Privacy Policy

1. Who is responsible for your data (Controller)

Dennis Maximilian Thelen
Argelanderstraße 7, 53115 Bonn, Germany
Email: [email protected]

2. What data we collect

Ventemori is designed to collect as little as it needs to work:

• Account data: the email address and password you sign up with (your password is never stored in plain text — it's hashed by our authentication provider, Supabase).
• Profile data: your chosen username and avatar. An avatar can be an emoji (no upload involved) or, if you choose to set one, a photo you take or pick from your library. Also the cosmetic choices you make in the app, such as an avatar frame or a showcased badge.
• Quest and game data: the quests you create, send, accept, complete, verify or send back (including title, description, difficulty, category, written proof notes, rejection reasons and timestamps), and what you earn and spend in the game: XP, levels, Gold, Stardust, Venti Jewels, badges, gear, Star Shards and upgrades, and your streak.
• Proof photos: when you complete a quest, you may submit photos as proof. They are uploaded to our storage provider (see "Who can see what" below, and section 5 for how long they are kept).
• Social data: your friends list and friend requests; comments and reactions on completed quests in the Feed; private quest chat messages; and your part in duels, group events (invitations, quests, proof, votes, comments and placements) and the monthly Legendary events (opt-ins, entries, pairings and claims).
• Reports: if you report another member, we store the report (who reported whom, the reason and the details you write) so we can review it.
• Data on your device: a cached copy of your app data so the app works offline, your sign-in session (encrypted), and small settings such as which notices you have already seen.
• Push notification token: if you allow notifications, we store a push token — an anonymous, per-installation identifier issued by Expo's push service, not a hardware or advertising ID — tied to your account, so we know where to deliver alerts about activity that concerns you: friend requests, quests (sent, accepted, declined, reminders, proof submitted, verified or sent back), private quest chat messages, comments and reactions on your completed quests, Star Quests, duels, group events and the monthly Legendary events. A notification says what happened and, where relevant, the @username of the friend who did it (e.g. "@alex sent you a quest."). It never contains a quest title or description, proof text, chat or comment text, or a photo. We delete the token when you sign out or delete your account, and automatically when the app is uninstalled or the token otherwise becomes invalid. Turning notifications off in your device settings stops all of them.
• Diagnostics: which version of the app you last opened (update id, version number, platform), and, when our server turns down a change you made or the app has to give up on one, the kind of change (e.g. "send quest"), an error code and a short error message. Quest titles, descriptions, proof, chat and other content are never included. We use this only to notice and fix problems that affect players.
• App update checks: the app periodically asks Expo's update service whether a newer version of Ventemori is available. That request includes basic app/runtime information (like the app version and platform) needed to answer it — no account or quest data is included.

Who can see what

• The people a quest is between (sender and receiver) see the quest, its proof and its private chat. A Star Quest's proof is also shown to the friend picked to verify it, and a group event's proof to the event's players who vote on it.
• Your friends see your profile (username, avatar, level, badges) and, in the Feed, quests you completed together with their proof photos, comments and reactions, for 30 days. Secret quests stay hidden from them until verified. Group event quests only reach the Feed if you choose to post them.
• Other signed-in members can find you by username search (username and emoji avatar), and see your username, emoji avatar, avatar frame, level and badges when a quest you were part of appears in their Feed through a mutual friend. Your avatar photo stays visible to friends only. After a Blind Draft opt-in closes, the usernames matched that month are shown on the Legendary screen; quest content stays private.

We do not use advertising SDKs, third-party analytics/tracking libraries, or sell any data to third parties.

3. Why we process this data (legal basis)

• Art. 6(1)(b) GDPR — performance of a contract: account creation, authentication, and the core quest/friend features you use the app for.
• Art. 6(1)(a) GDPR — consent: submitting a proof photo, which you choose to do for a specific quest, and enabling push notifications, which is off by default and only turned on if you switch it on yourself.
• Art. 6(1)(f) GDPR — legitimate interest: basic technical logging needed and the diagnostics described above, needed to keep the service secure and working (e.g. rate-limiting abuse, spotting a broken release), and keeping the game fair: we may review the quest, reward and friendship data described above (including timestamps and push notification tokens) to detect cheating, such as one person using several accounts to farm rewards, and to take the measures described in section 5 of our Terms of Service. This review does not use any additional data and is not used for advertising or profiling beyond detecting such abuse.

4. Who processes data on our behalf (subprocessors)

• Supabase, Inc. — authentication, database, and file storage (proof photos, avatars). Supabase provides a Data Processing Agreement and EU Standard Contractual Clauses for any processing outside the EEA.
• Resend — delivery of transactional account emails (email confirmation, password reset codes) and delivery of member reports to us (the usernames involved, the reason and the details written). Resend never sees your password.
• Expo (650 Industries, Inc.) — checks for and delivers app updates, and relays push notifications to Apple's and Google's push delivery networks (APNs/FCM) on our behalf. For push, Expo and these networks receive your push token and the notification text described above (which can include the acting friend's username) — never quest content, chat text or photos. For update checks, Expo receives only basic app/runtime information (see "App update checks" above).

We do not use any other third-party processors at this time.

5. How long we keep your data

Your account data, quest history and game progress are kept for as long as your account exists. Some data is removed sooner:

• Proof photos of a completed quest stay available for 30 days (the Feed window). After that they are deleted, except for the photos of your 50 most recent completed quests, which stay in your quest history. Photos of a failed or cancelled quest, including earlier attempts that were sent back, are deleted when it fails.
• Group event proof photos that were not posted to the Feed are deleted 7 days after the event ends (or 7 days after a rejected attempt was decided); posted ones follow the Feed's 30 days.
• Private quest chat is deleted as soon as the quest ends or is deleted.
• Comments and reactions are removed together with the proof of the quest they belong to.
• Records of sent notifications (used only to avoid duplicates) are deleted after 45 days.
• Error reports (diagnostics) are deleted after 30 days; only the app version you last opened is kept, and it is replaced each time you open the app.
• Fair-play records (reviews and measures under section 5 of our Terms of Service) are kept while the account exists, so a measure can be explained or reviewed.

Everything is removed or anonymised sooner if you delete your account (section 6).

6. Deleting your account

You can permanently delete your account at any time from Profile → Settings → Delete Account in the app, or by emailing [email protected]. This is a genuine deletion, not deactivation, and happens immediately:

• Deleted outright: your email, username, avatar, push tokens, any proof photo you ever submitted (including on a quest a friend later sent back for another attempt), the title/description of any quest or Legendary entry you wrote, your comments and reactions, and your content in group events.
• Kept, but no longer tied to you: the bare fact that a quest existed between you and a friend — its difficulty, XP value, category and dates — attributed to "Deleted user" instead of your account. We keep this narrow slice because a friend's own level, badges and quest history are calculated from it; removing it would silently shrink their earned progress for something they did, not something you're owed control over erasing.

7. Your rights under GDPR

As a data subject in the EU, you have the right to:

• Access the personal data we hold about you (Art. 15)
• Correct inaccurate data (Art. 16)
• Request erasure — see "Deleting your account" above (Art. 17)
• Restrict or object to certain processing (Art. 18, 21)
• Receive your data in a portable format (Art. 20)
• Lodge a complaint with a supervisory authority — for Germany/NRW, this is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)

To exercise any of these rights, email [email protected].

8. Children

Ventemori is not directed at children under 16. If you are under 16, please only use the app with the consent of a parent or legal guardian.

9. Changes to this policy

If this policy changes materially, we'll update the effective date above and, where required, notify you in the app.