Privacy policy
The short version: your play is measured, your game words stay on your device, and an image leaves your device only when you deliberately send one: a selfie you turn into an avatar, or a bug report you file. We collect gameplay telemetry — events and scores — to make the games better. What you type or say to an in-game AI is processed on your device and never sent to us, unless you choose to include the game's state in a bug report.
What we collect
- Account. You sign in with Apple or with your phone number. With Apple, we receive the identifier Apple generates for us and, if you share it, a display name; we never see your Apple password, and you can hide your email from us using Apple's relay. With phone sign-in, we collect your phone number, text you a one-time verification code (see Text messages), and store a passcode you set — only ever as a salted hash, never in the clear — so you can sign back in without another text.
- Profile. A unique handle you choose, an optional display name, an avatar (see Avatars), and your device's language. We also record an approximate, country-level region — taken from your device's region setting (and, as a fallback, your network or phone country code). It is not your precise location, and you don't type it in. Some of these fields are visible to other players (see What other people can see).
- Friends and social. The friend connections you make, the requests you send and receive, and the handle or region searches you run to find people.
- Ratings. The star ratings and optional short notes you leave on games.
- Gameplay stats. The trophies you earn in games (and when you earned them) and roughly how long you play each game, so your profile can show your trophy case and favorite games. This is per-game time, not what you did inside a game.
- Purchases. When you buy tokens, Apple processes the payment. We receive transaction records — what was bought, when, and a receipt — so we can credit your balance and handle support. We never see your card number.
- Gameplay telemetry. Which games you play, session length, level progress, scores, and in-game events like starts, wins, losses, quits, and the ratings you leave — tied to your account so your progress and balance stay right across devices. We do not attach your IP address or a device fingerprint to these events, and there are no third-party analytics or crash-tracking SDKs in the app.
- Bug reports. Only if you file one from inside a game: what you write, your device and app details, and — unless you untick them — a screenshot and the game's state (see Bug reports).
- Support. If you email us, we keep the correspondence so we can help you and follow up.
Avatars and your photo
Your avatar can be one of our built-in cartoon presets — in which case no photo is involved at all — or a personalized avatar you make from a selfie. That second option is entirely your choice. When you use it:
- The photo you take or pick is sent to our servers and, from there, to our AI image provider, OpenAI, which turns it into a set of cartoon avatar portraits. The photo is used only to generate those avatars.
- We do not keep your original photo. It passes through to generate the avatars and is not stored on our servers afterward. OpenAI processes it only to create your avatars, as our service provider under its API terms — which do not use API data to train its models.
- What we do keep is the finished cartoon avatars, so they can appear next to your handle. You can change your avatar — or switch back to a preset — any time in the app.
This is the one and only case where an image leaves your device for AI processing, and it never happens unless you ask for it.
Bug reports
If you choose to report a problem from inside a game, we send what you write, the category you pick, your handle, and details of your device and app (model, system and app versions, language, screen, memory, network type). Unless you untick them, we also send a screenshot of the game and the game's saved state at that moment, which can include what you typed in that game. In a live match the game's state is the shared match, so it can also include the other players' moves and what they typed there — and when someone in a match with you files a report, it can include yours.
The report goes to Abracade and to the game's creator, who may be someone other than aitaco. Creators receive your handle, never your phone number or email. A report is only ever sent when you file one, and it is used to answer you and fix the game. A copy already delivered to a creator's own tools is theirs to keep or delete.
What other people can see
Abracade is social, so parts of your profile are visible to any signed-in player: your handle, display name, avatar, approximate (country-level) region, the trophies you've earned, and your most-played games (shown as your top games with rough hours played). Other players can look you up directly, find you by searching a handle, or browse by region — so your region is searchable, not only shown. Your phone number, email, exact location, purchases, the ratings you leave, and telemetry are never shown to other players. Your region is country-level only, never a precise location. A bug report you file is seen by that game's creator, and only by them and us (see Bug reports).
Text messages (SMS)
If you sign in with your phone number, we send you a text message containing a one-time verification code. These are transactional messages only — we use your number to deliver the code you asked for and to secure your account. We never send marketing or promotional texts, and we never share or sell your phone number or your consent to third parties for their own marketing. You opt in at the moment you enter your number and tap "Send code" in the app; that action is your consent to receive that code. Message and data rates may apply, and message frequency is limited to the codes you request. Carriers are not liable for delayed or undelivered messages. For help, email chef@aitaco.co. To stop, simply don't request a code; you can also delete your account in the app at any time.
What we don't collect
There are no ads in Abracade and no advertising SDKs in the app. We do not sell your data, and we do not track you across other apps or websites — which is why the app never shows you an App Tracking Transparency prompt. And the part we're proudest of: the AI in AI-native games runs entirely on your device. What you type or say to an in-game character is processed on your hardware — voice games listen through the microphone and answer without that audio ever leaving the device. The content of your play — your words, your prompts, your conversations — is never sent to our servers. Telemetry is events and metrics, not content. The two exceptions are both yours to choose: the optional selfie you turn into an avatar (see Avatars), and a bug report you file (see Bug reports).
Why we collect it
To run the service and keep your account, profile, friends, and token balance right across devices; to let you make and use an avatar; to fulfill and support your purchases; to improve games and balance their difficulty — telemetry tells us where a level is too hard or a mechanic isn't landing; to fix bugs; and to detect fraud and abuse. That's the list.
Who touches the data
A handful of service providers, each bound to use your data only on our behalf and only for these purposes:
- Apple — sign-in and payments, under its own privacy policy.
- Google Cloud — hosts our servers, database, and stored avatars, and runs our telemetry pipeline. Data is stored in the United States.
- Twilio — delivers your phone verification codes, receiving only your number and the code for that single purpose.
- OpenAI — generates your personalized avatar from a selfie, only when you choose to make one, and only for that purpose (see Avatars).
One more recipient is not a service provider: the creator of a game you file a bug report on. They receive that report, with your handle and device details but never your phone number or email (see Bug reports), and what they do with it is theirs to answer for.
That's the list. No data brokers, no ad networks.
How long we keep it
Telemetry is kept in identifiable form for at most 24 months, then aggregated or deleted — after that it survives only as statistics that can't be traced back to you. Your account, profile, friends, ratings, generated avatars, bug reports, and purchase records are kept as long as you have an account, then deleted when you ask us to (except records the law requires us to retain, like tax records). Your original selfie is not retained at all — it's used to generate the avatars and then discarded.
Your rights
You can ask what we hold about you, get a copy, correct it, or have it deleted — email chef@aitaco.co and we'll respond within 30 days. You can also delete your account directly in the app, as Apple's rules require; deleting it removes your profile, friends, ratings, and avatars. Bug reports you filed are deleted when you ask us to; a copy already delivered to a game's creator is theirs to keep or delete. Laws like the CCPA and GDPR grant these rights to people in certain places; we honor them for everyone, regardless of where you live.
This website
abracade.com sets no cookies and runs no analytics. Our hosting provider keeps ordinary access logs (IP, user agent, pages requested) for security and operations.
Children
Abracade is for people 13 and older. We do not knowingly collect personal information from children under 13, and if we learn we have, we'll delete it. If you believe a child under 13 has an account, tell us at chef@aitaco.co.
When this changes
When our practices change, this page changes first — with a new effective date at the top, before the change takes effect. For material changes we'll also tell you in the app. The design principle stays fixed: we measure the play, not the player's words.
Contact
Questions, concerns, or requests: chef@aitaco.co
aitaco LLC · Denver, Colorado, USA