Privacy Policy

This Privacy Policy explains how Funtasy by Lyri ("Funtasy", the "app", "we", "us", or "our") collects, uses, shares, and protects your personal information. Funtasy is a private, consent-aware intimacy communication game for couples who are consenting adults (18 years or older).

Funtasy is operated by Lyri Uzan, an individual sole proprietor based in Israel, who acts as the "data controller" of your personal information. You can reach us at any time at Lyriuzan@gmail.com (a postal address is available on request).

Because Funtasy is about intimacy, some of the information we handle is deeply personal — including information that may reveal details about your intimacy preferences and boundaries. We treat this information as sensitive data and have designed the app to collect as little as possible, keep it private to you and your partner, and put you in control. By creating a profile and using Funtasy, you consent to the practices described in this policy, including our processing of sensitive intimacy data as set out below.

1. Age requirement (18+)

Funtasy is intended solely for consenting adults aged 18 and over (or the age of majority in your jurisdiction, if higher). During onboarding you must confirm that you are 18 or older. The app is not directed to, and we do not knowingly collect information from, anyone under 18. See Children's privacy for more.

2. Information we collect

We collect only what is needed to run the game and the features you use. The categories below describe everything Funtasy may collect.

Account & identifiers

• Anonymous account ID. When you first open the app, we create an anonymous account identified by a randomly generated identifier. This does not require an email or password and is not linked to your real-world identity by us.
• Email address (optional). If you choose to link an email to save your history across devices, we collect your email to send you a secure sign-in link.
• Sign in with Apple (optional). If you link your account using Sign in with Apple, we receive the identity token Apple provides and, if you allow it, the email associated with your Apple ID.

Profile information

• Your first name (used to personalize gameplay and identify you to your partner).
• Optional age and gender (including a "prefer not to say" option).
• Preferences such as language, avatar color, sound/haptics settings, and whether you enable the in-app Face ID / passcode lock.
• Your partner's first name, which you may enter to set up a shared session.

Gameplay & intimacy data

• Your private ratings of fantasy cards (for example, on a scale from "Hell Yes" to "No"), which reflect your intimacy preferences and boundaries.
• Match results and categories computed when you and your partner both rate a card.
• Your play history: which cards were drawn or scanned, saved lists, session details (such as game mode and timestamps), and whether a session was played in Incognito mode.

AI Mentor content

• The free-text messages you write to the Mentor, the AI-mediated versions of those messages, guidance prompts you select, consent-checklist requests, and any text you ask the Mentor to read aloud.

Device permissions

• Camera — used only to scan the QR code on the back of your physical Funtasy cards. Camera images are processed on your device to read the code; no photos or video are stored or transmitted.
• Face ID / device biometrics — used only to lock the app for your privacy. Biometric data never leaves your device and is never accessible to us; the app only learns whether authentication succeeded.
• Local network / Bluetooth — used only for the optional "tap phones together" proximity pairing between two nearby devices. This exchanges a short pairing code over an encrypted local connection; no gameplay content is shared this way.

Information collected automatically

• Standard technical and log data generated when your device communicates with our hosting and backend providers — such as IP address, request times, and device/operating-system information — which our service providers process to operate, secure, and troubleshoot the service.
• Aggregate, non-identifying usage statistics (for example, overall rating distributions and card popularity) that we review in an internal dashboard to improve the deck and the app. These statistics are aggregated, exclude Incognito sessions, and do not include your name, email, account ID, individual identity, or the text of your messages.

What we do not collect

• No advertising identifiers (such as IDFA) and no cross-app or cross-site tracking.
• No precise location, contacts, microphone recordings, photo library, or health data.
• No third-party advertising, analytics, or social-media tracking SDKs are embedded in the app.

3. Sensitive data & your explicit consent

Some of the information you provide — your ratings, match results, saved lists, and messages to the Mentor — can reveal information about your intimacy preferences and boundaries. Under laws such as the EU/UK GDPR this is a "special category" of personal data, and under the California Privacy Rights Act it is "sensitive personal information."

We process this information only with your explicit consent, which you give by choosing to use these features, and only to provide the features you ask for. We do not use your sensitive information for advertising, profiling for marketing, or sale. You can withdraw your consent at any time by stopping use of the relevant feature and deleting your data (see Account & data deletion).

4. How we use information

• To create and maintain your account and profile.
• To run the game: pairing two phones, drawing and scanning cards, recording your private ratings, and computing match results.
• To provide the AI Mentor, including mediating messages between partners and generating guidance and consent checklists.
• To apply safety screening that helps the Mentor refuse or redirect content involving minors, non-consent, coercion, or other unsafe topics.
• To send you a secure sign-in or email-confirmation link when you link an email.
• To keep the service secure, prevent abuse, and troubleshoot problems.
• To understand, in aggregate and anonymized form, how the app and deck are used so we can improve them.
• To comply with legal obligations and enforce our terms.

5. Legal bases for processing (GDPR / UK GDPR)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases:

• Your explicit consent — for processing sensitive intimacy data (ratings, results, Mentor messages) and for optional features. You may withdraw consent at any time.
• Performance of a contract — to provide the core app functionality you request.
• Our legitimate interests — to secure the service, prevent abuse, and improve the app using aggregated, non-identifying data, balanced against your rights.
• Compliance with a legal obligation — where the law requires us to retain or disclose information.

