This Privacy Policy explains how KyroPlay collects, uses, shares and protects information when you use the KyroPlay app, the games made and played in it, and this website (together, the "Service"). By using the Service you acknowledge this policy. If you do not agree with it, please do not use the Service.
1. Who we are
The Service is provided by KYROPLAY PTE. LTD. ("KyroPlay", "we", "us"), 451 Bukit Batok West Avenue 6, #01-11A, Singapore. We are responsible for your personal data under this policy. Our Data Protection Officer can be reached at support[at]kyroplay.ai (replace [at] with @).
2. What we collect
Information you give us
| Category | Examples |
|---|---|
| Account and profile | Username, public ID, avatar, profile bio and cover image, birth date, gender (optional), language. If you sign in with email or phone, that email address or phone number. If you sign in with Google or Apple, the account identifier and email address they share with us. Guest accounts get a random identifier until you add a sign-in method. |
| What you create | The ideas and instructions you type, your conversations with the AI, reference images you choose, and the games, versions, titles, descriptions, icons and posters made for you. |
| Social activity | Follows, friends, private nicknames you give friends, likes, bookmarks, comments (including images), direct messages, reports, blocks, feedback and bug reports. |
| Purchases | What you bought and when, order and transaction identifiers and purchase tokens from Google Play or the App Store, a random purchase-account identifier, your Credits balance and history, and membership status. We never receive your card or bank details; the store handles payment. |
Information collected automatically
| Category | Examples |
|---|---|
| Gameplay | Games you play, play time, scores and leaderboard positions, cloud saves and progress. |
| Device and performance | Device model, operating system, app version, language and region settings, and technical data while a game runs (loading time, frame rate, device temperature state, and error reports from games). |
| Usage | Which games are shown to you and which ones you open, so we can improve recommendations. |
| Network data | Your IP address and app or browser details when you accept our terms or change privacy choices (kept as a record of that choice). IP addresses are also used briefly to protect the Service from abuse, such as rate limiting. |
What we do not collect
- Contacts. When you invite friends, you pick a contact in your phone's system picker and share an invite through your own apps. Your address book is not uploaded to us.
- Photos you don't choose. We only receive images you select in the system photo picker.
- Precise location and your device's advertising ID.
3. How we use it
- To provide the Service: create and run your account, build, host and run games, save progress, show leaderboards, deliver messages and comments.
- To process purchases: verify store purchases, add Credits and membership, and keep your balance and history.
- To keep the community safe: check eligibility (such as minimum age), review reports, detect abuse, fraud and prohibited content, and enforce our Community Guidelines.
- To improve the Service: fix bugs, measure performance, and improve how games are built and recommended.
- To communicate with you: sign-in codes, service notices, and replies to your requests.
- To meet legal obligations: tax and accounting records, responding to lawful requests.
If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: performance of our contract with you (providing the Service and purchases), our legitimate interests (safety, security, improving the Service, balanced against your rights), your consent where we ask for it, and compliance with legal obligations.
We do not sell your personal information, and we do not show personalized advertising.
4. AI processing
KyroPlay uses AI models from third-party providers to build games, create art and generate voice. To do this, we send them the instructions you type, your conversation with the AI, reference images you choose, and the content of your game. We do not send your email address, phone number or payment details to them.
| Provider | Used for |
|---|---|
| OpenAI | Writing game code, generating images |
| Anthropic | Writing game code |
| Google (Gemini) | Generating images |
| Alibaba Cloud | Text-to-speech voices in games (processed in mainland China) |
These providers process the data to deliver their services to us under their own terms. We keep records of AI requests and responses to run, bill and troubleshoot the Service (see retention). Please don't put personal information about yourself or others into prompts or images you upload. AI output can be inaccurate or unexpected; you can report any game in the app.
5. How we share it
- Publicly, when you choose to. Your profile (username, avatar, bio, public ID), games you publish, comments and likes are visible to other users and may be visible to anyone with a share link. Published games can be remixed when remixing is allowed, and remixes credit you as the original creator.
- With the people you interact with. Messages go to their recipients. Bug reports and feedback you send about a game are shared with that game's creator.
- With service providers that work for us: cloud hosting and storage, AI providers (above), Google and Apple for sign-in and in-app purchases, and email or SMS providers if you sign in with an email address or phone number. They may use the data only to provide their services to us.
- For legal and safety reasons, when we believe in good faith it's necessary to comply with law or legal process, protect users or the public, or enforce our terms.
- In a business transfer, such as a merger or acquisition, subject to this policy.
6. International transfers
We are based in Singapore, and our service providers operate in other countries, including the United States and mainland China. When personal data is transferred outside your country, we take steps to ensure it receives a standard of protection comparable to the protection under Singapore's Personal Data Protection Act 2012, and, for EEA and UK users, we rely on appropriate safeguards such as standard contractual clauses.
7. How long we keep it
| Data | How long |
|---|---|
| Account, profile and content | Until you delete it or delete your account |
| Data of a deleted account | Removed from the Service right away, then kept in a restricted internal archive for up to 30 days before permanent deletion |
| Reference images you upload for a build | Up to 7 days |
| Records of AI requests and responses | Up to 90 days, and deleted with your account |
| Messages you send to start a build (used to route your request) | Up to 90 days, unless kept for a safety review |
| Purchase and transaction records | 5 years after the purchase, as required for tax and accounting |
| Safety and moderation records | Up to 2 years after a case is closed |
| Records of terms you accepted | As long as needed to show your consent; your IP address and device details are removed when your account is deleted |
When you delete your account, it is closed immediately and the process described on our account deletion page applies. We may keep information that has been aggregated or de-identified so it can no longer identify you.
8. Your choices and rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and get a copy of it;
- correct inaccurate data (you can edit most profile details in the app);
- delete your account and personal data (how to delete);
- object to or restrict certain processing, and withdraw consent you have given;
- receive your data in a portable format.
To make a request, write to support[at]kyroplay.ai from the email linked to your account, or include your username and public ID. We may need to verify that the account is yours. We respond within 30 days. If you are in the EEA or UK, you can also complain to your local data protection authority. California residents: we do not sell or share personal information for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights.
9. Children
KyroPlay is for people aged 13 and over (or older where local law requires). We do not knowingly collect personal data from children under 13. If we learn that a child under 13 has created an account, we delete it. If you believe a child has given us personal data, contact us.
10. Security
We protect data with encryption in transit, access controls and monitoring. No system is perfectly secure, so we can't guarantee absolute security. Keep your sign-in methods safe, and tell us right away if you think your account has been compromised.
11. Changes to this policy
We may update this policy. We'll change the "Last updated" date above, and for significant changes we will notify you in the app before they take effect.
12. Contact us
KYROPLAY PTE. LTD.
451 Bukit Batok West Avenue 6, #01-11A, Singapore 650451
Email (Data Protection Officer): support[at]kyroplay.ai