Privacy Policy

This policy explains how Lorewisp for Android handles your account, interactive fiction, purchases and support requests. Lorewisp is intended for adults aged 18 and above.

Information we use

• Account information: a stable account identifier and guest-account status; if you choose Google sign-in, the identity and email information supplied by that provider. We do not receive your provider password. If you sign in to an existing email-and-password account, your email and password are sent over HTTPS to our Supabase authentication service; the app does not retain that password.
• Fiction and app activity: stories, character conversations, notes, saved progress, preferences, authored content, comments and actions needed to provide the features you use.
• Purchases: Google Play purchase tokens, products, orders and subscription status needed to verify payment, deliver credits, restore purchases and handle renewals or refunds. Google handles payment methods; we do not collect your full card or bank details.
• Feedback: the text you submit, its account association and relevant app/submission information. Feedback does not automatically attach your conversations.
• Technical information: app/device and service information necessary for authentication, operation, security and diagnostics. Service infrastructure can process your IP address and an approximate country or region derived from it; we do not request GPS or precise-location access. Release builds use Meta App Events for installation/activation and the first successful guest registration. These events may include app/device identifiers. They do not include your email, private fiction or search terms. Advertising ID collection, automatic purchase events and interface indexing are disabled. Release builds also use Firebase Analytics for app usage and service analytics. Analytics events may include a stable account identifier, account type, payment status, screen or feature actions, and app/device information. The SDK can also automatically record Google Play purchase statistics such as product, price, currency and quantity. These events do not include private fiction, email, search terms or feedback text. Advertising storage, advertising user data and ad personalization are disabled for Firebase Analytics. Remote FCM notifications are not configured in this Android release.

Why we use and share information

We use this information to provide authentication, fiction generation, saves, social features, purchases, feedback and service security. Relevant fiction input, notes and selected conversation context are sent to the AI service providers used by our shared backend to generate a response. Supabase provides account and data services; Google Play provides billing; your selected identity provider handles sign-in; Firebase receives the limited usage events described above for service analytics; Meta receives the limited app events described above for analytics and advertising measurement, including technical and approximate-location information available to its services. Public authored content and comments you choose to publish can be visible to other readers. Private conversations are not published to other readers automatically.

Information can be processed outside your country by these providers. Applicable privacy and international-transfer requirements still apply. Contact us for information about providers, processing or privacy rights. We do not represent account-linked data as anonymous.

Device storage and security

Network requests use encrypted HTTPS. Android session credentials, private local state and unfinished purchases use device-only Android Keystore encryption and are excluded from app backup. Server access controls restrict private information to the account and authorized operational roles. Server service secrets are not embedded in the app. No system can guarantee absolute security.

Retention and deletion

We retain account data while needed to provide your account and features, handle support and security, and meet applicable obligations. You can delete the current account through Settings → Privacy & support → Delete account, including a guest account. A linked identity may require fresh verification. Deletion removes the account's private conversations, saves, notes, comments, feedback and remaining credits. Limited deletion receipts and records required for security or legal obligations may remain; published authored material or other readers' independent content may remain without your account attribution. Google and other providers handle their separately held records under their own policies.

Your choices and rights

Google account linking and existing email-and-password sign-in, publishing comments or authored content, purchases and feedback are optional. You can use a guest account for the core experience. Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to certain processing by contacting dev@guangzhouduomiduo.shop. We may need reasonable identity verification and will handle requests under applicable law. Do not send passwords, sign-in tokens or full card information.

Adults and updates

Lorewisp for Android is intended for people aged 18 or above. If you believe a minor's information was collected inappropriately, contact us so we can investigate and remove it where required. We may update this policy; the date above identifies this version.

Operated by Guangzhou Duomiduo Food Co., Ltd. Contact: dev@guangzhouduomiduo.shop.