Privacy Policy
The short version
- We do not sell your personal data. Not to anyone, ever.
- We do not use your conversations, activity, memories, or creations to train AI.
- We do not show ads and do not run advertising or tracking networks.
- There is no public feed and no follower graph, so your activity is not broadcast to strangers.
- We collect the minimum needed to run the service, keep your account yours, and keep bots and abusers out.
The rest of this page explains that in detail. If something here is unclear, we would rather you ask than assume — see Contact.
Who we are
Kuyog ("Kuyog", "we", "us") provides a private, invite-based social play service. This policy covers the Kuyog app and this website.
What we collect
Information you give us
- Phone number. Used to create and sign in to your account, and to verify that an account belongs to a real person. This is the core anti-bot measure: one verified phone, one account.
- Display name and avatar choices. What your friends see.
- Content you create. Messages, worlds you build, and items you place.
- Purchases. If you buy something, our payment processor or app store handles your payment details. We never receive or store your full card number.
Information created by using the service
- Friend connections and room membership — who you are connected to and which spaces you belong to. Friendship requires both people to agree.
- Gameplay and presence data needed to show you to your friends in real time, such as position in a room and whether you are online.
- Basic technical and safety data — see the next section.
Safety and anti-abuse data
To keep Kuyog free of bots, spam, and abuse, we record a limited set of safety signals. We treat these as sensitive and hold them for as short a time as we can:
- IP address and approximate region, used to detect automated sign-up attempts, ban evasion, and impossible-travel patterns. Location is never a product feature — we do not build a map of where you are, and we do not share location with your friends.
- Device and app version for compatibility and abuse detection.
- Abuse reports and moderation records when someone reports content or behavior.
Where we retain a signal specifically to detect a banned user returning, we store a one-way cryptographic fingerprint rather than the underlying value, computed with a secret key that is never stored alongside it. If our database were ever exposed, those records would not reveal the original phone number, email, or IP address.
What we do not do
- We do not sell, rent, or trade your personal information.
- We do not use your private content to train AI models, ours or anyone else's. We use automated systems only for safety — for example, detecting scripted clients or abusive behavior — never to build a profile of you as a product.
- We do not run behavioral advertising or embed third-party ad or analytics trackers.
- We do not sell or share your data with data brokers.
- We do not make your activity public. There is no feed, no follower count, and no stranger discovery.
How we use what we collect
- To operate the service — sign you in, show you to your friends, sync your world, and deliver what you bought.
- To keep the service safe — verify real people, block bots, and act on abuse reports.
- To fix problems — diagnose crashes and errors.
- To communicate about your account, such as a verification code by SMS.
SMS messages
When you sign up or sign in, we send a one-time verification code by SMS to the number you provide. These are transactional messages, not marketing. Message and data rates may apply. Message frequency varies with how often you sign in. Reply STOP to opt out of messages and HELP for help; opting out of verification messages may prevent you from signing in. Carriers are not liable for delayed or undelivered messages.
Who we share it with
We share personal information only with service providers who help us run Kuyog, and only as needed:
- Cloud hosting and database providers that store your account and world data.
- An SMS provider to deliver verification codes.
- App stores and payment processors to handle purchases.
We may also disclose information if legally required, or where necessary to protect someone's safety. We will not hand over your data for advertising or model training.
How long we keep it
- Account and content: while your account exists.
- Safety signals such as IP records: a short, limited window — long enough to detect an abuse pattern, not to build a history of you.
- Ban-evasion fingerprints: retained as one-way fingerprints, not as your original details.
Deleting your account
You can delete your account. When you do, we remove your profile, content, and friend connections. We may keep a minimal, one-way fingerprint of the account to enforce a ban if the account was removed for abuse — this cannot be reversed into your phone number or email, and exists only so that someone removed for harming others cannot immediately return.
Children
Kuyog is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will remove it.
Your choices and rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to certain processing. Contact us and we will help. We will not discriminate against you for exercising these rights.
Security
Connections between the app and our servers are encrypted. Real-time gameplay traffic is additionally encrypted per room. Sensitive contact details are stored separately from your public profile, and internal access is limited. No system is perfectly secure, but we design so that a single failure does not expose everything.
International transfers
We operate services in the United States. If you use Kuyog from elsewhere, your information will be processed there.
Changes
If we change this policy in a way that materially affects you, we will tell you in the app before it takes effect.
Contact
Questions about privacy, or a request about your data: privacy@kuyog.app