Privacy Policy

Last Updated: July 11, 2026

Effective Date: July 11, 2026

Vampiro Life ("we", "us", or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

1. Information We Collect

We collect the following categories of information:

• Account Information: Email address, username, password (hashed), profile information you provide, and authentication data via Supabase.
• Game & Campaign Data: Chat messages you send to the AI Storyteller, AI responses, campaign state, character sheets, notes, choices, and other gameplay data necessary to provide persistent long-context memory and story continuity.
• Usage Data: Pages visited, features used, session duration, device and browser information, IP address (for security and abuse prevention).
• Payment Information: If you subscribe to a paid tier, we (or our payment processor) collect billing details. We do not store full credit card numbers on our servers.
• Communications: Support requests and correspondence with us.

We do not collect unnecessary sensitive personal data beyond what is required to deliver the Service.

2. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Service (including AI storytelling and campaign memory);
• Authenticate users and secure accounts;
• Personalize and improve gameplay and features;
• Analyze usage trends (in aggregated/anonymized form where possible);
• Respond to support requests and communicate important updates;
• Comply with legal obligations and enforce our Terms;
• Detect and prevent fraud, abuse, or violations (including underage access);
• Obtain and record your affirmative consent during onboarding to the processing of your data as described in these policies and the Terms of Service.

Legal bases under LGPD: consent (including affirmative consent obtained during onboarding), performance of contract, legitimate interest (service improvement and security), and legal obligation.

3. AI Storyteller Interactions and Third-Party Processors

When you interact with the AI Dungeon Master / Storyteller, your messages and the resulting AI responses are processed by third-party large language model providers (currently routed via Cloudflare AI Gateway or direct integrations to providers such as Groq, DeepSeek, xAI/Grok, and others as configured from time to time).

These third-party providers process the data solely to generate responses in accordance with their own privacy policies and our instructions. We recommend reviewing the privacy policies of these providers. We do not use your identifiable chat logs or campaign data to train or fine-tune our own or third-party AI models without your separate explicit opt-in consent. Aggregated and anonymized gameplay data may be used to improve the overall quality and safety of the Service.

Your affirmative consent to such processing is obtained during the onboarding process as detailed in the Terms of Service.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share information with:

• Service Providers / Subprocessors: Supabase (database & auth), Vercel (hosting), Cloudflare, payment processors, and the LLM providers mentioned above — all under appropriate data processing agreements.
• Legal Requirements: When required by law, court order, or to protect rights and safety.
• Business Transfers: In the event of a merger, acquisition, or asset sale (you will be notified).

5. Data Retention

We retain your account and campaign data for as long as your account is active or as needed to provide the Service. You can delete individual campaigns or your entire account at any time. Upon verified deletion request or account deletion, we will delete or anonymize personal data within 30 days, except where retention is required by law (e.g., fraud investigation, tax, or legal hold). Chat logs necessary for active campaigns are retained until you delete the campaign or account.

6. Your Rights under LGPD (and applicable laws)

You have the right to:

• Access your personal data;
• Correct inaccurate data;
• Request deletion ("right to be forgotten");
• Request data portability;
• Withdraw consent (where processing is based on consent);
• Object to certain processing.

To exercise these rights, contact us at support@vampirolife.com or use the in-app account deletion tools. We will respond within the timeframes required by LGPD (generally 15 days, extendable once). We may need to verify your identity before fulfilling certain requests.

7. Security

We implement reasonable technical and organizational measures (Supabase security features, encryption in transit, access controls, regular audits) to protect your data. However, no system is 100% secure. You are responsible for keeping your account credentials safe.

8. Children's Privacy and Age

The Service is intended exclusively for adults 18 years and older and contains Mature Content. We do not knowingly collect personal information from individuals under 18. If we learn that we have collected data from a minor, we will promptly delete it. See the Terms of Service (Section 1) for our full policy on age verification and termination of underage accounts.

9. International Data Transfers

Some of our subprocessors and LLM providers may be located outside Brazil (including in the United States and Europe). We take appropriate safeguards (standard contractual clauses or equivalent) to protect your data in accordance with LGPD when it is transferred internationally.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on the Service and update the "Last Updated" date. Material changes will be notified by email or prominent in-app notice. Your continued use after the effective date constitutes acceptance.

11. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: support@vampirolife.com.

English is the authoritative and legally binding language version of this Privacy Policy.