Privacy Policy

1. Introduction

Mirrage Image IT Solutions ("Company", "we", "us", "our"), registered in Dubai, UAE, operates the tupic Game application and website (collectively, "the Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information.

This policy is designed to comply with the Google Play Developer Program Policy, Apple App Store Review Guidelines, and the UAE Personal Data Protection Law (PDPL).

2. Information We Collect

We collect information you provide directly and information collected automatically when you use the Service.

• .Email address: Account creation and authentication.
• .Username: Public display name and leaderboards.
• .Password: Account security (bcrypt hashed; never stored in plaintext).
• .Game prompts: Sent to AI services for game logic generation.
• .Custom assets: Optional sprites, backgrounds, or audio you upload.
• .IP address: Used for security and rate limiting; retained 30 days.
• .Device type & OS: Used for mobile compatibility; session-only.
• .Game scores: Stored for leaderboards; retained for the lifetime of the game.
• .Gameplay & app analytics: Aggregated usage data; retained 90 days.

3. Information We Do Not Collect

We do not collect any of the following:

• .Precise location data (GPS).
• .Contacts, phone numbers, or call logs.
• .Photos or videos from your device gallery.
• .Financial or payment information (handled by app stores).
• .Health or biometric data.
• .SMS or messaging content.

4. How We Use Your Information

• .Account management: Create and manage your user account.
• .Game generation: Process your prompts via AI to generate playable games.
• .Gameplay services: Maintain leaderboards, scores, and game progress.
• .Service improvement: Analyze usage patterns and improve AI templates.
• .Security: Detect, prevent, and address fraud, abuse, and technical issues.
• .Communication: Send service-related notifications. Marketing only with consent.

5. AI Processing

Your game descriptions and prompts are sent to AI services for game generation and asset creation:

• .Anthropic (Claude): Receives game prompts for logic generation. No personal data included.
• .Google (Gemini / Imagen): Receives asset prompts for image generation. No personal data included.

These prompts are processed in real time and are not stored by third-party AI providers beyond the processing session.

6. Data Sharing & Disclosure

We do not sell your personal data to third parties. We may share data with the following processors strictly to operate the Service:

• .Anthropic (Claude): Game logic generation -- game prompts only.
• .Google (Gemini): Asset generation -- asset prompts only.
• .Amazon Web Services: Infrastructure hosting -- all account and game data as a data processor.
• .Cloudflare: CDN and DDoS protection -- network traffic.
• .Tupic Ecosystem: Cross-platform features (opt-in) -- user ID and scores.

We may also disclose data when required by law, court order, or to protect the rights and safety of users.

7. Data Storage & Security

Your data is stored on secure servers hosted by Amazon Web Services in the EU (Stockholm, Sweden). We implement:

• .HTTPS / TLS encryption for all data in transit.
• .Bcrypt password hashing (never stored in plaintext).
• .JWT-based authentication with 24-hour token expiration.
• .Rate limiting on all API endpoints.
• .Regular security monitoring and access controls.

8. Data Retention

• .Account data: Retained until you delete your account.
• .Game data: Retained as long as the game exists on the platform.
• .Scores: Retained as long as the associated game exists.
• .Analytics: Aggregated and anonymized after 90 days.
• .Server logs: Deleted after 30 days.

9. Your Rights

You have the following rights regarding your personal data:

• .Access: Request a copy of your personal data.
• .Correction: Request correction of inaccurate data.
• .Deletion: Request deletion of your account and associated data.
• .Export: Request a machine-readable export of your data.
• .Opt-out: Opt out of non-essential communications at any time.
• .Withdraw consent: Withdraw consent for data processing where applicable.

To exercise these rights, contact us using the information at the bottom of this page.

10. Cookies & Local Storage

• .Authentication session cookies: Stored as secure browser session cookies for web sign-in state.
• .Game progress: Resume data stored locally on your device.
• .We do not use third-party tracking cookies or advertising trackers.
• .We do not use device fingerprinting or cross-site tracking.

11. Children's Privacy

tupic Game is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

12. Public Games & Leaderboards

When you publish a game as "public" or submit scores, the following becomes visible to other users:

• .Your username (as game creator or player).
• .Game name and description.
• .Game scores and rankings.

Private games are only accessible to you and your organization members.

13. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the European Union (AWS Stockholm). We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 14 days before taking effect.

We encourage you to review this policy periodically.

15. Contact

Privacy inquiries? Contact us: