プライバシーポリシー — Aventurix

Aventurix へようこそ。本プライバシーポリシーは、人工知能を活用したインタラクティブなストーリーアプリをご利用の際に、Aventurix が個人情報をどのように収集・利用・保存・共有・保護するかを説明します。

本ポリシーは、出身国を問わず Aventurix アプリのすべてのユーザーに適用され、ブラジルの一般データ保護法（LGPD）— 連邦法 13.709/2018、一般データ保護規則（GDPR）— 規則（EU）2016/679、および当社が事業を行うその他の法域の適用法令に準拠するよう作成されています。

アカウントを作成し Aventurix を利用することで、本ポリシーを読み理解したことを確認したものとします。ここに記載の条件に同意しない場合は、アプリケーションを利用しないでください。

法人名: TROPICAL GAMES STUDIO LTDA

CNPJ: 66.393.771/0001-02

住所: AV PAULISTA 1471, São Paulo, SP

登録国: ブラジル

連絡先メール: support@tropicalgames.com.br

データ保護責任者（DPO）には、本ポリシー第13節の記載に従い連絡できます。

2.1 Registration data

• Name (optional): Experience personalization — Legal basis: Consent / Legitimate interest
• Email (required): Identification, account access, communications — Legal basis: Performance of a contract
• Date of birth (required): Minimum age verification (13 years) — Legal basis: Legal obligation / Performance of a contract

We do not collect: phone number, profile photo, geographic location, time zone, or device technical data.

2.2 Social login

You may choose to create your account via social login with Google or Apple. We only receive the information you authorize when authenticating with the provider (typically name and email). We do not have access to your password on those providers. Use of data by Google and Apple is governed by those providers' respective privacy policies.

2.3 Voice and audio content

Aventurix offers voice interaction. We request your explicit consent before enabling audio recording. After recording, your audio is transcribed through a speech recognition service (Speech-to-Text – STT). Only the text transcription is stored in our systems — the original audio is not retained. Transcriptions are deleted when the adventure or the account is deleted, whichever occurs first. STT/TTS provider: OpenAI (United States). Legal basis: consent (Art. 7, I of the LGPD; Art. 6(1)(a) of the GDPR).

2.4 Story and conversation content

We store the history of your interactions with interactive stories ("adventures") so you can continue stories where you left off, provide context to the artificial intelligence during the active session, and save your adventure progress. Personal data is sent to the AI only if you voluntarily include it in your messages. Legal basis: performance of a contract (Art. 7, V of the LGPD; Art. 6(1)(b) of the GDPR).

2.5 Payment data

Financial transactions are processed exclusively by the app stores: Apple In-App Purchase (iOS) and Google Play Billing (Android). Aventurix does not store, process, or have access to credit card, debit card, or other financial data. We only store: contracted plan type (monthly, annual, or prepaid credits), subscription start and end dates, subscription status, and prepaid credit balance. Legal basis: performance of a contract and legal obligation.

2.6 Usage and analytics data

Our landing page uses Vercel Analytics, which does not use tracking cookies and collects only aggregated, anonymous browsing data. We do not use Google Analytics, Meta Pixel, or any other cookie-based tracking system.

We use your personal data exclusively to: create and manage your account; authenticate your access to the application; provide and personalize interactive stories; enable voice interaction; process subscriptions and credits; send service communications; protect users under 13; comply with legal obligations; and moderate inappropriate content.

We do not use your data for: sale to third parties, creating profiles for advertising, fully automated decision-making with significant legal effects, or training artificial intelligence models.

We share your data only with partners essential to operating the service:

• OpenAI (USA): active conversation history for AI content generation
• Amazon Web Services – AWS (USA, us-east-1): database data, infrastructure, and hosting
• OpenAI STT/TTS (USA): voice transcriptions with consent, for Speech-to-Text and Text-to-Speech
• Apple / Google (USA): payment data managed entirely by them, for purchase processing
• Vercel Analytics (USA): aggregated, anonymous landing page data

4.1 Artificial intelligence (OpenAI)

The active conversation history is sent to OpenAI to generate story content. Your conversations are not used to train AI models. Sensitive personal data is not sent automatically — only what you type or say during the story. OpenAI's use is governed by its data processing agreement, which limits use of the data to providing the service.

4.2 Disclosure by legal obligation

We may disclose your data to government authorities, regulators, or pursuant to a court order when required by applicable law, always observing the principle of proportionality and, when possible, notifying you in advance.

