Privacy Policy

Last updated: 2026-10-09

1. Who handles your data

This Policy applies to The Ark (the “App”), developed by WayneSan. Contact: WayneSan ／ waynemvrs@gmail.com.

It explains how the App collects, processes, uses, and retains information. Mandatory data-protection rules in your location are not excluded by this Policy.

2. Information we process

Account and sign-in: You can read novels and use available features as a guest, or sign in with Google, Apple, or email. Supabase authentication processes email addresses, display names, sign-in providers, user IDs, and guest identifiers. We do not obtain your Google or Apple password.

Game and conversation data: To provide cross-device progress, multi-world life, relationships, quests, conversation memories, and duplicate-grant prevention, we may process save IDs, progress, relationship data, quest events, text you enter, character responses, and necessary conversation records.

AI conversation data: To generate character responses, we may send your input, necessary conversation context, character or relationship state, conversation memories, and generated responses to OpenAI (GPT) or Google (Gemini). Do not enter identity numbers, passwords, bank details, health or sexual information, trade secrets, or personal information about another person; if you enter it yourself, it may be processed as conversation data.

Purchases and Points: If you buy Points or other items, the platform and the App may process product ID, platform, transaction ID, receipt or verification data, account ID, device ID, and grant result for transaction verification, granting, refund disputes, and duplicate-grant prevention. We do not directly process your full card or bank-account details.

Support: When you email us, we process your reply address, messages, and account, order, or issue information you provide to handle your request and retain necessary records. Do not provide passwords, full payment details, or identity documents.

Rewarded ads: You may choose to watch Google AdMob ads for rewards. Ad services may process device data, ad interactions, IP addresses, and reward-verification identifiers. We request non-personalized ads and use Google consent management where applicable. AI consent does not authorize use of conversation data for advertising.

Technical and security data: For service operation, abuse prevention, and device integrity, we may process IP addresses, device identifiers, operating system, App version, language, Firebase App Check results, request times, and error logs.

3. Purposes

To provide sign-in, save synchronization, game content, character conversations, AI responses, Point and item grants, and account deletion.

To verify transactions, keep account and game data consistent, and prevent cheating, abuse, attacks, duplicate requests, and improper refunds.

To deliver game assets, improve performance and content quality, diagnose errors, keep the service secure and stable, and meet legal, platform, or dispute-handling obligations.

Purposes: We use this data to generate and continue character dialogue, check content safety, prevent abuse, and perform necessary troubleshooting and service operations. This consent does not cover advertising, marketing profiles, general-purpose AI model training or unrelated uses. Providers may retain necessary security records under applicable contracts and law; no model training does not mean no retention. See the Privacy Policy for overseas processing, retention and deletion.

4. Third-party services and international processing

The App uses or may use Supabase (authentication, database, backend APIs), OpenAI (GPT) and Google (Gemini) (AI conversations), Firebase App Check (device integrity), Google/Apple sign-in, Google AdMob (optional rewarded ads), Apple App Store, and Google Play. Each service has its own terms and privacy policy.

Information sent to third-party AI providers is generally limited to the input, context, and results necessary to generate responses, provide the feature, prevent abuse, or maintain safety. However, a provider may apply its plan, terms, global processing architecture, and legal obligations to keep safety logs, detect abuse, or retain information for a limited period. Until we verify the applicable plan and contract, we do not promise that a third-party AI provider never logs, never permits human review, or never uses data to improve its service.

WayneSan is responsible for selecting and supervising processors and requires OpenAI, Google and other processors to provide protection at least equal to this Policy under contract and applicable law. This includes purpose limitation, confidentiality, access controls, security, and deletion or de-identification when retention ends. Third-party terms do not reduce your statutory rights or our legal responsibilities.

To provide these features, information may be stored, transferred, or processed in countries or regions where service providers operate, including locations outside yours. We share information only as necessary for service delivery, security, transactions, or law, and we do not sell your personal data.

Section 11 limits AI processing. This consent does not authorize provider training of general-purpose models. We must first verify that the selected plan, data-processing contract and settings meet that limit; a service name or paid status alone does not establish this. Security logs and legal retention do not authorize training or unrelated secondary uses.

Overseas transfers must meet applicable law. Where Japan’s APPI applies and a foreign third-party transfer relies on consent, we must first supply the legally required information about the recipient country, its protection system and the recipient’s safeguards. Where equivalent measures are the basis, we must verify them on an ongoing basis and provide information on request as required by law. This general Policy cannot replace those procedures and does not mean processing occurs only in Taiwan or Japan. Contact us for actual processing locations and safeguards.

5. Retention

Account, cloud-save, relationship, quest, conversation-memory, and transaction information is retained for as long as needed to provide the service, handle disputes, prevent abuse, or meet legal obligations. The period varies by data type, service needs, law, and backup cycles.

Some settings, saves, and recent conversations remain on your device. Deleting the App or clearing device data may remove local data but does not automatically delete cloud data. Unlinked guest data may not be recoverable after reinstalling or changing devices.

