Privacy Policy
What CapyBrian collects, why, who else sees it, and how to delete it.
Who we are
CapyBrian is operated by Max Nurney. For support or privacy enquiries, contact bosscapybrian@gmail.com. This policy applies from 2 November 2026.
What we collect
We collect only what the app needs to work.
- Account: your email address and a password (we never see or store your password in readable form), or, if you use Sign in with Apple, the name and email address Apple shares with us (which may be a private relay address).
- Profile: the name you choose, your reading interests, and whether you agreed to notifications.
- Groups: the groups you create or join, your name in each, and the invitations you send or accept.
- Playing: your care actions for Brian (feeding, cuddling, shop items), your points and Gold, Daily Read answers, and Capy Clash matches.
- Group chat: messages you send to your group, and any reports or blocks you make.
- Brian's AI replies: only in a group where they have been switched on and every member has agreed. When someone talks to Brian, the recent messages in that chat, with the senders' chosen names and the group name, are sent to OpenAI so Brian can write a reply. The reply is posted in the chat like any other message.
- Purchases: if you buy Gold, Apple takes the payment and tells us (through RevenueCat) that a purchase happened, which product it was and its transaction reference. We never see your card or Apple ID details.
- Notifications: if you allow them, a push notification token for your device.
- Technical: our hosting provider keeps ordinary server logs (such as IP address and request time) for security and reliability.
What we do not do
- We do not show advertising, sell your data, or track you across other companies' apps or websites.
- CapyBrian does not contain analytics or crash-reporting tools from third parties.
- We do not use your location, contacts, photos, camera or microphone.
- We do not send your messages to an artificial-intelligence service unless every member of your group has agreed to Brian's AI replies. You can withdraw that agreement at any time.
Why we use it
- To run your account and keep you signed in.
- To let you and the people in your group share Brian, the leaderboard, Daily Read and chat.
- To give you the Gold and items you earn or buy, and to prevent mistakes and fraud with purchases.
- To send notifications you have agreed to.
- To keep the community safe: filtering messages, handling reports and blocks.
- To write Brian's AI replies, only in a group where every member has agreed.
Who else handles it
We use a small number of companies to run the app. They handle data only for us:
- Supabase: database, sign-in and server functions. Data is hosted in Ireland (European Union).
- Apple: Sign in with Apple, App Store purchases, and delivery of push notifications.
- RevenueCat: confirms App Store purchases to us. It receives a random account identifier and purchase details, not your name or email.
- Expo: relays push notifications to Apple.
- OpenAI: writes Brian's AI replies in groups where every member has agreed. It receives the recent chat messages described above, with display names but not email addresses or account identifiers, and handles them under its own terms and privacy policy.
What other people can see
People in your group see your chosen name, your points and care activity, your Daily Read results where the leaderboard shows them, and your chat messages. Nobody outside your group sees these. We never show your email address to other players.
How long we keep it
We keep your data while your account exists. When you delete your account (Settings, Delete account) we remove your account, email, profile, interests, care and Daily Read history and chat content straight away or after the 7-day waiting period you choose. Some things stay, without your name:
- A record of Gold purchases and the Gold ledger, for accounting and to prevent fraud.
- A report about a message, if someone filed one, so we can keep the community safe.
- A blank placeholder where a deleted chat message was, so the rest of the conversation still makes sense.
- Copies in our hosting provider's backups, which expire on the provider's normal schedule. Apple and RevenueCat keep their own purchase records under their own policies.
Your choices and rights
You can change your name and interests, turn notifications on or off in your phone settings, leave a group, and delete your account at any time in Settings. You can also ask us at bosscapybrian@gmail.com to see, correct, export or delete the data we hold about you. Depending on where you live you may have further rights, including to complain to your local data-protection authority. We will answer within the time the law requires.
Brian's AI replies need the agreement of every member of the group. You can agree or withdraw from the chat menu at any time; if anyone withdraws, the AI replies stop for the whole group and Brian goes back to his written lines, which do not use AI.
Children
CapyBrian is intended for people aged 13 and over. If you believe a younger child has created an account, write to bosscapybrian@gmail.com and we will delete it.
Security
Data is encrypted in transit. Access to your data is limited by database rules so that people can only reach their own information and that of their own group. No system is perfectly secure, so please choose a strong password.
Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect.
This website
This website is a few static pages. It sets no cookies, has no analytics, no advertising and no forms. It is hosted by Vercel, which keeps ordinary server logs (such as IP address and request time) for security and reliability.