Privacy Policy

Last updated: January 2025

TomeWorlds ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use the TomeWorlds application ("the App").

Information We Collect

When Using the App Without an Account

If you use TomeWorlds without creating an account, all your content, including worlds, characters, locations, and notes, is stored locally on your device only. We do not collect, access, or transmit this data.

When You Create an Account

When you sign in with Apple or Google, we collect and store the following information:

Data Type	Purpose	Storage Location
User ID	Identify your account	Firebase, RevenueCat
Email address	Account recovery, communications	Firebase
Display name	Personalization	Firebase, your device
Authentication tokens	Secure sign-in	Your device only

Note: When using Sign in with Apple, you may choose to hide your email address. We respect this choice and will use Apple's private relay email if provided.

World Data (Cloud Sync)

When signed in, your world data is automatically synchronized to our cloud servers to enable access across your devices. This includes:

• Worlds, groups, and cards you create
• Text content, notes, and attributes
• Images you upload (with location/metadata removed, see below)
• Tags, bookmarks, and organizational structure
• Component configurations and links

Image Privacy: Before uploading, we automatically strip EXIF metadata from your images, including GPS coordinates, device information, and timestamps.

Analytics Data

We collect anonymous usage analytics to understand how the App is used and to improve its features. This includes:

• Feature usage (e.g., creating worlds, adding cards)
• Navigation patterns within the App
• Subscription and purchase events
• App performance metrics
• Crash reports and error logs

We use the following identifiers for analytics:

• A randomly generated analytics ID
• Your subscription status (free/premium)

We do not track:

• The content of your worlds, characters, or notes
• Your typing or editing behavior
• Your location
• Your contacts or other personal data

How We Use Your Information

We use the information we collect to:

• Provide cloud synchronization across your devices
• Process and manage your subscription
• Improve the App's features and performance
• Diagnose and fix technical issues
• Send important service communications (if you've provided an email)

We do not:

• Sell your personal information to third parties
• Use your content for advertising purposes
• Share your data with third parties for their marketing purposes

Third-Party Services

TomeWorlds uses the following third-party services to provide its functionality:

Firebase (Google)

We use Firebase services for:

Service	Purpose	Data Processed
Firebase Authentication	Account management	User ID, email, name
Cloud Firestore	World data storage	Your synced worlds and content
Cloud Storage	Image storage	Uploaded images (metadata stripped)
Firebase Analytics	Usage analytics	Anonymous usage events
Firebase Crashlytics	Crash reporting	Crash logs, device info

Firebase services are provided by Google LLC. View Firebase Privacy Policy

RevenueCat

We use RevenueCat to manage subscriptions and in-app purchases. RevenueCat receives:

• A unique app user identifier
• Subscription status and purchase history
• Transaction data from the App Store

RevenueCat does not receive your email, name, or world content. View RevenueCat Privacy Policy

Apple App Store

All payments are processed through Apple's App Store. We do not have access to your payment information, credit card details, or Apple ID password. View Apple Privacy Policy

Google Sign-In

If you choose to sign in with Google, authentication is handled by Google's Sign-In service. View Google Privacy Policy

Apple Sign-In

If you choose to sign in with Apple, authentication is handled by Apple's Sign in with Apple service. Apple may provide us with your name and email (or a private relay email if you choose to hide it). View Apple Privacy Policy

Data Storage and Security

Where Your Data is Stored

• Local data: Stored on your device in the App's private container
• Cloud data: Stored on Firebase servers (Google Cloud Platform) in the United States

Security Measures

We implement the following security measures:

• Secure authentication via Apple and Google OAuth
• Encrypted data transmission (HTTPS/TLS)
• Firebase security rules restricting data access to authenticated users
• Automatic removal of image metadata before upload

Data Retention

• Account data: Retained while your account is active
• World data: Retained until you delete it or delete your account
• Analytics data: Retained according to Firebase's data retention policies (typically 14 months)
• Crash reports: Retained for 90 days

Your Rights and Choices

Access Your Data

You can export your world data at any time using the App's export feature. This creates a complete backup of your worlds in a portable format.

Delete Your Data

• Local data: Uninstalling the App removes all local data
• Cloud data: To request deletion of your cloud data, contact us at support@tomeworlds.com
• Account deletion: Contact us at support@tomeworlds.com to request complete account deletion

Opt-Out Options

• Cloud sync: Use the App without signing in to keep all data local
• Analytics: Analytics collection cannot currently be disabled within the App, but data is anonymous and not linked to your identity when not signed in

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your rights

To exercise these rights, contact us at support@tomeworlds.com.

European Users (GDPR)

If you are located in the European Economic Area, you have additional rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

To exercise these rights, contact us at support@tomeworlds.com.

Legal basis for processing: We process your data based on:

• Contract performance (providing the App's features)
• Legitimate interests (improving the App, preventing fraud)
• Consent (where applicable)

Children's Privacy

TomeWorlds is designed to be suitable for users of all ages.

• Without an account: The App collects no personal information and is safe for children
• With an account: Users must be at least 13 years old (or the minimum age in their jurisdiction) to create an account

We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at support@tomeworlds.com and we will promptly delete it.

International Data Transfers

If you are located outside the United States, please be aware that your data will be transferred to and processed in the United States where our servers are located. By using the App with an account, you consent to this transfer.

We ensure appropriate safeguards are in place for international data transfers in compliance with applicable laws.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will update the "Last updated" date at the top of this policy
• For significant changes, we may notify you through the App or via email
• Continued use of the App after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: support@tomeworlds.com

We will respond to your inquiry within 30 days.

Additional Information

Open Source Acknowledgments

TomeWorlds uses open-source software components. Licenses for these components are available within the App.

App Store

TomeWorlds is available on the Apple App Store. Apple's terms and privacy policies also apply to your use of the App Store and any purchases made through it.

This Privacy Policy is effective as of January 2025.