Prompts, context, and responses sent to a third-party AI provider are handled under that provider’s and our selected plan’s retention, security, and legal-compliance rules. We will require deletion or de-identification after the necessary purpose ends where our contract permits, but cannot guarantee that a provider’s backups, legally required records, or safety logs disappear immediately. Where Taiwan rules apply, account and individual game-history records are retained for at least thirty days as required by law.

6. Access, correction, deletion, and restriction

You can use the in-App account deletion function to delete cloud account data that the App can delete. You may also email waynemvrs@gmail.com to request access, a copy, correction, supplementation, deletion, restriction of processing, or cessation of use.

We may request reasonable identity verification to protect your account. Some information may be retained for transaction records, legal obligations, security, disputes, or backups, and deleted or de-identified when the necessary period ends.

After receiving a deletion request, we will delete or de-identify the account, cloud saves, conversation memories, and related AI-derived data that we control and applicable law permits us to delete, and will reasonably request the same from service providers acting for us. Security, transaction, or backup information retained by a third party under law may remain until its retention period ends.

Where Taiwan’s Personal Data Protection Act applies, rights to access, copies, correction, supplementation, cessation of collection, processing or use, and deletion cannot be waived or contractually restricted in advance. Under Article 13, we decide access and copy requests within 15 days, with up to 15 additional days if necessary; correction, cessation and deletion requests within 30 days, with up to 30 additional days if necessary. Reasons for extensions are given in writing.

Where Japan’s APPI applies, you may request notification of purposes, disclosure of retained personal data and third-party transfer records, correction, addition, deletion, cessation of use or third-party provision within the scope of law. Email waynemvrs@gmail.com with your request and information identifying your account, not passwords or complete identity documents. We may perform necessary, proportionate identity checks and respond without delay as required by law, explaining any full or partial refusal.

Purchase verification records are retained for 365 days after the purchase date or the end of the relevant subscription period for settlement checks, refunds and duplicate prevention. Deleting your App account removes the direct account link; expired records are removed by a daily cleanup. Apple and Google retain their own transaction data under their policies.

7. Permissions and your choices

The App offers guest features. Features requiring a linked account support Google, Apple, or email sign-in.

If your device or platform provides analytics, personalization, or notification controls, you can manage them there. Disabling a permission may disable the related feature but does not affect other game features that do not need it.

8. Children and minors

The App is not primarily directed to children. Because of the terms and safety requirements of the AI service provider currently used by the App, AI conversations and related online-account services are limited to people aged 18 or older; people under 18 may not use those features. Use the Game according to the age rating shown by the store, the Game, and the rules where you are located. If we learn that a person under 18 is using the AI service, we will restrict, suspend, or delete the related account and data as required by applicable law and platform rules. A legal representative who believes a minor provided information should contact us.

9. Security and incidents

We use reasonable technical and organizational measures, including encrypted connections, protected sign-in storage, access controls, server permissions, and App Check or device-integrity mechanisms, to reduce unauthorized access, alteration, loss, or disclosure. No internet service can guarantee absolute security.

If a personal-data security incident requires notice under applicable law, we will take containment, investigation, remediation, and notification measures required by that law.

10. Changes and contact

We may update this Policy when game features, third-party services, law, or security measures change. The latest version and update date will appear on this page and in the App. Material changes will be announced by reasonable means.

Contact: WayneSan ／ waynemvrs@gmail.com.

Material changes to AI recipients, data categories or purposes require renewed notice and any legally required consent before the new processing begins. Publishing a policy or continuing to play does not authorize new AI data uses.

11. Third-Party Generative AI Services and Personal Data Processing

Data and recipients: If you choose real-time AI dialogue and agree, WayneSan sends your typed messages, current scene, character and relationship state, and the past messages, character replies and memories needed to continue the conversation through the App backend to OpenAI (GPT) or Google (Gemini). Personal information you include in messages may also be sent. Do not enter identity documents, passwords, payment details, medical or health information, other sensitive data, or personal information about others without authority.

Purposes: We use this data to generate and continue character dialogue, check content safety, prevent abuse, and perform necessary troubleshooting and service operations. This consent does not cover advertising, marketing profiles, general-purpose AI model training or unrelated uses. Providers may retain necessary security records under applicable contracts and law; no model training does not mean no retention. See the Privacy Policy for overseas processing, retention and deletion.

Your choice: Selecting Agree authorizes the AI transfers described above. Signing in, accepting the Terms or continuing to play does not replace this consent. Declining disables AI dialogue that needs these transfers; fixed content that does not need real-time AI remains available. You can stop using AI dialogue and email waynemvrs@gmail.com to withdraw consent or request that processing stop or data be deleted. Withdrawal applies to subsequent processing and does not automatically delete lawfully retained data. Requests are handled under the Privacy Policy and applicable law.

WayneSan is responsible for selecting and supervising processors and requires OpenAI, Google and other processors to provide protection at least equal to this Policy under contract and applicable law. This includes purpose limitation, confidentiality, access controls, security, and deletion or de-identification when retention ends. Third-party terms do not reduce your statutory rights or our legal responsibilities.