Privacy Policy

If you sign in with email and password, we store:

• Your email address and chosen username
• A salted, hashed version of your password (we never store or can see your actual password)

If you sign in with Google, we receive and store:

• Your email address (used to identify your account)
• Your name (used to suggest a username)
• Your Google profile picture URL (shown as your avatar)

We do not receive or request access to your Google Drive, contacts, calendar, or any other Google data — only basic profile information (openid, email, profile scopes).

We also store, as part of normal operation:

• Games, generation prompts, private drafts, ratings, favorites, follows, invitations, and match history you create
• A random mobile installation identifier used to bind and rotate secure app sessions
• Store product, purchase, entitlement, expiry, and refund status used to provide and support Premium Creator (Meeplia does not receive your card number)
• Basic request logs (IP address, timestamps) kept by Google Cloud for security and abuse prevention
• Generation and product-operation evidence needed for abuse prevention, accounting, reliable delivery, and first-party service analytics

• We do not sell your data.
• We do not use your data for advertising.
• We share only the data needed by service providers that operate Meeplia, including Google Cloud, Supabase, Resend, Apple or Google store billing, and RevenueCat. When trusted GameSpec generation is enabled, the minimum approved game-design input may be processed through OpenRouter from a private server service.

Meeplia never accepts or sends prompts for executable game generation. When trusted GameSpec creation is available, only the minimum approved game-design input is sent from a private service and the result must validate before private preview or publication. Publication metadata is not sent to the model provider. Text from the retired creator may remain attached to a legacy record until that game or account is deleted.

Data is stored in a managed PostgreSQL database (Supabase) with verified encrypted connections. Recovery copies and production access are restricted to the service operator.

You can request an export or deletion in the mobile app. If you cannot use the app, follow the instructions on the account-deletion page. Valid deletion requests are normally completed within 30 days. Deleting Meeplia does not cancel an App Store or Google Play subscription.

Meeplia is actively developed, so this policy may change. Meaningful changes will be reflected on this page with an updated date.