The short version. Red Biscuit stores what the two of you write so it can show it back to you. We do not sell it, we do not train anything on it and we do not publish it; the only thing other people see is the Arena ranking (your nickname, your pet and your points), and you can hide from it. Your partner never sees where you are — only how many kilometres apart you are. And you can delete your account from inside the app whenever you want — section 7 sets out what is erased and when.
Vestta Studios, developer of the Red Biscuit app, based in Argentina. For any question about this document or your data, write to vesttastudios@gmail.com.
Red Biscuit is intended for people aged 16 and over. We do not knowingly collect data from anyone younger. If we find an account belonging to someone under 16, we delete it. If you are a parent or guardian and believe a child under 16 created an account, write to us and we will remove it.
| Data | Purpose | Legal basis |
|---|---|---|
| Email address, account identifier and, if you sign in with Google, your Google name and photo | Creating your account and signing you in | Performance of the service |
| Name, nickname, profile photo, mood and status text | Showing you to your partner inside the app | Consent |
| Pairing code and who your partner is | Connecting the two accounts | Performance of the service |
| What you write: notes, letters, albums and their photos, daily-question answers, games, welcome message and the notifications you send | Storing it and showing it to the two of you | Performance of the service |
| Your companion, its level, hunger and love; your coins, energy, level and daily capsule openings | Running the game | Performance of the service |
| Your best Arena infinite-mode score, with your nickname (or, if you have none, your pet's name) and the pet you scored it with | Showing it in the Arena ranking, which everyone who uses Red Biscuit can see. Your name, photo and email are never shown. You can stop appearing under More → Settings | Consent |
| How each Arena run went: the pet, the wave you reached, the weapons, items and modifiers you used, the damage, how long it lasted, and how the game ran on your phone (smoothness, screen refresh rate and phone model) | Balancing the game and fixing performance problems on each phone. Only the Red Biscuit team sees it, and it deletes itself after 90 days | Legitimate interest |
| Approximate location (only while the app is open, and only if you granted permission) | Working out how many kilometres apart you are | Consent |
| Device push notification identifiers | Telling you when your partner writes | Performance of the service |
| If you leave feedback: your rating, your text, the app version, the OS version and the phone model | Understanding and fixing what you report | Legitimate interest |
| If you report a bug: the title, the description, the app version, the OS version, the phone model and the screenshot you choose to attach | Finding and fixing the bug you report | Legitimate interest |
| Technical logs with your user identifier, the operation and the date | Security, abuse prevention and diagnostics | Legitimate interest |
| Device advertising identifier (only if ads are shown) | Serving rewarded ads and preventing fraud | Consent |
These providers are outside Argentina, so your data is transferred abroad. They offer adequate levels of protection. The infrastructure and payment providers act as processors on our behalf; for advertising, Google processes that data as a controller in its own right.
We may also disclose information where a competent authority legally requires it.
In the app: More → Settings → Delete my account. You can also request it from this page.
Deleted: your profile, name, nickname and photo; your mood and welcome message; the letters you wrote; your companions, coins, energy and level; your last position; your devices' notification identifiers; your widget credential; and your sign-in account.
What you shared with your partner (notes, daily questions, photo albums and everything else the two of you had) stops showing for your partner at once and is deleted after 30 days, photos included. Until then nobody sees it.
You may access, rectify, update and erase your data, and withdraw your consent at any time. Most of this is done inside the app (by editing your profile or deleting your account); for anything else, write to vesttastudios@gmail.com.
Under Argentine Law 25.326 (section 14.3), you may access your personal data free of charge at intervals of no less than six months, unless a legitimate interest justifies more frequent access.
Argentina's Agencia de Acceso a la Información Pública, the authority overseeing Law 25.326, handles complaints regarding non-compliance with personal data protection rules.
Traffic is encrypted (HTTPS). Our database denies direct access from the app by default: everything goes through our server, which verifies who you are on every request. We do not store passwords. Even so, no system is infallible: if an incident affecting your data occurred, we would tell you.
Note that the photos you upload (your profile picture and album photos) are stored at unlisted, non-indexed web addresses that are nonetheless reachable by anyone holding the exact address.
If we change something material we raise the version number and the app asks you to accept it again before you carry on. Minor changes (a wording fix) are published here without asking again.