Privacy Policy

This Privacy Policy describes how 369 Recovery LLC (operating under the brand name Empower Recovery, and referred to as "we", "us", or "our") collects, uses, and discloses your information when you use the mobile application Chaos & Recovery (the "App").

1. Information We Collect

We collect the minimum information needed to run the game:

• Display name — the name you choose for in-game identification (e.g., "90-Day Dave"). Stored on your device and on our servers while a game session is active.
• Optional Google account info — if you sign in with Google, we receive your name, email address, and profile picture URL via Emergent's authentication service. Used only for account identification and persistence.
• Game state data — rooms you create or join, cards in your hand, submissions, votes, scores. Stored in our MongoDB database to enable multiplayer.
• AI-generation prompts — when you use the AI Remix or Burning Desire features, we send the chosen themes and raunchiness setting (no personal data) to Anthropic's Claude API via Emergent's LLM gateway.
• Device information — basic technical metadata (OS, app version) for crash reporting and debugging.

2. What We Do NOT Collect

• We do not collect precise location data.
• We do not sell or rent your data to third parties.
• We do not use third-party advertising networks.
• We do not track you across other apps or websites.
• We do not require any health, medical, or recovery-status information — and we strongly recommend you don't share any in your display name either.

3. How We Use Your Information

Solely to operate the game: connect you to multiplayer rooms, deal you cards, tally scores, generate AI cards on request, and persist your profile if you signed in.

4. Sharing Your Information

Your display name and profile picture are visible to other players in the same game room. Your card submissions are revealed to other players during voting and results phases (this is the game).

We share data with these service providers strictly to operate the App:

• MongoDB Atlas — game state storage
• Anthropic / Emergent LLM gateway — AI card generation
• Emergent Authentication — Google sign-in

5. Data Retention & Deletion

Game rooms are deleted automatically a short time after the last player leaves. Your account data (if you signed in) is retained until you request deletion.

To delete your account or any stored data, email us at [email protected] from the email address tied to your account. We'll comply within 30 days.

6. Children's Privacy

The App is intended for users 18 years of age or older. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us immediately and we will delete it.

7. Your Rights (GDPR / CCPA)

You have the right to access, correct, port, or delete your personal data, and to opt out of any data sharing. Email [email protected] to exercise these rights.

8. Security

We use industry-standard practices (HTTPS, secure cookies, hashed sessions) to protect your data. No system is 100% secure — please don't share sensitive personal info in display names or in-game.

9. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects the latest version. Material changes will be communicated in-app.

10. Contact

369 Recovery LLC
d/b/a Empower Recovery
[email protected]