Version: 1.2
Effective date: 1 August 2026
Last updated: 1 August 2026
Publisher: Stratara Ltd., Israeli company registration number 517197182
Registered office: Dan 14, Ness Ziona, 7412110, Israel
We added a clearer explanation of the short-lived server copies used to operate and debug GOSSIP. Conversation text, internal director notes, and detailed records of AI requests and results are kept for up to 30 days. Generated pictures available in the protected debug interface are kept for up to 7 days. A small number of authorized people may view this information when needed to diagnose problems. This information is not used for AI training, and deleting an account deletes these server copies immediately.
This Privacy Policy explains how Stratara Ltd. collects, uses, shares, and retains information when you use GOSSIP, our iOS mobile game.
In this Privacy Policy, "Stratara," "we," "us," and "our" mean Stratara Ltd. "GOSSIP," "the app," and "the Services" mean the GOSSIP iOS mobile application and related server-side services we operate for the app.
GOSSIP is a single-player drama and gossip simulation game. You play a fictional character in a fictional friend group dealing with an ongoing fictional crisis. You exchange text messages with AI-generated characters through an iMessage-style direct-message interface and view an Instagram-style social feed populated by AI-generated posts.
GOSSIP is not a multiplayer game. It does not offer user-to-user messaging, public profiles, community posts, friend lists, shared rooms, matchmaking, or other social features that allow users to interact with each other.
All scenarios are pre-authored by Stratara. AI systems improvise dialogue, images, and other in-game content within those scenarios.
This Privacy Policy covers how we handle information in connection with GOSSIP. It is separate from our Terms of Service.
The Terms of Service govern subjects such as acceptable use, subscriptions, AI-output terms, intellectual property, no-reliance language, disclaimers, and dispute resolution. This Privacy Policy focuses only on privacy and data handling.
At sign-up, GOSSIP requires you to tick a checkbox acknowledging links to both the Terms of Service and this Privacy Policy before sign-in is enabled.
This Privacy Policy is governed by the laws of the State of Israel, consistent with the Terms of Service. This does not limit any mandatory privacy rights you may have under the laws of your country, state, province, or territory.
GOSSIP is offered only to users who meet the minimum age shown for GOSSIP on the Apple App Store in their country or region, or any higher minimum age required by applicable law.
App Store age ratings for GOSSIP may vary by country or region. Users will only see the age rating that applies to their country or region on the App Store.
Depending on territory, the displayed App Store age rating may appear as 15+, 16+, 18+, or a similar local equivalent.
GOSSIP is distributed only through the Apple App Store and is available on iOS only.
GOSSIP is not offered in the following jurisdictions, which are blocked at the App Store level:
This Privacy Policy is written for users in the jurisdictions where GOSSIP is available, including the United States, Canada, Australia, New Zealand, Japan, South Korea, Singapore, Hong Kong, India, Brazil, Mexico, Argentina, Chile, Colombia, Peru, South Africa, Turkey, Israel, and other App Store jurisdictions not listed above.
This Privacy Policy is not drafted as a GDPR, UK GDPR, or EU/UK privacy notice because GOSSIP is not offered in the European Union or the United Kingdom.
GOSSIP is not directed to children or to users who are below the applicable App Store age rating for their country or region. We do not knowingly collect information from users who do not meet that applicable age requirement. If we learn that we have collected information from such a user, we will delete that information.
See Section 11 for more detail.
GOSSIP uses three different data-handling patterns:
This distinction matters. Stratara can access and delete the server-side information it stores. Stratara cannot access or delete the app's local data after it has remained only on your device.
We store the following information on Stratara-controlled server systems hosted through Supabase and related infrastructure:
| Category | What it includes | Purpose |
|---|---|---|
| Account information | Email address | Account identification, sign-in, account recovery, and essential service communication |
| Account identifier | Account UUID generated at sign-up | Unique user identification across server operations |
| Subscription information | Subscription tier | Entitlement enforcement and feature gating |
| Usage counters | Daily turns, monthly media, onboarding turns, and similar subscription counters | Enforcement of subscription-tier limits |
| Push notification token | Expo push token, if you grant push-notification permission | Sending push notifications to your device |
| Conversation and gameplay text | Your messages, AI-character replies, and related conversation context | Operating the game and diagnosing problems |
| Director notes | Internal instructions used to guide the next AI-generated turn | Operating the story and diagnosing why a response was produced |
| Detailed AI activity | What the server sent to an AI provider and what it received back, including errors and retries | Diagnosing failures and incorrect responses |
| Temporary generated pictures | Pictures generated for the gameplay features and shown in the protected debug interface | Diagnosing picture-generation and gameplay problems |
| User-reported message content | AI-generated message content you submit through the long-press report flow | Trust-and-safety review |
| Reported message metadata | Message ID, message type, NPC ID, scenario ID, and report timestamp | Trust-and-safety review |
We process the following information to provide GOSSIP, but we do not persistently store it on Stratara's servers:
| Category | Processing flow | Stratara persistence |
|---|---|---|
| Voice-note audio | When you choose to send a voice note, its audio is forwarded to Groq for transcription, with Replicate used as a fallback if Groq is unavailable | Transit-only at Stratara; the audio is not written to disk, logged, or retained by Stratara after transcription |
| Apple StoreKit receipt payload | Receipt data is verified through Apple's App Store Server API | Not stored by Stratara after verification; only the resulting subscription tier is retained |
Prompts sent to AI providers may still be retained by those providers as described in Sections 6, 7, and 8.