Your personal data will be transferred to and stored in the United States of America (USA), where our main infrastructure and AI providers are located (AWS region us-east-1 and OpenAI). For users in Brazil, the international transfer is carried out based on Art. 33 of the LGPD. For users in the European Economic Area (EEA), the transfer is carried out based on Standard Contractual Clauses (SCCs) approved by the European Commission, pursuant to Implementing Decision (EU) 2021/914. All of our USA providers adopt appropriate technical and organizational security measures, including certifications such as SOC 2 and ISO 27001.

6.1 Retention period

• Registration data: while the account is active or until deleted by the user
• Story and adventure history: while the account is active or until manually deleted by the user
• Audio transcriptions: deleted when the adventure or account is deleted, whichever occurs first
• Subscription and credit data: for the period required by applicable tax legislation (generally 5 years)
• Automatic backups (AWS RDS): 7 days | Manual snapshots: 30 days. Deleted users' data is removed from backups within 7 days.

6.2 Data deletion

You can delete your account directly in the application — deletion is immediate and removes all data associated with your account, subject to retention periods required by law. You can also delete specific stories and adventures granularly. Residual copies in automatic backups will be eliminated within 7 days.

We guarantee you the exercise of the following rights:

• Access (Art. 18, I LGPD; Art. 15 GDPR): know what data we hold about you — Email: support@tropicalgames.com.br
• Rectification (Art. 18, III LGPD; Art. 16 GDPR): correct data — Account settings in the app
• Erasure (Art. 18, VI LGPD; Art. 17 GDPR): request deletion of data — Directly in the app
• Portability (Art. 18, V LGPD; Art. 20 GDPR): receive a copy of your data — Email: support@tropicalgames.com.br
• Withdrawal of consent (Art. 18, IX LGPD; Art. 7(3) GDPR) — App settings or email: support@tropicalgames.com.br
• Objection, restriction of processing (GDPR) — Email: support@tropicalgames.com.br
• Complaint to the ANPD (Brazil): anpd.gov.br | Local supervisory authority (EU)

We will respond within 15 business days (LGPD) or 30 calendar days (GDPR).

Aventurix is intended for users aged 13 or older. We do not knowingly collect data from children under 13. We require date of birth during registration, and users under 13 are prevented from creating an account regardless of the registration method used. Users between 13 and 17 may use Aventurix, but content is filtered by default to remove material inappropriate for that age group. If we identify that we have inadvertently collected data from a child under 13, we will take immediate steps to delete that information — contact us at the email indicated in Section 13.

We adopt appropriate technical and organizational measures, including: encryption of data in transit (TLS 1.2+) and at rest; storage in AWS RDS with restricted and monitored access; role-based access control (RBAC); secure authentication with JWT tokens; access auditing and monitoring. In the event of a security incident, we will notify you and the competent authorities within the timeframes provided by applicable law (LGPD: within a reasonable time; GDPR: 72 hours for the supervisory authority).

The Aventurix application does not use cookies. Our landing page uses exclusively Vercel Analytics — cookie-free audience analytics with aggregated, anonymous data (pages visited, country of origin, device type). We do not use Google Analytics, Meta Pixel, Hotjar, or any other cookie-based tracking tools. A cookie banner is not required.

Aventurix uses artificial intelligence (provided by OpenAI) to create and narrate interactive stories in real time. You are interacting with an Artificial Intelligence — stories and responses are AI-generated and may contain incorrect or inappropriate information. Content should be used for entertainment only. Your conversations and stories are NOT used to train artificial intelligence models, either by Aventurix or by OpenAI. We adopt automatic filters to block explicit sexual content, extreme violence, political content, and any content that exploits or endangers minors. To report inappropriate content: projetoghes@gmail.com.

With your consent, we may send communications about Aventurix by email and push notifications. You may cancel at any time via the unsubscribe link in emails or through the app's notification settings. Transactional communications (payment confirmation, policy changes) continue to be sent regardless of marketing preference.

プライバシーおよびデータ保護に関するお問い合わせ: support@tropicalgames.com.br

回答期限: 最大15営業日（LGPD）/ 30暦日（GDPR）。

欧州連合に所在し、ご自身のデータの処理が GDPR に準拠していないと考える場合、お住まいの国の監督当局に苦情を申し立てる権利があります。

We may update this Policy from time to time to reflect changes in our practices, applicable law, or our services. When we make material changes, we will notify you via a prominent notice in the application and by email to the registered address. Continued use of Aventurix after the changes take effect will constitute acceptance of the new terms.

本ポリシーはブラジル連邦共和国の法令に準拠します。紛争解決については、サンパウロ州サンパウロの裁判所を専属的合意管轄とし、他のいかなる管轄も明示的に放棄します。欧州連合のユーザーは、居住国のデータ保護当局にも連絡できます。

© 2026 Aventurix / Tropical Games Studio LTDA. All rights reserved.