Digimon TCG Assistant ("we," "our," or "the Service") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI-powered Digimon TCG rules assistant.

1. Information We Collect

• Google OAuth Data: When you sign in with Google, we receive your name, email address, and profile avatar.
• Usage & Credits: We track your credit balance, subscription tier, and usage frequency.
• Payment Information: If you subscribe to Pro, Stripe stores your payment details. We only store your Stripe customer ID.

We do not currently store your chat messages. In the future, we may collect anonymized conversation data for service improvement and analysis purposes.

2. How We Use Your Information

• Operate and provide the Service, including generating AI-powered rules answers.
• Manage user accounts, subscriptions, and credit limits.
• Process your questions through OpenAI's API to generate responses.
• Enforce usage limits and prevent abuse.

3. Third-Party Services

We use the following third-party services: Google OAuth (authentication), Supabase (database and backend), OpenAI (AI-powered responses), and Stripe (payment processing). Each service has its own privacy policy governing data handling.

4. Data Storage & Security

Your data is stored securely using industry-standard practices. All communications are encrypted via HTTPS, and we implement appropriate access controls to protect your information.

5. Analytics

We use Google Analytics 4 (GA4) to understand how users interact with our Service. This helps us improve the app and fix issues. GA4 may collect:

• Pages visited and features used
• Device type, operating system, and browser
• General geographic location (country/region level)
• App performance and error data

Your Choice: When you first use the Service, you will be asked whether to accept or decline analytics cookies. If you decline, GA4 will only collect anonymized, aggregate data without cookies or personal identifiers. You can change your preference at any time in your Profile settings.

We do not display advertisements. Google Analytics data is used solely for improving the Service.

6. Data Retention

Your data is retained for as long as your account exists. You may request deletion of your account and associated data at any time by contacting us through the app.

7. Children's Privacy

This Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.

8. Your Rights

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your account and personal data.
• Withdraw Consent: Revoke your Google OAuth permissions at any time through your Google account settings.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated effective date.

10. Contact

If you have any questions about this Privacy Policy or your data, please reach out through the app's feedback feature.