whenever you like in Settings → Ads → Ad privacy, and reset or delete the advertising ID from Android's settings. If you do not complete the form, no ad is shown.

Where there are no ads

In Russia, where Google AdMob does not serve ads, the option does not appear and the app says so; PRO remains available. On iPhone the app shows no ads.

10. Physical activity (Health Connect)

It is optional and off by default. If you turn it on, the app reads three things from Health Connect — Android's health data store: your steps for each day, any distance another app has recorded, and the running-type exercise sessions written by other apps (Strava, Samsung Health, Google Health or another), together with the name of the app that wrote them. Only the last thirty days, only when you open the app and never in the background. VIDA RPG writes nothing to Health Connect.

That data stays on your phone, inside your game, and is used to pay step tiers and runs when each day closes and to calculate your rank, also on the phone. It does not leave the device, is not sent to any server and is not used for advertising or for anything else. The only thing that can travel is your main quest's measurement, if you log it yourself from a run: it goes to the AI Coach by the same route as any measurement you type by hand, described in section 8.

You switch it off in Settings, which stops the reading and erases the days already read. The permission is revoked in Health Connect by removing VIDA RPG from its apps with access; without it, the whole app works exactly the same.

11. Purchases: PRO, the challenge programmes and query credits

The download is free and includes the complete game. VIDA RPG offers an optional subscription, PRO — monthly or yearly, the yearly one with a seven-day free trial — and six challenge programmes that can also be bought individually as a one-off purchase. No purchase unlocks the game, removes ads (they only appear if you ask to watch one) or sells suns for real money; they are earned only by playing. Cosmetics are earned by playing too and are not sold individually: a few exclusive ones come with PRO or at the end of a programme. Since 2.6.0 no mentor or technique is unlocked by level or with suns: each opens by completing the mentor before it, with or without PRO; PRO lets you walk two mentor paths at once. There is no lifetime purchase. Since 2.16.0 there are also query credits, in packs of 5 and 20, bought the same way, through Google Play, and verified by RevenueCat; their balance is explained in section 12.

Who charges you and who checks

• Payment is handled by your phone's store (Google Play or the App Store) with the account you have there. The app does not see, receive or store your payment method: it opens the system purchase sheet and the rest happens outside it. The app receives no payment data whatsoever.
• The party that checks that the purchase is valid and still active is RevenueCat (RevenueCat, Inc.), an in-app purchase intermediary.

What RevenueCat receives

• The purchase receipt issued by the store, to validate it with Google or Apple.
• Which products you have active (the subscription and the programmes) and in what state, and, since 2.16.0, each query credit purchase and its refund, if any.
• The platform (Android or iOS), the app version and the store country.
• What its component adds to every request on its own: the phone's make and model, the operating-system version and the languages configured on the device. That is device data, not yours, and it is used to handle the request and to detect fraud.
• An anonymous identifier it generates itself. The app hands it no identifier of yours: there are no accounts, no email, and no identification function is ever called. If you have bought something, that anonymous identifier is also stored in your Google account's backup (Block Store), so that your purchases can be recognised on a new phone without any data of yours.

It does not receive your name, your game, your programmes, photographs or anything you send to the AI Coach.

When it connects

• If you do not buy and do not open the PRO screen or the query credits screen, the app never connects to RevenueCat at all, neither on launch nor in the background.
• If you open the PRO screen or the query credits screen, the products and their prices are requested from the store, in your currency. Once loaded, its component may refresh what it knows each time the app returns to the foreground during that same session.
• If you have PRO, a purchased programme or a pending payment, on launch the app checks at most once a day that everything is still in order, and RevenueCat notifies the app if anything changes.
• Offline there is no check and you lose nothing: the app keeps the last known state, with its date.

What is stored on your phone and how to cancel

Whether your subscription is active, in which state, which plan and until when; which programmes you have bought; and whether a payment is pending. That block is not included in the exported game file: purchases belong to your store account and are recovered with "Restore purchases", in Settings and on the PRO screen. The subscription renews itself at the end of each period until you cancel it, and it is cancelled from the store itself; you keep PRO until the end of the period you paid for. The free trial turns into a subscription when it ends unless you cancel it first.

RevenueCat's, Google's and Apple's handling of this data is governed by their own privacy policies.

Access codes (since 2.17.1)

In Settings → Code you can redeem an access code, if you have been given one. It is optional and codes are free: they are not sold or exchanged for money, query credits or suns. There are two kinds: the trial code, which gives PRO for 30 days from when it is redeemed on that phone (redeeming it again on the same phone does not extend the trial, unless you uninstall the app or clear its data: the server does not store who redeems, so then only the code's maximum number of redemptions limits it), and the app owner's code, which gives PRO, the six programmes and the adventure with no daily limit on new encounters, with no end date. The code gives no EXP or suns and does not open any mentor or technique.

