Política de Privacidad — Aventurix

Bienvenido a Aventurix. Esta Política de Privacidad explica cómo Aventurix recopila, utiliza, almacena, comparte y protege su información personal cuando utiliza nuestra aplicación de historias interactivas con inteligencia artificial.

Esta Política se aplica a todos los usuarios de la aplicación Aventurix, independientemente del país de origen, y se elaboró para cumplir con la Ley General de Protección de Datos (LGPD) – Ley Federal n.º 13.709/2018 (Brasil), el Reglamento General de Protección de Datos (GDPR) – Reglamento (UE) 2016/679 (Unión Europea), y las leyes aplicables de protección de datos en otras jurisdicciones donde operamos.

Al crear una cuenta y utilizar Aventurix, confirma que ha leído y comprendido esta Política. Si no está de acuerdo con los términos aquí descritos, no utilice la aplicación.

Razón social: TROPICAL GAMES STUDIO LTDA

CNPJ: 66.393.771/0001-02

Dirección: AV PAULISTA 1471, São Paulo, SP

País de registro: Brasil

Correo de contacto: support@tropicalgames.com.br

El Encargado del Tratamiento de Datos (DPO) puede contactarse según se indica en la Sección 13 de esta Política.

2.1 Datos de registro

• Name (optional): Experience personalization — Legal basis: Consent / Legitimate interest
• Email (required): Identification, account access, communications — Legal basis: Performance of a contract
• Date of birth (required): Minimum age verification (13 years) — Legal basis: Legal obligation / Performance of a contract

We do not collect: phone number, profile photo, geographic location, time zone, or device technical data.

2.2 Inicio de sesión social

You may choose to create your account via social login with Google or Apple. We only receive the information you authorize when authenticating with the provider (typically name and email). We do not have access to your password on those providers. Use of data by Google and Apple is governed by those providers' respective privacy policies.

2.3 Contenido de voz y audio

Aventurix offers voice interaction. We request your explicit consent before enabling audio recording. After recording, your audio is transcribed through a speech recognition service (Speech-to-Text – STT). Only the text transcription is stored in our systems — the original audio is not retained. Transcriptions are deleted when the adventure or the account is deleted, whichever occurs first. STT/TTS provider: OpenAI (United States). Legal basis: consent (Art. 7, I of the LGPD; Art. 6(1)(a) of the GDPR).

2.4 Contenido de historias y conversaciones

We store the history of your interactions with interactive stories ("adventures") so you can continue stories where you left off, provide context to the artificial intelligence during the active session, and save your adventure progress. Personal data is sent to the AI only if you voluntarily include it in your messages. Legal basis: performance of a contract (Art. 7, V of the LGPD; Art. 6(1)(b) of the GDPR).

2.5 Datos de pago

Financial transactions are processed exclusively by the app stores: Apple In-App Purchase (iOS) and Google Play Billing (Android). Aventurix does not store, process, or have access to credit card, debit card, or other financial data. We only store: contracted plan type (monthly, annual, or prepaid credits), subscription start and end dates, subscription status, and prepaid credit balance. Legal basis: performance of a contract and legal obligation.

2.6 Datos de uso y analítica

Our landing page uses Vercel Analytics, which does not use tracking cookies and collects only aggregated, anonymous browsing data. We do not use Google Analytics, Meta Pixel, or any other cookie-based tracking system.

Utilizamos sus datos personales exclusivamente para: crear y gestionar su cuenta; autenticar su acceso a la aplicación; proporcionar y personalizar historias interactivas; habilitar la interacción por voz; procesar suscripciones y créditos; enviar comunicaciones de servicio; proteger a menores de 13 años; cumplir obligaciones legales; y moderar contenido inapropiado.

No utilizamos sus datos para: venta a terceros, creación de perfiles para publicidad, toma de decisiones plenamente automatizadas con efectos jurídicos significativos, ni entrenamiento de modelos de inteligencia artificial.

We share your data only with partners essential to operating the service:

• OpenAI (USA): active conversation history for AI content generation
• Amazon Web Services – AWS (USA, us-east-1): database data, infrastructure, and hosting
• OpenAI STT/TTS (USA): voice transcriptions with consent, for Speech-to-Text and Text-to-Speech
• Apple / Google (USA): payment data managed entirely by them, for purchase processing
• Vercel Analytics (USA): aggregated, anonymous landing page data

4.1 Artificial intelligence (OpenAI)

The active conversation history is sent to OpenAI to generate story content. Your conversations are not used to train AI models. Sensitive personal data is not sent automatically — only what you type or say during the story. OpenAI's use is governed by its data processing agreement, which limits use of the data to providing the service.

4.2 Disclosure by legal obligation

We may disclose your data to government authorities, regulators, or pursuant to a court order when required by applicable law, always observing the principle of proportionality and, when possible, notifying you in advance.

