Privacy policy

Tapugo Games Inc. is a company incorporated in Ontario, Canada. We operate tapugo.games and the Tapugo studio, and we are the organisation accountable for the personal information described here under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

Our privacy officer reads privacy@tapugo.games. Write there about anything on this page.

Your account. Your name, email address and a hashed password. We never store the password itself.

What you make. Your games, the conversations you have with the studio agents, the art and audio you upload, and the builds we produce for you.

Videos you submit for analysis. A clip you upload is read frame by frame and then kept for 30 days so you can go back to the write up. If a clip is rejected for not being gameplay it is deleted immediately.

Billing records. What you bought, when, and how many credits it granted. Card details never touch our servers. Checkout is hosted by Stripe.

Play data. When someone plays a published game we record anonymous session data such as how long the session lasted and how far they got. It is not linked to a person.

To run the product you asked us to run: to build your games, to bill you correctly, to keep your work available when you come back, and to show you how published games perform. We do not sell personal data and we do not use your private projects to train models.

These are the processors the product actually uses.

• Anthropic, to run the agents that write and change your game. Your prompts and project files are sent for that purpose.
• Stripe, for payments. They handle card data. We store only an identifier and what was purchased.
• Meta, only when you choose to run a market test, and only the ad creative and campaign settings you configured.
• Apple and Google, only when you choose to publish, using credentials you supply.
• Our infrastructure providers for hosting, storage and email delivery.

Your projects stay until you delete them or close your account. Uploaded analysis videos are removed after 30 days. Billing records are kept as long as Canadian tax and accounting rules require, which is generally seven years.

Data leaves Canada. Our hosting, storage and the model provider that runs the agents operate in the United States and elsewhere, so your information is processed outside Canada and is subject to the laws of those countries, including lawful access by their authorities. We use providers contractually bound to protect it to a comparable standard.

Data is encrypted in transit. Store credentials you give us, such as an App Store Connect key or a signing keystore, are encrypted at rest with a key we hold separately. No system is perfect, and we will tell you promptly if something happens that affects you.

Email privacy@tapugo.games from the address on your account and ask. We will delete your account, your games, your uploads and your builds within 30 days, and confirm when it is done. Records we are legally required to keep, such as invoices, are the only exception.

Under PIPEDA you can also ask for a copy of the personal information we hold about you, ask us to correct anything inaccurate, and withdraw your consent to us using it, subject to what our contract with you and the law require. We answer access requests within 30 days.

If you are not satisfied with how we handle a request you can complain to the Office of the Privacy Commissioner of Canada.

Tapugo is not for people under 13, and we do not knowingly collect their data. If you believe a child has an account, tell us and we will remove it.

If we change anything that matters we will update the date at the top and email account holders before it takes effect.