The short version. Red Biscuit stores what the two of you write so it can show it back to you. We do not sell it, we do not train anything on it and we do not publish it. Your partner never sees where you are — only how many kilometres apart you are. And you can delete your account from inside the app whenever you want — section 7 sets out what is erased and what stays with your partner.
Vestta Studios, developer of the Red Biscuit app, based in Argentina. For any question about this document or your data, write to vesttastudios@gmail.com.
Red Biscuit is intended for people aged 16 and over. We do not knowingly collect data from anyone younger. If we find an account belonging to someone under 16, we delete it. If you are a parent or guardian and believe a child under 16 created an account, write to us and we will remove it.
| Data | Purpose | Legal basis |
|---|---|---|
| Email address, account identifier and, if you sign in with Google, your Google name and photo | Creating your account and signing you in | Performance of the service |
| Name, nickname, profile photo, mood and status text | Showing you to your partner inside the app | Consent |
| Pairing code and who your partner is | Connecting the two accounts | Performance of the service |
| What you write: notes, letters, albums and their photos, daily-question answers, games, welcome message and the notifications you send | Storing it and showing it to the two of you | Performance of the service |
| Your companion, its level, hunger and love; your coins, energy, level and daily capsule openings | Running the game | Performance of the service |
| Approximate location (only while the app is open, and only if you granted permission) | Working out how many kilometres apart you are | Consent |
| Device push notification identifiers | Telling you when your partner writes | Performance of the service |
| If you leave feedback: your rating, your text, the app version, the OS version and the phone model | Understanding and fixing what you report | Legitimate interest |
| If you report a bug: the title, the description, the app version, the OS version, the phone model and the screenshot you choose to attach | Finding and fixing the bug you report | Legitimate interest |
| Technical logs with your user identifier, the operation and the date | Security, abuse prevention and diagnostics | Legitimate interest |
| Device advertising identifier (only if ads are shown) | Serving rewarded ads and preventing fraud | Consent |
These providers are outside Argentina, so your data is transferred abroad. They offer adequate levels of protection and act as processors on our behalf.
We may also disclose information where a competent authority legally requires it.
In the app: More → Settings → Delete my account. You can also request it from this page.
Deleted: your profile, name, nickname and photo; your mood and welcome message; the letters you wrote; your companions, coins, energy and level; your last position; your devices' notification identifiers; your widget credential; and your sign-in account.
Not deleted, because it is not only yours: notes and photo albums are shared content that both of you edit, and an album's photos belong to both of you. If we deleted them, anyone could wipe their partner's memories on the way out. Deleting your account dissolves the link and your partner keeps that shared content, which they can delete themselves. Once your account is gone, your identifier inside that content no longer points to any data about you.
You may access, rectify, update and erase your data, and withdraw your consent at any time. Most of this is done inside the app (by editing your profile or deleting your account); for anything else, write to vesttastudios@gmail.com.
Argentina's Agencia de Acceso a la Información Pública, the authority overseeing Law 25.326, handles complaints regarding non-compliance with personal data protection rules.
Traffic is encrypted (HTTPS). Our database denies direct access from the app by default: everything goes through our server, which verifies who you are on every request. We do not store passwords. Even so, no system is infallible: if an incident affecting your data occurred, we would tell you.
Note that the photos you upload (your profile picture and album photos) are stored at unlisted, non-indexed web addresses that are nonetheless reachable by anyone holding the exact address.
If we change something material we raise the version number and the app asks you to accept it again before you carry on. Minor changes (a wording fix) are published here without asking again.