When you tap "Redeem", the app sends the Coach's server, on Cloudflare, only the code you type, the random installation ID (the same one the AI Coach uses, section 8) and a yes/no saying whether this phone already has access by code or has already finished its trial (if so and it is the trial code, the server neither counts nor signs it); as with any HTTPS connection, the server also sees the IP address. Nothing from your game. If the code is valid, the server returns a signed grant with its type and end date, and the app checks it on the phone with a public key. The server does not store the code, your ID or your IP: to limit attempts (ten a day per IP and five per installation) and to stop anyone trying codes blindly, it keeps only a digest (fingerprint) of the IP and another of the installation ID, which change every day and are deleted the next day; and of the trial code it keeps only how many times it has been redeemed in total, with no data about who. The IP fingerprint is not irreversible: from it, an IPv4 address could be recovered by trying them all; that is why it lasts that day only. The grant is stored on your phone, inside your game, and keeps working offline until its end date; when the trial ends, the plan without PRO comes back (for example, a programme you started stops at its day 4 and the second mentor path stops being active), and nothing is deleted from your game. The legal basis is giving you the access you ask for when you redeem the code, and the legitimate interest in curbing abuse. None of this is shared with third parties or used for advertising. If you do not redeem any code, nothing is sent for this.

12. Query credits

Since 2.16.0 you can buy query credits, if you want to: a credit gets you one more AI Coach query, opens a Feat or, since 2.17.0, gets you one more encounter in the adventure, instead of watching an ad; it also pays the fare for a journey in the adventure (one credit for every 500 suns or part thereof). Payment is taken by Google Play and verified by RevenueCat, like the other purchases. Credits are not earned by playing, give no EXP or suns and cannot be passed to anyone else. They cannot be bought in Russia. Since 2.17.0 a credit can also unlock a piece of the original soundtrack (four pieces, one credit each): it stays unlocked in your credit account (the balance kept on the Coach's server) and comes back with "Recover my credits"; it is lost if that account is deleted or goes 24 months without activity.

What is kept on the Coach server

Because credits can be spent from anywhere in the app, their balance is kept on the AI Coach server, on Cloudflare, tied to the anonymous identifier that RevenueCat generates (not to your name or to any account). That server stores:

• the balance;
• the order number of each credit purchase, with its product, its date and whether it was refunded;
• the last day with activity (a purchase, a credit spent or a recovery), to know when everything is due to be deleted;
• a short list of the latest uses: a random code per use, its date and whether it was for the Coach, for a Feat, for the adventure or, since 2.17.0, for the fare of a journey (in that case, also how many credits), only so that the same one is never deducted twice.
• since 2.17.0, the soundtrack pieces you have unlocked with credits: only which ones, with no date or any other data.

RevenueCat notifies the server of each purchase and each refund of credits with the anonymous identifier, the product and the order number. The server does not store the content of any query. When you spend a credit, the app sends that anonymous identifier to the Coach server. If you spend it in the adventure, only that identifier, the random installation identifier, the code of that use and the reason aventura are sent: nothing from your game or from the adventure. If you pay a journey's fare with credits, the same is sent with the reason viaje and the number of credits (1 to 3). A query paid for with a credit sends the Coach exactly the same as any other query (section 8); nothing else is sent. If you unlock a soundtrack piece, only the anonymous purchase identifier, the random installation ID and which piece it is are sent. Neither the piece nor anything about the music goes into AI Coach queries.

How long it is kept and how it is deleted

This server data is deleted automatically after 24 months without activity, that is, with no purchase, no credit spent and no recovery in that time. Before then, you can ask for it to be deleted: write to vidarpgapp@gmail.com with the order number from your receipt. When it is deleted, any credits you have not spent are lost. Since 2.17.0, the soundtrack pieces unlocked with credits are deleted along with them, and are lost as well.

Recover my credits

If you reinstall the app, the new installation gets a different anonymous purchase identifier and the balance stays tied to the previous one. To recover it, go to Settings → Query credits → "Recover my credits" and type the Google Play order number (it starts with GPA. and appears on the receipt in the app and on the receipt Google sends you by email). The app sends that order number, the new installation's anonymous purchase identifier and the random installation ID, the same one that goes with every query (section 8), to the Coach server. The server moves the unspent balance from the previous identifier to the new one, only once per order, and reveals nothing else. Attempts are limited to five per day per installation; to count them, the server keeps only a digest (fingerprint) of the random installation ID, salted with the date; the fingerprint changes every day and is deleted the following day. Since 2.17.0, the soundtrack pieces you had unlocked also move to the new identifier along with the balance, even if there is no balance left to move.

What is kept on your phone

In your save, the receipts for your credit purchases (date, product, price, credits, order number and the consent you gave before paying) and the last figure of your balance. Since 2.17.0, also a copy of which soundtrack pieces you have unlocked with credits, which does not travel in the export file (the real list is on the server). The anonymous identifier is stored on the phone, outside your save. For any question about this data, or to ask for a refund of unspent credits (the conditions are in the Terms of Use), write to vidarpgapp@gmail.com with the order number from your receipt.

13. Home-screen widget (Android)

If you place the widget, the app keeps in its own private storage just enough to draw it: the day's rings, your streak count and a small image of your drawn character (never a photograph). It requests no permissions, uses no connection and never leaves the device.

14. Permissions

• Notifications: the only permission you are asked for up front, once, when you finish creating your character. You can deny it, and reminders can be switched off whenever you like from Settings or from the system.
• Camera: only to take the photo the avatar is created from, requested at that moment, and you can deny it. The camera is declared as not required. Picking a photo from the gallery needs no permission: since 2.6.0 the package declares no image-reading permission.
• Internet: declared by the engine the app runs on. All resources are bundled; the only possible network requests are those of the AI Coach, those of the ads you ask for and those of the subscription, and only when you trigger them. Since 2.16.0, also those of query credits, when you buy, spend or recover them. Since 2.17.1, also the one to redeem an access code, if you use it.
• Advertising ID (since 2.15.0): added by Google's ad component, together with three technical permissions for Android's advertising APIs. They do not ask for your approval, they are only used if you ask for an ad, and the ID is reset or deleted from Android's settings.
• Vibration, plus the technical permissions the system uses to reschedule reminders after a reboot and to open the store's purchase sheet. None of them ask for your approval or access your data.
• Health Connect: three read permissions — steps, distance and exercise sessions — requested only when you turn on physical activity, on the system's own screen. None for background access or for extended history, and the app writes nothing to Health Connect.
• Original soundtrack (Android, since 2.17.0): it comes in a separate pack that is downloaded by Google Play, just as the app itself is, and not by a VIDA RPG server: the app only asks the system whether the pack is ready and sends nothing of its own for it. For that download, Google Play's component adds two technical foreground service permissions, which do not ask for your approval or access your data. Without the pack, and on iPhone, you hear the music generated on the phone itself.

The app does not request the microphone, location, contacts, cross-app tracking, gallery reading, external storage writing or exact alarms, on either platform.

15. Your rights (GDPR)

The European Union's General Data Protection Regulation grants you the rights of access, rectification, erasure, restriction, portability and objection over your personal data. In VIDA RPG, the developer's only server, the AI Coach server on Cloudflare, does not keep game data or the content of queries. For people who buy query credits, it only keeps the balance and the purchase records tied to the anonymous purchase identifier (pseudonymous data), which are deleted after 24 months without activity or earlier if you ask (section 12). So, except for credits, those rights are exercised on your own device:

• Access and portability: the export option in Settings gives you all your data in a readable file.
• Rectification: everything you wrote can be edited inside the app.
• Erasure: the "Reset the game" button in Settings erases all progress, and uninstalling the app deletes all data.
• Query credits (since 2.16.0): their balance and purchases are on the Coach server, tied to an anonymous identifier, not to your name. You can ask for them to be deleted, or make any other request about them, by writing to the contact below with the order number from your receipt; otherwise they are deleted automatically after 24 months without activity (section 12).

For any privacy enquiry, write to vidarpgapp@gmail.com. If you believe your rights are not being respected, you may complain to the Spanish Data Protection Agency (AEPD) or to the supervisory authority in your country.

16. Children

VIDA RPG is intended for adults and is not aimed at minors. It collects no identifying data from anyone, and ads, if you ask for them, are requested from Google without any data from your game. If you are a parent or guardian and believe a child has used the app, remember that all of their data is on the device and is removed by uninstalling it.

17. Uninstalling the app

Uninstalling VIDA RPG deletes all game data. The developer holds no copy whatsoever, so there is nothing else to delete or to request. The only remaining files would be those you exported yourself and saved wherever you chose. The only exception is the query credit balance, if you bought any: it stays on the Coach server, tied to the anonymous purchase identifier, until you ask for its deletion or 24 months pass without activity, and if you install the app again you can recover it with the order number (section 12). If you unlocked soundtrack pieces with credits, they stay there with the balance and come back with it when you recover it.

18. Changes to this policy

If data handling changes in the future, this policy will be updated, published at this same address and shown inside the app (More → Privacy), in all seven languages.

19. Controller

Alex Vida, independent developer, Spain.
Contact: vidarpgapp@gmail.com