1. Introduction

Built by Foundry, a division of Playpen Games, Inc. ("we," "us," or "our"), operates the Is This BS mobile application ("App") in collaboration with Professor Dave Explains. This Privacy Policy explains how we collect, use, and protect your information.Contact: For privacy requests, email privacy@builtbyfoundry.io. For general questions: hello@builtbyfoundry.io

2. Information We Collect

2.1 Information You Provide

• Account details: Name and email (via Sign in with Apple; account creation is optional)
• Claims: Text you submit for AI analysis
• Interests: Topics and categories you select during onboarding
• Challenge responses: Your answers to daily challenges
• Support requests: Feedback and questions you send us

2.2 Automatically Collected Information

Usage Analytics: We use PostHog to understand how people use the App (screens viewed, features used, session length). Users are identified by their account ID for analytics purposes.Device Information: Device model, operating system, app version, IP address (general location only), language settings.

2.3 AI-Processed Data

When you submit a claim for analysis, the claim text is sent to OpenAI (GPT-4o) via our secure backend for processing. Claims are hashed and cached so that identical claims return previously generated results without additional AI processing.What we do NOT do: We do NOT train AI models on your claims. We do NOT share individual claim text with other users. OpenAI processes claims under our data processing agreement and does not use your data to train their models.AI Limitations: AI analysis is for educational purposes only. It may contain errors and is not reviewed by scientists, journalists, or other professionals before being displayed.

3. How We Use Your Information

• Analyze claims using AI and display results
• Deliver daily challenges and educational content
• Track your streaks, XP, and progress
• Send scheduled reminder notifications (you control frequency)
• Sync your data across devices
• Provide customer support
• Improve the App using aggregated, anonymized analytics
• Detect fraud and security issues
• Comply with legal obligations

4. Third-Party Service Providers

We share limited data with service providers to operate the App. All are contractually required to protect your data and use it only as we instruct.AI Processing: OpenAI (claim analysis via GPT-4o, under data processing agreement)Backend & Database: Supabase (authentication, database, edge functions)Analytics: PostHog (usage analytics with user identification)Subscriptions & Payments: RevenueCat (billing), Apple App Store (payment processing)Authentication: Apple Sign-InApp Infrastructure: Expo (app updates, local notifications, secure storage)We Never Sell Your Data. Full service provider details and privacy policies available upon request.

5. International Data Transfers

The App is hosted in the United States. If you access from other regions, your data is transferred to and processed in the US.EU/UK Users: We use Standard Contractual Clauses (SCCs) approved by the European Commission and Data Processing Agreements (DPAs) with all processors. All transfers are encrypted. You can request copies of our SCCs by contacting privacy@builtbyfoundry.io.

6. Data Retention and Deletion

We retain data only as long as necessary or required by law.While Your Account is Active: Account info, claim history, challenge responses, streaks, XP, and settings are stored as long as you use the App. Cached claim analyses are stored indefinitely to improve performance.After You Delete Your Account:• Immediately: Personal data becomes inaccessible
• Within 30 days: Permanently deleted from systems
• Within 90 days: Backup copies purged
• What may remain: Anonymized cached claim analyses, aggregated analytics, purchase records for tax complianceOther Data: Analytics (26 months), purchase records (7 years for tax law), support tickets (3 years).Inactive Accounts: Accounts inactive for 3+ years receive notice before automatic deletion.

7. Your Privacy Rights

All Users can request access, correction, or deletion of personal data.

EU/UK Users (GDPR)

Additional rights: Data portability, restrict processing, object to processing, withdraw consent, file complaints with your Data Protection Authority.File a complaint: UK (ICO: ico.org.uk), Ireland (dataprotection.ie), or your local EU authority.Legal basis: Contract performance (claim analysis, account management), legitimate interests (analytics, security), consent (notifications), legal obligations.

California Users (CCPA/CPRA)

Additional rights: Know what data we collect and who we share with, delete data, correct inaccuracies, opt-out of data sales (we don't sell data), limit use of sensitive information.You can designate an authorized agent to make requests. We verify identity before fulfilling requests. No discrimination for exercising rights.

How to Exercise Rights

Email privacy@builtbyfoundry.io with your name, email, user ID (Settings → Profile), and specific request.In-app deletion: Settings → Account → Delete AccountResponse time: GDPR: 30 days, CCPA: 45 days. Requests are free.

8. Children's Privacy

Is This BS is not directed to children under 13. We do not knowingly collect data from children under 13.Parents: If your child under 13 has provided information, contact privacy@builtbyfoundry.io. We'll delete it within 30 days.Teens (13-17): Review this policy with a parent or guardian.

9. Data Breach Notification

If a breach compromises your data, we will notify you and relevant authorities within 72 hours, describing what happened, what data was affected, what we're doing, and what you should do.Report security concerns: privacy@builtbyfoundry.io

10. Security

We use encryption in transit (TLS 1.3+), encryption at rest (AES-256), secure authentication (OAuth 2.0 via Apple Sign-In), row-level security policies in our database, access controls, and regular security audits. While no system is 100% secure, we work to protect your data.You should: Protect your device passcode and biometric authentication, use a strong Apple account password, enable two-factor authentication.

11. Updates to This Policy

We may update this policy to reflect new features or legal requirements. Material changes will be communicated via email or in-app notification 30 days before taking effect. Continued use after changes means you accept the updated policy.

12. Contact Information

Foundry, LLC
Division of Playpen Games, Inc.Privacy requests: privacy@builtbyfoundry.ioGeneral inquiries: hello@builtbyfoundry.ioWebsite: builtbyfoundry.io