1. Introduction
Built by Foundry, Inc., formerly known as Playpen Games, Inc. ("BBF," "we," "us," or "our"), operates the Claim It mobile application ("App"). This Privacy Policy explains how Claim It handles account, journaling, personalization, analytics, subscription, notification, and automated-content information.This Privacy Policy describes the personal information we collect, where it comes from, why we use it, when we disclose it, and the choices available to you.Controller and contact: Built by Foundry, Inc. (f/k/a Playpen Games, Inc.), 2261 Market Street, Suite 86046, San Francisco, California 94114, United States. For privacy requests, email privacy@builtbyfoundry.io. For general questions: support@builtbyfoundry.io2. Information We Collect
2.1 Information You Provide
Account details include your name or nickname, email address, sign-in provider identifier, and profile photo where provided by Apple or Google. Personalization information includes optional relationship status, goals, focus areas, affirmation categories, onboarding responses, notification preferences, and custom affirmations. Content includes journal entries and prompts, favorites, streaks, and progress. We also receive feedback and support requests you choose to send.2.2 Cloud Journal and Sync
Journal entries and related prompts are stored in Firebase Firestore under your account so they can be retrieved and synced. They are not merely stored on your device. BBF does not use journal text to generate manifestation packs or intentionally include journal text in analytics events. Personnel or service providers may access stored content only when reasonably necessary to operate, secure, support, or comply with law. Do not use Claim It as the only copy of information you cannot afford to lose.2.3 Automatically Collected Information
PostHog and Firebase receive identifiers linked to a signed-in account, device and app details, screens viewed, features used, lifecycle and subscription events, notification interactions, approximate location inferred from IP address, and diagnostics. PostHog session replay is enabled in production with text inputs masked, but replay may still capture screen layout and non-input content visible in the App. Firebase Crashlytics receives crash and performance logs.2.4 AI-Generated Content
For custom manifestation packs, the App sends the onboarding responses, stated goals, focus information, and preferences needed for the request through BBF's backend to OpenAI. The returned affirmations and prompts are stored with your account. The current generation flow does not send journal-entry text. OpenAI may process inputs and outputs under BBF's configured account terms; do not submit information you do not want processed for this feature. Generated content is automated, may be wrong or unsuitable, and is not reviewed by a mental-health professional.2.5 Voice Features
When you request premium narration, the affirmation text and a generated request identifier are sent through BBF's backend to ElevenLabs to create audio. If remote speech is unavailable, the App may use Apple's on-device text-to-speech. Claim It does not use the microphone or record your voice for narration.3. How We Use Your Information
• Deliver affirmations, journaling prompts, and audio playback• Generate personalized AI manifestation packs (Premium)
• Send affirmation reminders (you control frequency)
• Sync your data across devices
• Provide customer support
• Measure product use, diagnose failures, test features, and improve the App
• Detect fraud and security issues
• Comply with legal obligations
4. Third-Party Service Providers
We disclose only the information reasonably needed to service providers and contractors that host, secure, analyze, support, or process purchases for the App. They process information under their agreements with us and their own legal obligations.Analytics & Infrastructure: PostHog processes product analytics and masked session replay. Google Firebase provides authentication, Firestore cloud storage, analytics, and Crashlytics. Render hosts the backend API.Subscriptions & Payments: RevenueCat manages subscription entitlements. Apple App Store and Google Play distribute the App and process purchases and refunds.Notifications: OneSignal processes push identifiers, segments, and delivery interactions for reminders.Authentication: Apple Sign-In and Google Sign-In process authentication information when selected.Automated Content and Voice: OpenAI processes goals, focus information, and preferences to generate custom packs. ElevenLabs processes requested affirmation text to return premium narration audio.Feedback: WishKit (feature requests)No sale or behavioral-advertising sharing: We do not sell personal information for money or share it for cross-context behavioral advertising. We have not done so during the preceding 12 months. We may disclose information if required by law, to protect people or the App, or as part of a merger, financing, or sale of the business, subject to appropriate safeguards.5. International Data Transfers
BBF is based in the United States. We and our providers may process information in the United States and other countries where privacy laws may differ from those where you live.EEA/UK/Swiss users: Where required, we rely on an adequacy decision, approved standard contractual clauses, or another lawful transfer mechanism. You can ask about safeguards for a particular transfer by contacting privacy@builtbyfoundry.io.6. Data Retention and Deletion
We keep personal information only as long as reasonably needed for the purposes described here, including to provide the App, maintain security, resolve disputes, and meet legal or accounting duties. Retention depends on the type of information, whether your account is active, and applicable law. When it is no longer needed, we delete or de-identify it. Copies may remain temporarily in backups or where law requires retention.Account, journal, onboarding, generated-pack, settings, and sync data is kept while your account is active. You can request deletion in the App or at privacy@builtbyfoundry.io. We delete or de-identify information after a verified request except where temporary backups, security records, transaction records, or law require longer retention. Analytics, session replay, diagnostics, notification, purchase, and support records are kept only as reasonably needed for their stated purpose and legal obligations.7. Your Privacy Rights
Depending on where you live, you may ask to access, correct, delete, or receive a copy of personal information, or object to or restrict certain processing. You may withdraw consent at any time where processing relies on consent, without affecting earlier processing.Legal bases for processing
Legal bases: We process information as needed to provide the App and perform our contract with you; for legitimate interests such as security, support, product improvement, and fraud prevention; with consent where required; and to comply with law.EEA, UK, and Swiss users
You may also have rights to data portability and to complain to your local data protection authority. We may ask for information necessary to verify and complete your request.United States state privacy rights
Residents of California and certain other states may have rights to know, access, correct, delete, or obtain personal information and to receive information about categories of recipients. We do not discriminate against you for exercising a privacy right. Where applicable, you may use an authorized agent and may appeal our response by replying to it.How to Exercise Rights
Email privacy@builtbyfoundry.io with the App name, the email or account identifier you used (if any), and your request. You may also use an account-deletion control where the App provides that control. We will verify requests as reasonably necessary and respond within the time required by applicable law.Some information may be exempt from a request or retained where permitted by law. We may charge a reasonable fee or decline requests only where applicable law allows it.8. Children's Privacy
Claim It is not directed to children under 13. We do not knowingly collect data from children under 13.Parents: If your child under 13 has provided information, contact privacy@builtbyfoundry.io. We will investigate and delete the information when required.Teens (13-17): Review this policy with a parent or guardian.9. Data Breach Notification
We maintain an incident-response process. If a security incident affects personal information, we will investigate, contain, and provide notices to regulators or affected people when and as required by applicable law.Report security concerns: privacy@builtbyfoundry.io10. Security
We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls and protections offered by our hosting and authentication providers. No method of storage or transmission is completely secure.You should: Protect your device, credentials, and connected accounts and tell us promptly if you suspect unauthorized access.11. Consumer Health Data
Journal, goal, focus, relationship, and wellness-feature information may be treated as consumer health data in some states. Our separate Consumer Health Data Privacy Notice at https://www.builtbyfoundry.io/claim-it/consumer-health-data describes the categories, sources, purposes, disclosures, retention, and rights that apply.12. Wellness Disclaimer & Crisis Resources
Claim It provides inspirational content for personal empowerment. It is NOT medical advice, therapy, or crisis intervention.If you need help:• 988 Suicide & Crisis Lifeline (US): Call or text 988• Emergency: Call 911 or your local emergency number
• Crisis Text Line (US): Text "HELLO" to 741741
• International: findahelpline.com