6. AI Mentor & automated processing

The Mentor is an in-app assistant that helps couples communicate about intimacy. When you use it, the relevant context is sent securely from our backend to third-party AI providers that generate and, where you enable read-aloud, voice the responses. Depending on the feature, the information sent may include your and your partner's first names, the content and themes of the card in play, the related ratings or match result, and the message text you write.

• The AI providers process this information only to generate a response for you. We use these providers under their commercial API terms, which do not permit them to use your content to train their models.
• The Mentor is a communication aid, not professional, medical, legal, or therapeutic advice, and it does not make any decision that produces legal or similarly significant effects about you.
• Your private, unedited messages to the Mentor remain visible only to you; only the AI-mediated version is shared with your partner, and only when that feature is used.

7. How we share information

We do not sell or rent your personal information, and we do not share it for advertising. We share information only with service providers ("sub-processors") that help us run Funtasy, and only as needed:

• Backend & database provider — hosts our authentication, database, file storage, real-time sync, and server functions, and stores the information described above on our behalf.
• AI providers — generate Mentor responses and optional text-to-speech audio, as described in Section 6.
• Website hosting provider — hosts our marketing site and may process standard server logs.
• Email delivery — sends account sign-in and confirmation emails when you link an email.
• Apple — when you use Sign in with Apple or download the app.

We may also disclose information if required by law, to protect the rights, safety, and security of our users or the public, or in connection with a business transfer (such as a merger or acquisition), in which case we will notify you of any material change.

8. You and your partner

Funtasy is built for two people. Information is organized around your "couple," and the app uses per-user access controls so that:

• Your individual ratings stay private to you unless you and your partner both turn on the option to reveal individual ratings.
• Match results (whether you both said yes, set a boundary, etc.) are shared within your couple, because that is the purpose of the game.
• Your private messages to the Mentor stay with you; only mediated versions are shared with your partner.
• Incognito mode lets you play a session that is not saved to your history and is excluded from internal aggregate statistics.

Please remember that anything shared within your couple is visible to your partner, and that your partner may enter your first name when setting up a session.

9. International data transfers

We are based in Israel, and our service providers may process your information in other countries, including the United States. These countries may have data-protection laws different from those in your country. Where we transfer personal information from the EEA, the UK, or other regions with transfer restrictions, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and equivalent mechanisms offered by our providers. You may contact us for more information about these safeguards.

10. Data retention

• We keep your profile, gameplay, and Mentor data for as long as your account exists, so the app can show your history and results — until you delete it or ask us to.
• Pairing codes are short-lived and expire automatically (within about 30 minutes).
• Incognito sessions are not saved to your history.
• When you delete data in the app, it is removed from your account; we then delete it from active systems and from routine backups within a reasonable period.
• We may retain limited information where necessary to comply with legal obligations, resolve disputes, or enforce our agreements.

11. Security

We use technical and organizational measures designed to protect your information, including encryption of data in transit, per-user database access controls that isolate each couple's data, anonymous-by-default accounts, and an optional Face ID / passcode lock on the app. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. Please keep your device secured and your sign-in link or email private.

12. Your privacy rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access — request a copy of the information we hold about you.
• Correction — ask us to correct inaccurate or incomplete information (much of which you can edit in the app).
• Deletion / erasure — ask us to delete your information (you can also do this yourself in the app).
• Restriction & objection — ask us to restrict or object to certain processing.
• Portability — receive certain information in a portable format.
• Withdraw consent — withdraw your consent at any time, without affecting processing already carried out.

EEA/UK residents (GDPR): you may also lodge a complaint with your local data-protection supervisory authority.

California residents (CCPA/CPRA): you have the right to know, access, correct, and delete your personal information, and to limit the use of sensitive personal information. We do not sell or "share" (for cross-context behavioral advertising) your personal information, and we will not discriminate against you for exercising your rights.

Israel (Privacy Protection Law): you have the right to review and request correction of personal information we hold about you.

To exercise any of these rights, email us at Lyriuzan@gmail.com. We will respond within the time required by applicable law and may need to verify your request, for example by confirming control of your linked email or account.

13. Account & data deletion

You are always in control of your data:

• Erase your entire account in-app. Settings includes an "Erase account" option that permanently and completely deletes your account — your profile, couples, sessions, ratings, saved lists, Mentor conversations, and any linked email or Sign in with Apple identity. The deletion cannot be undone. After erasing, the app starts fresh and treats you as a brand-new user, beginning again from onboarding the next time you open it.
• Delete selectively. You can also delete individual saved results, sessions, and Mentor conversations from within the app without erasing your whole account.
• Ask us. You can email Lyriuzan@gmail.com to request deletion of your account and information, and we will action it.

14. Children's privacy

Funtasy is strictly for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us at Lyriuzan@gmail.com and we will promptly delete it.

15. Our website & cookies

Our marketing website (the pages you are reading now) does not use cookies, analytics, tracking pixels, or third-party scripts, and it does not collect personal information from visitors. Our hosting provider may keep standard server access logs for security and reliability. A separate, password-protected internal dashboard displays only aggregate, anonymized statistics and stores an administrator access token locally in the administrator's own browser; it does not expose any individual user's identity, contact details, or messages.

16. App stores

Funtasy is distributed through the Apple App Store and Google Play. When you download or use the app, those platforms may collect information under their own privacy policies, which we do not control. Our in-app disclosures (such as Apple's App Privacy details and Google Play's Data Safety section) are consistent with this policy.

17. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Last updated" date above and, where appropriate, provide additional notice in the app. Your continued use of Funtasy after an update means you accept the revised policy.

18. Contact us

If you have any questions, requests, or concerns about this policy or your information, please contact: