Privacy Policy

§1Introduction

This Privacy Policy explains how Cyc ("we," "us," or "our") collects, uses, and protects information when you use Cyc (the "App"). By using the App, you agree to the practices described here.

§2Information We Collect

Information you provide:

• Account information: your email address and password (passwords are stored in encrypted/hashed form by our authentication provider, not in plain text).
• Date of birth: collected once at sign-up to confirm you are at least 13. We store it to enforce our minimum-age requirement. It is never shown to other members.
• Profile information: the character or crew name and screen name you choose, and anything you add to your profile, such as pronouns, a line, profile photos, prompt answers, and your avatar.
• User Content: posts ("dispatches") and the place in the theatre you tag them with, photos, comments, reactions, answers to the daily prompt, votes in the end-of-run wrap, and gifts and the notes attached to them.
• Asides: private messages and photos you send to other members. Asides are hidden from everyone else in the company, but they are stored on our servers and are not end-to-end encrypted.
• Reports and blocks: who you report or block, and any reason or note you add.

Information collected automatically:

• Basic technical data necessary to operate the App, such as timestamps, which show you belong to, and what you have already seen, so the App can mark new posts and messages.
• A push notification token, if you allow notifications, so we can alert you to new posts and messages. It is removed when you sign out.
• Crash and error reports: when the App crashes or something fails, a report of what went wrong, with your device model, operating system and App version. These reports are not linked to your name or email.

Purchases:

Gift purchases are made through Apple. We never see your payment card or billing details. We receive a record of what was bought, linked to your account, so the gifts can be delivered.

The App does not use your device's location, and we do not use third-party advertising trackers or sell your data.

§3How We Use Your Information

We use your information to: (a) create and manage your account; (b) operate and display the production feed, asides and the rest of the App; (c) associate your posts with your chosen name and place; (d) send the push notifications you allow; (e) deliver the gifts you buy or receive; (f) review reports and keep the App safe, including enforcing our minimum age and our rules on objectionable content; (g) find and fix crashes and errors; and (h) respond to your requests or support needs.

§4How Your Information Is Stored

Account data and User Content are stored using Supabase, a third-party backend and database provider, on our behalf. Data is transmitted over encrypted connections. A copy of the database is backed up each week in encrypted form. While we take reasonable measures to protect your information, no system is completely secure, and we cannot guarantee absolute security.

§5Sharing of Information

We do not sell your personal information. Your information may be shared only: (a) within the App, as intended (e.g., your dispatches and chosen name are visible to other members of your production's company, and an aside is visible to the people in it); (b) with service providers who help us operate the App, listed in the Third-Party Services section, each bound by their own privacy obligations; or (c) if required by law, legal process, or to protect the rights and safety of users.

When you report something, the reported content, the names of the person reported and the person reporting, and any note you add are sent by email to the person who reviews reports for us. The person you report is not told who reported them.

§6Visibility of Your Content

The App is a private, production-specific space. Content you post is visible to other members of your production's company. Asides are visible only to the members in them. Choose what you share accordingly. We are not responsible for how other members use or share content posted within the App.

§7Data Retention

We retain your information for as long as your account is active or as needed to operate the App. You may delete your account at any time in the App, or request deletion by contacting us at the address in the Contact section.

When you delete your account, your account, profile and content are removed from the App immediately, and the photos you uploaded are removed from storage within a day. Photos you delete from a post are removed within a few days. Gifts you sent stay with the people who received them, no longer linked to you. Copies can remain in our encrypted weekly backups for up to 90 days before those backups expire. Apple and RevenueCat keep their own records of purchases under their own policies.

§8Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal information, or to object to certain processing. To exercise these rights, contact us at the address in the Contact section. We will respond within a reasonable timeframe.

§9Children's Privacy

The App is intended for people aged 13 and older (or the minimum age of digital consent in your jurisdiction). At sign-up we ask for your date of birth and block account creation for anyone under 13. We do not knowingly collect personal information from children under this age. If we learn we have done so, we will delete it.

§10Third-Party Services

The App relies on these providers to function. Each handles data under its own privacy policy, which we encourage you to review.

• Supabase: our database, file storage and sign-in.
• Apple: payment for purchases, and delivery of push notifications.
• Expo: sending push notifications to your device.
• RevenueCat: confirming purchases so gifts can be delivered.
• Sentry: crash and error reports.
• Resend: sending email, such as report alerts to our reviewer.
• GitHub: storing our encrypted database backups.

§11Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted here with an updated "Last updated" date. Continued use of the App after changes constitutes acceptance.

§12Contact

For questions or requests regarding this Privacy Policy or your data — including access, correction or deletion — contact us at hello@cycgreenroom.com. We will respond within a reasonable timeframe.