EpicVerse by Kriyora

Introduction

Welcome to EpicVerse, developed by Kriyora Concepts Pvt Ltd. ("we", "our", or "us"). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the EpicVerse mobile application (the "App"), available on the Google Play Store and Apple App Store.

By downloading or using EpicVerse, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

Our primary users are based in India. Where applicable, we also comply with the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable provisions of the Information Technology Act, 2000.

Information We Collect

2.1 Information You Provide

• Account information: Email address, display name, and profile picture when you register or sign in via Google or other supported authentication providers.
• User-generated content: Text, images, or other content you create or upload within the App.
• Voice input: Audio recorded when you actively use the voice companion feature. See Section 3 for how this is handled.
• Communications: Messages or feedback you send directly to us.

2.2 Information Collected Automatically

• Device information: Device model, operating system version, unique device identifiers, and mobile network information.
• Usage data: Features you use, session duration, interaction logs, and in-app actions.
• Log data: IP address, crash reports, and diagnostic information to help us fix issues.
• Bluetooth metadata: Device scanning and connection metadata when using Bluetooth companion-pairing features. We do not collect the content of Bluetooth communications.

2.3 Device Permissions

EpicVerse requests the following device permissions:

How We Use Your Information

3.1 General Purposes

• Create and manage your account using Firebase Authentication.
• Deliver and personalise the EpicVerse experience, including story modes and AI-driven interactions.
• Analyse usage patterns to improve App performance, features, and content.
• Communicate with you about updates, support, or promotional offers (with your consent where required).
• Detect fraudulent or abusive activity and maintain App security.
• Comply with applicable laws and legal obligations.

3.2 Voice Data & AI Processing — Important

This processing is governed by OpenAI's API data usage policies. You can review OpenAI's privacy practices at openai.com/policies/privacy-policy.

How We Share Your Information

We do not sell your personal information to anyone. We share data only in the following limited circumstances:

• Firebase (Google LLC): Provides authentication and backend database services. Data is processed under Google's data processing agreements.
• OpenAI: Receives voice audio for real-time AI processing of the voice companion feature only. Data is not retained (see Section 3.2).
• Analytics Providers: Aggregated or anonymised usage data to help us understand App performance. No personally identifiable information is shared.
• Legal obligations: Where required by law, court order, or governmental authority in India or other applicable jurisdictions.
• Business transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred to a successor entity under equivalent privacy protections.

All third-party service providers are bound by data processing agreements and are permitted to use your information only for the purposes we specify.

Data Retention

We retain your personal information for as long as your account is active or as necessary to provide our services. Specific retention periods:

• Voice audio: Not retained. Processed in real-time and discarded immediately.
• Account data: Retained until you request deletion or your account is inactive for an extended period.
• Log and diagnostic data: Retained for up to 90 days for debugging and security purposes.
• Legal obligations: Certain data may be retained longer where required by Indian law or regulatory requirements.

You may request deletion of your account and associated data at any time by contacting us. We will process deletion requests within 30 days.

Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption in transit: All data transmitted between the App and our servers uses HTTPS/TLS encryption.
• Encryption at rest: Data stored in Firebase is encrypted at rest by Google's infrastructure.
• Access controls: Firebase security rules and role-based access controls restrict who can access your data.
• Minimal data collection: We collect only what is necessary to provide the App's features.

While no method of transmission over the internet is 100% secure, we continuously review and update our security practices. We encourage you to use a strong, unique password and to log out when not using the App.

In the event of a data breach that affects your rights or interests, we will notify you as required under applicable Indian law.

Children's Privacy

EpicVerse is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13.

Users between the ages of 13 and 17 should use the App only with the knowledge and assistance of a parent or legal guardian.

Your Rights and Choices

Under applicable Indian privacy law and general best practices, you have the following rights regarding your personal information:

To exercise any of these rights, contact us at support@kriyora.com. We will respond within the timeframe required by applicable law (generally 30 days).

Third-Party Services

EpicVerse integrates with the following third-party services that have their own privacy policies:

• Google Sign-In & Firebase — Authentication and backend. Governed by Google's Privacy Policy.
• OpenAI API — Real-time voice processing for the AI companion feature. Governed by OpenAI's API privacy policy.

We are not responsible for the privacy practices of these third-party services. We encourage you to review their respective privacy policies before using features that rely on them.

International Data Transfers

Our primary users are in India. However, some of our service providers — including Google Firebase and OpenAI — process data in the United States and other countries. These countries may have different data protection laws than India.

Where such transfers occur, we ensure appropriate safeguards are in place through contractual protections with our service providers. Voice data sent to OpenAI is not retained and is processed only in real-time, minimising the risk of cross-border data exposure.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Updating the "Effective Date" at the top of this page.
• Displaying a notice within the App.
• Sending an email notification where appropriate and where required by law.

Your continued use of EpicVerse after any changes take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree to the updated terms, you should stop using the App and may request deletion of your account.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us:

We aim to respond to all privacy-related requests within 30 days.