Your personal data will be transferred to and stored in the United States of America (USA), where our main infrastructure and AI providers are located (AWS region us-east-1 and OpenAI). For users in Brazil, the international transfer is carried out based on Art. 33 of the LGPD. For users in the European Economic Area (EEA), the transfer is carried out based on Standard Contractual Clauses (SCCs) approved by the European Commission, pursuant to Implementing Decision (EU) 2021/914. All of our USA providers adopt appropriate technical and organizational security measures, including certifications such as SOC 2 and ISO 27001.

6.1 Retention period

• Registration data: while the account is active or until deleted by the user
• Story and adventure history: while the account is active or until manually deleted by the user
• Audio transcriptions: deleted when the adventure or account is deleted, whichever occurs first
• Subscription and credit data: for the period required by applicable tax legislation (generally 5 years)
• Automatic backups (AWS RDS): 7 days | Manual snapshots: 30 days. Deleted users' data is removed from backups within 7 days.

6.2 Data deletion

You can delete your account directly in the application — deletion is immediate and removes all data associated with your account, subject to retention periods required by law. You can also delete specific stories and adventures granularly. Residual copies in automatic backups will be eliminated within 7 days.

We guarantee you the exercise of the following rights:

• Access (Art. 18, I LGPD; Art. 15 GDPR): know what data we hold about you — Email: support@tropicalgames.com.br
• Rectification (Art. 18, III LGPD; Art. 16 GDPR): correct data — Account settings in the app
• Erasure (Art. 18, VI LGPD; Art. 17 GDPR): request deletion of data — Directly in the app
• Portability (Art. 18, V LGPD; Art. 20 GDPR): receive a copy of your data — Email: support@tropicalgames.com.br
• Withdrawal of consent (Art. 18, IX LGPD; Art. 7(3) GDPR) — App settings or email: support@tropicalgames.com.br
• Objection, restriction of processing (GDPR) — Email: support@tropicalgames.com.br
• Complaint to the ANPD (Brazil): anpd.gov.br | Local supervisory authority (EU)

We will respond within 15 business days (LGPD) or 30 calendar days (GDPR).

Aventurix is intended for users aged 13 or older. We do not knowingly collect data from children under 13. We require date of birth during registration, and users under 13 are prevented from creating an account regardless of the registration method used. Users between 13 and 17 may use Aventurix, but content is filtered by default to remove material inappropriate for that age group. If we identify that we have inadvertently collected data from a child under 13, we will take immediate steps to delete that information — contact us at the email indicated in Section 13.

We adopt appropriate technical and organizational measures, including: encryption of data in transit (TLS 1.2+) and at rest; storage in AWS RDS with restricted and monitored access; role-based access control (RBAC); secure authentication with JWT tokens; access auditing and monitoring. In the event of a security incident, we will notify you and the competent authorities within the timeframes provided by applicable law (LGPD: within a reasonable time; GDPR: 72 hours for the supervisory authority).

The Aventurix application does not use cookies. Our landing page uses exclusively Vercel Analytics — cookie-free audience analytics with aggregated, anonymous data (pages visited, country of origin, device type). We do not use Google Analytics, Meta Pixel, Hotjar, or any other cookie-based tracking tools. A cookie banner is not required.

Aventurix uses artificial intelligence (provided by OpenAI) to create and narrate interactive stories in real time. You are interacting with an Artificial Intelligence — stories and responses are AI-generated and may contain incorrect or inappropriate information. Content should be used for entertainment only. Your conversations and stories are NOT used to train artificial intelligence models, either by Aventurix or by OpenAI. We adopt automatic filters to block explicit sexual content, extreme violence, political content, and any content that exploits or endangers minors. To report inappropriate content: projetoghes@gmail.com.

With your consent, we may send communications about Aventurix by email and push notifications. You may cancel at any time via the unsubscribe link in emails or through the app's notification settings. Transactional communications (payment confirmation, policy changes) continue to be sent regardless of marketing preference.

Para asuntos de privacidad y protección de datos, contacte: support@tropicalgames.com.br

Plazo de respuesta: hasta 15 días hábiles (LGPD) / 30 días corridos (GDPR).

Si se encuentra en la Unión Europea y considera que el tratamiento de sus datos no cumple el GDPR, tiene derecho a presentar una reclamación ante la autoridad de control de su país.

We may update this Policy from time to time to reflect changes in our practices, applicable law, or our services. When we make material changes, we will notify you via a prominent notice in the application and by email to the registered address. Continued use of Aventurix after the changes take effect will constitute acceptance of the new terms.

Esta Política se rige por las leyes de la República Federativa de Brasil. Para la resolución de controversias, se elige el foro de la comarca de São Paulo, SP, con renuncia expresa a cualquier otro, por más privilegiado que sea. Los usuarios en la Unión Europea también pueden recurrir a las autoridades de protección de datos de su país de residencia.

© 2026 Aventurix / Tropical Games Studio LTDA. Todos los derechos reservados.