Realmweaver is built by creators, for creators. We take your privacy seriously because your creative work is personal. This policy explains what we collect, why, and what we do with it.
1. Information We Collect
Account Information:
- Email address (for authentication and communication)
- Display name (shown in the app)
- Password (encrypted, we cannot read it)
Content You Create:
- Worlds, wiki entries, session transcripts, writings, and exported documents
- Images you upload to wiki entries
- Feedback you submit through the app
Usage Information:
- Which features you use and how often (session types, exports, consistency checks)
- Session depth and duration
- Error logs when something goes wrong
- Browser type and device type (for compatibility)
Payment Information:
- Processed entirely by Stripe — we never see or store your full credit card number
- We store your Stripe customer ID to manage your subscription
2. How We Use Your Information
To provide the Service:
- Your world content is sent to Anthropic's Claude API to power coaching sessions, Write Together, the Realm Keeper, and the Consistency Checker
- Your content is stored in our database (hosted by Supabase) so you can access your worlds
- Your email is used for account authentication and important service notifications
To improve the Service:
- We analyze aggregate usage patterns (which session types are popular, where users get stuck) to improve the product
- We DO NOT read your individual world content for product development
- We DO NOT use your content to train any AI model
To provide support and improve quality:
- Our team may review world content and session transcripts to diagnose issues reported by users, improve AI coaching quality, and ensure the platform is working correctly. We never share individual user content externally.
To communicate with you:
- Account-related emails (password reset, subscription changes)
- Product updates and new features (you can opt out)
- We will never sell your email to third parties or send you spam
3. How Your Content Is Processed by AI
This section is important to understand:
- When you use a session, Write Together, the Realm Keeper, or the Consistency Checker, your relevant world content is sent to Anthropic's Claude API
- Anthropic processes this content to generate responses and does not retain it after processing
- Anthropic's API terms explicitly state that API inputs and outputs are not used to train their models
- For full details, see Anthropic's API data policy at anthropic.com/policies
- We do not use any other AI provider — all AI features are powered exclusively by Anthropic's Claude
4. Data Storage and Security
- Your data is stored on Supabase servers with encryption at rest and in transit
- Authentication is handled through Supabase Auth with secure token management
- Payments are processed through Stripe with PCI-compliant security
- We use HTTPS for all data transmission
- Access to production databases is restricted to authorized personnel only
5. Data Sharing
We do not sell, rent, or share your personal information or creative content with third parties, except:
- Anthropic: Your world content is sent to their API for AI features (they do not retain it or train on it)
- Stripe: Your payment information is processed by Stripe for billing
- Supabase: Your data is stored on their hosted infrastructure
- Legal requirements: We may disclose information if required by law or to protect our legal rights
That's it. No advertisers. No data brokers. No analytics companies tracking you across the web.
6. Cookies
We use minimal cookies:
- Authentication cookies: Required to keep you logged in (essential, cannot be disabled)
- Session cookies: Required for the app to function
We do not use third-party tracking cookies, advertising cookies, or analytics cookies that track you across other websites.
7. Your Rights
You have the right to:
- Access your data at any time through the app
- Export all your content using our export tools (PDF, Markdown)
- Delete your account and all associated data from your settings page
- Correct your profile information at any time
- Object to marketing communications by opting out
For EU/EEA users (GDPR):
- You have the right to data portability (our export tools fulfill this)
- You have the right to request deletion (our delete account feature fulfills this)
- You have the right to restrict processing — contact us at privacy@realmweaver.io
- Our legal basis for processing is contract performance (providing the Service you signed up for)
For California users (CCPA):
- We do not sell personal information
- You can request disclosure of what data we collect — contact privacy@realmweaver.io
8. Children's Privacy
Realmweaver requires users to be at least 13 years old. We do not knowingly collect information from children under 13. If you believe a child under 13 has created an account, contact us and we will delete it promptly. Users aged 13-17 should have parental consent to use the Service.
9. Data Retention
- Your content is retained as long as your account is active
- If you delete your account, we delete all your data within 30 days
- Backup copies may persist in encrypted backups for up to 90 days before automatic deletion
- Anonymous, aggregate usage statistics (with no personally identifiable information) may be retained indefinitely
10. Changes to This Policy
We will notify you of significant changes via email or in-app notification at least 14 days before they take effect. Minor clarifications may be made without notice.