The app stores the following information locally on your device:
This local information may be lost if you delete the app, change devices, clear app storage, or restore your device. The short-lived server copies described in this policy are for operation and debugging; they are not a cloud backup and cannot restore your game.
Voice-note audio files and their transcripts are also stored locally on your device. When you choose to send a voice note, a copy of the audio is transmitted for transcription as described in Sections 3.3 and 6.5.
GOSSIP does not request access to your camera, photo library, Apple's Speech Recognition service, location, or contacts. GOSSIP requests microphone access only when you choose to record a voice note.
GOSSIP does not collect health and fitness data, payment-card numbers, bank-account details, precise location, coarse location, address-book contacts, browsing history, search history, photos or videos from your device, or multiplayer gameplay content.
GOSSIP does not use advertising identifiers, third-party advertising SDKs, or cross-app tracking.
We collect your email address when you create an account through Supabase authentication.
If you choose to record and send a voice note, you provide the audio recording for transcription. Recording is optional and begins only after you use the voice-note control and grant microphone permission through iOS.
We collect reported message content only when you choose to submit a report. To submit a report, you long-press an AI-generated message and use the in-app report flow. When you submit the report, GOSSIP sends the reported message content and related metadata to Stratara for review.
Submitting a report does not guarantee that Stratara will take any specific action.
We generate an account UUID when you sign up.
We calculate and store subscription usage counters based on your use of paid or limited features. These counters are used to enforce limits such as daily turns, monthly media, and onboarding turns.
We receive a push notification token if you grant notification permission through iOS. If you do not grant permission, we do not receive a push token for that device.
When you subscribe through Apple, Apple handles payment processing. Stratara does not receive your full payment-card details.
Stratara verifies Apple StoreKit receipt payloads through Apple's App Store Server API. After verification, we store the resulting subscription tier for your account.
When you send a message to an AI character, GOSSIP sends the prompt to Stratara's server, which forwards it to xAI to generate the AI character's response.
When GOSSIP generates certain images or screenshots, GOSSIP sends image-generation prompts to Replicate or xAI, depending on the feature.
When you send a voice note, GOSSIP sends its audio to Stratara's server, which forwards it to Groq for transcription or to Replicate as a fallback. Stratara does not send your email address, account UUID, or advertising identifier with the audio to either transcription provider.
Stratara keeps prompts and AI results in protected debugging records for up to 30 days. Stratara does not persistently store voice-note audio. The AI providers may retain information as described in this Privacy Policy.
We use information only for the purposes described below.
We use your email address and account identifier to:
We use subscription tier and usage counters to:
Account deletion is separate from subscription cancellation. If you delete your GOSSIP account, that deletes server-stored account data, but it does not cancel any active Apple subscription. You must cancel your subscription separately through Apple's subscription-management tools.
We use prompts in transit to provide AI gameplay features, including:
Stratara keeps conversation text and detailed records of AI requests and results for up to 30 days so it can operate the game and diagnose problems.
If you grant notification permission, we use your push notification token to send notifications to your device. You can turn off notifications at any time in iOS settings.
We use user-reported message content and reported message metadata to review AI-generated content that users choose to report.
A small number of authorized people may also view the protected debugging records when needed to diagnose a problem. This access is limited to operating, securing, and debugging GOSSIP.
We use limited server-side information to:
We do not use your information for third-party advertising.
We do not sell your personal information.
We do not share your personal information for cross-context behavioral advertising.
We do not use your prompts, messages, conversation history, reported content, or AI-generated output for AI training.
We do not routinely review gameplay. Authorized people may review protected debugging records when needed to diagnose a problem, and may review content you choose to report.
GOSSIP includes AI-generated characters, messages, images, screenshots, avatars, and in-game social-feed content. These characters are fictional. They are not real people.
