Your data, explained clearly.

1. Who this policy covers

This policy applies to the Larpit mobile app, larpit.net, and related services. Larpit is a pre-release service operated under the Larpit brand by Suxrob Sattorov in Uzbekistan. The service address and any required launch-region representative details must be finalized before an external beta.

Private camera-match testing is currently limited to invited adults. The current invitation and consent checks do not permit minors to submit live-match images for AI processing. Public age eligibility and regional safeguards remain under review.

2. Information we collect

• Account and profile: email, authentication provider identifiers, display name, username, avatar, cover image, bio, country, category, selected mannequin gender, and verification state.
• Social activity: posts, photos, comments, likes, reposts, saves, follows, views, reports, blocks, and notification state.
• Competition and rewards: match participation, connection events, ready state, result, score receipt, LP, season history, disconnects, Season Rewards milestones and cumulative activity, collected rewards, LC balances, referrals, gifts, and equipped cosmetics.
• Live media: real-time camera and microphone are transmitted to the matched participant. Audio is not recorded or sent to the visual judge.
• Judging images: ten still frames from each participant’s camera during a ranked round, used for automated image safety screening and visual judging. Full match video is not recorded for judging.
• Report images: an optional opponent screenshot that the reporter chooses to include in a live-match report. It is a separate, private safety-review copy, not an archive of judging images.
• Device and security: app version, device/platform signals, App Check attestation, IP-derived security signals, crash information, request identifiers, and abuse-prevention events.
• Purchases: billing-provider transaction and entitlement identifiers, purchased LC packs, subscription status and verified payment/refund events synchronized with RevenueCat. Paddle processes web checkout and Apple processes Apple In-App Purchase. Checkout providers collect billing details under their own privacy policies. Larpit does not receive your full payment-card number.
• Support: messages, reports, evidence you choose to send, and actions taken on a case.

3. How we use information

We use information to authenticate users; deliver profiles, feeds, live rooms, rankings, subscriptions, and notifications; calculate competition results; investigate reports; prevent fraud and unsafe conduct; provide support; measure reliability; and meet legal obligations.

4. Processors and international transfers

The current services include Amazon Web Services for the API, background workers, temporary in-memory judging-image processing, private report-image storage, and website delivery; Firebase and Google Cloud for authentication, Firestore data, profile/post media, App Check, and retained scheduled and account-cleanup services; Agora for real-time audio/video transport; OpenAI for image safety screening and visual judging; Apple and Google for sign-in; Apple for in-app purchases and iPhone push delivery; Paddle for web payments, billing and refunds; RevenueCat for purchase verification and subscription management; and Cloudflare for domain services. Only enabled features send data to their relevant provider. These providers may process data in countries other than yours under their applicable terms and safeguards.

For ranked judging, Larpit sends selected still frames arranged into two chronological contact sheets, configures Responses requests with storage disabled, and keeps audio, usernames, profiles, follower counts, and prior rank out of the request. OpenAI’s API retention and safety policies also apply. Deleting Larpit’s temporary images does not change a provider’s separate retention obligations or settings.

5. Retention and deletion

• New ranked rounds keep ordinary judging images in bounded memory for screening and judging, then clear the buffers. They are not saved to the database or object storage. Legacy rounds already in progress may use the previous temporary storage flow, which removes stored copies before judgment and has expiry safeguards. There is no persistent-storage fallback for new in-memory rounds.
• A screenshot explicitly included in a report is a separate private copy. Authorized safety staff can review it for up to 7 days after submission, after which it is automatically deleted. Access is denied at expiry even if background deletion has not completed. Account deletion removes report-image copies associated with either participant.
• Audio and full match video are not recorded for judging.
• Final season rankings, result receipts, LP ledgers, Season Rewards progress, and reward records are retained as account and competition history. A season ending does not delete its final results. Account deletion applies the minimization rules below; historical records do not include an archive of match videos or judging images.
• Posts and profile content remain until deleted by you or your account is deleted, subject to narrow legal and safety exceptions.
• After account deletion, Larpit may retain a minimal non-public deletion lock and one-way hashed completion record so old sessions cannot recreate the account and the deletion job can be audited without retaining your email or username.
• Safety reports made by other people and shared completed-match records may be retained in minimized, pseudonymous form for abuse prevention, disputes, legal obligations, and the other participant's history. They no longer resolve to a public Larpit profile.
• Security logs are retained only as long as reasonably needed for abuse prevention, incident response, and legal obligations.

6. Your choices and rights

You can edit profile information, control camera and microphone access, delete posts, block or report users, manage notifications, and request access, correction, export, objection, restriction, or deletion where applicable. The app provides recent-sign-in protected data export and account deletion. Deletion covers the account, profile, authored posts and owned media, private social data, and active sessions, subject to the minimized shared safety, competition, audit, and legal records described above.

Deleting a Larpit account does not automatically cancel a subscription. Manage Apple purchases in Apple account settings and Paddle purchases using the customer-portal link in your receipt or Paddle.net. See our Refund and cancellation policy.

7. Security and contact

The current beta controls include authenticated access, least-privilege service identities, encrypted transport, private evidence storage, bounded upload grants, integrity checks, and audited deletion jobs. No online system is perfectly secure. Public security and privacy email routing is not active yet; invited testers must use the contact channel provided with their invitation. Current contact status is published in the Support center.