Privacy Policy

Information we collect

• Your selfie. The photo you upload to generate characters. This is the most sensitive thing we handle, and it's treated that way throughout this policy.
• Account identifiers. A Firebase-issued user ID, created the moment you open the app — even before you sign in with anything. If you link a Google or Apple account, we also receive the email address that provider shares with us.
• Purchase history. When you buy a credit pack, Google Play or the App Store hands us a purchase token, which we validate before crediting your account. We don't receive your card number or other payment details — Google and Apple handle that.
• A push notification token, if you allow notifications, so we know where to deliver them.
• Nexus data, if you use it: your beacon code, who you've connected with, and which abilities you've granted them (summon, create realm, save image).
• Support messages and attachments, if you contact us through in-app chat or email.
• App activity and diagnostics. Firebase Analytics records feature interactions and Firebase Crashlytics receives crash diagnostics, device/app information, and technical identifiers needed to diagnose failures.

We don't use advertising or attribution SDKs, and nothing above is used to track you across other companies' apps or websites.

How we use it

• Generating your characters. Your selfie is sent to Google's Gemini AI service, including its Nano Banana image model, to check that it is safe to use and to produce each character's portrait and backstory. It is shared with Google only for these purposes.
• Keeping it safe before it's stored. Every selfie is screened for nudity, sexual content, graphic violence, and hateful or abusive imagery before it's stored or used for anything. A check that fails to complete errs on the side of caution and the upload is refused, rather than let through unchecked.
• Getting pronouns right. We make a coarse, automated guess at apparent gender from your selfie, used only to pick correct pronouns in AI-written character bios. This value is never shown to you or anyone else as a profile field, and re-uploading your selfie updates it.
• Your account balance and purchases. Credit balances are tracked server-side and purchases are validated before anything is credited.
• Syncing across devices. Linking an account lets your realms and characters survive a new phone instead of staying tied to one install.
• Notifications you've opted into, and nothing else.

Who we share it with

We don't sell your information, and we don't share it for advertising. It passes through the services that make the app work:

• Google — Firebase Authentication, Analytics, Crashlytics, Cloud Messaging, and Firestore support chat; Google Play for billing and distribution; Google Fonts for the optional watch-face font catalog; and Google Gemini for content safety and AI generation.
• Apple — Sign in with Apple and the App Store (billing, and App Store distribution).
• Cloudflare — hosts our backend, image storage, and this website.

Who else can see it

Nobody, unless you choose to share it. Your selfie and unlocked characters are visible only to your account — or to a friend you've explicitly connected with through the Nexus, and only if you've granted them that ability. Revoke a connection or rotate your beacon code any time to end that access immediately.

Deleting your data

Request account deletion for either Multiverse: AI Watch Faces or Multiverse Explorer any time from Settings, or email support@ammarptn.com if you no longer have access to the app. Include the listing name and the email linked to your account or your account ID if available, but never send a password, sign-in code, or purchase token. It's a real request reviewed by a person, not an instant wipe — your account stays fully usable while it's pending, and you can cancel it at any point before it's carried out.

Once completed, we remove the Firebase Authentication user, account profile, selfie, generated images, realms and characters tied to you, credit ledger and purchase history, device and push tokens, friend connections and permissions, support-chat messages and attachments, and locally stored app data when the app next receives the deletion acknowledgement. You won't be able to sign back into that account.

How long we keep information

Account content is kept while your account remains active. A pending deletion request does not change or hide your data; completion triggers the deletion described above. Support email correspondence is kept only as long as reasonably needed to process the request, resolve the support issue, and meet security or legal obligations. Google may retain aggregated Analytics and Crashlytics records for the retention periods configured in Firebase; those records are not used to recreate a deleted account.

After deletion we retain only narrow security and fraud-prevention records: a deletion tombstone and audit timestamps that prevent the deleted identity from silently reappearing, and a one-way Play purchase-token replay guard that prevents the same purchase being credited again. Completed audit rows do not retain your email, display name, selfie, messages, generated content, or purchase history. These records are not used for advertising or to restore your account.

Your choices

• Start anonymously — an account isn't required to use the app.
• Replace your selfie whenever you like.
• Turn push notifications off in Settings at any time.
• Manage or revoke Nexus connections from the Nexus screen.

Children's privacy

Multiverse Explorer is not directed to children under 13, and we don't knowingly collect information from them.

Changes to this policy

If this policy changes, we'll update the date at the top. Continuing to use the app after a change means you accept the update.

Contact us

Questions about this policy, your data, or an account-deletion request? support@ammarptn.com.