GOSSIP also includes in-app AI disclosure surfaces. An "AI content in this app" link on the name-entry screen and an "About this app" item in the settings menu open a modal explaining that characters are AI-generated, are not real people, should not be relied on for professional advice, and that users in crisis should contact appropriate crisis or emergency services.
This Privacy Policy does not restate all Terms of Service or in-app safety language. It describes the data flows behind those AI features.
When you send a text message to an in-game AI character:
Stratara keeps conversation text, internal director notes, and detailed AI request and result records for up to 30 days. This information is linked to your account and is available only through protected debugging tools.
xAI receives user prompts and conversation-thread context through the previous_response_id chain used by the Responses API. xAI retains Responses API thread data for 30 days under the current xAI retention policy for that feature.
Stratara does not use your prompts, messages, conversation history, or any AI-generated output associated with your account to train, fine-tune, or evaluate any machine-learning model operated by Stratara or any third party. Our AI providers (xAI and Replicate) commit contractually not to train on the data they receive from GOSSIP.
This is a firm commitment. Protected human access for operating and debugging the app does not permit using gameplay to train, fine-tune, or evaluate machine-learning models.
GOSSIP uses AI image-generation features for in-game images, avatars, and screenshots.
Depending on the feature:
When an image-generation feature is used:
Stratara keeps detailed AI request and result records, which can include image-generation prompts, for up to 30 days. Generated pictures available in the protected debug interface are kept for up to 7 days.
Replicate removes API prediction input parameters, output values, output files, and logs after one hour by default.
Voice notes are optional. When you choose to record and send one:
Stratara does not write the audio to disk, log it, or persistently retain it after the transcription request is completed. Stratara does not use voice notes for speaker identification, voice profiling, advertising, or AI training.
Groq states that it does not retain customer data for inference requests by default, but it may temporarily retain inputs and outputs for up to 30 days when needed to investigate suspected abuse or troubleshoot service failures unless Zero Data Retention is enabled. Replicate removes API prediction input parameters, output values, output files, and logs after one hour by default.
If you long-press an AI-generated message and submit a report, the reported message content and associated metadata are transmitted to Stratara.
The metadata may include:
Stratara uses this information for trust-and-safety review. Submitting a report does not guarantee any specific action, response, or outcome.
We share information with service providers only as needed to operate GOSSIP.
| Provider | Role | Information received |
|---|---|---|
| xAI | Primary language model provider through Grok 4.1 via Responses API; fallback image generator through Grok Imagine | User prompts and conversation-thread context through the previous_response_id chain; image-generation prompts for fallback image features |
| Groq | Primary voice-note transcription provider through its Whisper API | Voice-note audio, without the user's email address, account UUID, or advertising identifier |
| Replicate | Image model hosting for Seedream 4 photos and avatars and Nano Banana screenshots; fallback voice-note transcription through Whisper | Image-generation prompts; voice-note audio when the transcription fallback is used, without the user's email address, account UUID, or advertising identifier |
| Supabase | Authentication and database hosting | Email address, account UUID, subscription state, usage counters, push token, reported messages, conversation text, director notes, detailed AI activity, temporary generated pictures, and related metadata |
| Amazon Web Services | Application server hosting through App Runner in us-east-1 | App request traffic and the information needed to process it; infrastructure logs according to AWS logging configuration |
| Apple | App Store distribution, StoreKit payment processing, receipt verification, and push-notification delivery | Payment information handled by Apple; StoreKit receipt payloads; push payloads as applicable |
| Expo | Expo Application Services and Expo Push Service | Push notification payloads and push tokens |
These providers may process information only for the purposes of providing their services to Stratara, subject to their applicable contracts and policies.
xAI, Groq, and Replicate are AI providers. They receive prompts or voice-note audio only to provide the AI features described in this Privacy Policy.
xAI and Replicate contractually commit not to train on the data they receive from GOSSIP.
Apple independently processes information for App Store distribution, payments, subscriptions, device-level push delivery, and related Apple services. Apple's own privacy terms apply to Apple's processing.
Stratara does not receive full payment-card details from Apple.
Stratara does not sell personal information.
Stratara does not share personal information for cross-context behavioral advertising.
Stratara does not use advertising SDKs, data brokers, or third-party ad networks in GOSSIP.
We may disclose information that we store if we are legally required to do so, or if disclosure is necessary to protect the rights, safety, or security of Stratara, users, or others.
We retain server-side information as follows:
| Information | Retention |
|---|---|
| Email address | Duration of the account plus a reasonable period after deletion |
| Account UUID | Duration of the account |
| Subscription tier | Duration of the account |
| Subscription usage counters | Duration of the account; counters reset periodically according to business logic |
| Push notification token | Replaced on each new token issuance; cleared on account deletion |
| Conversation text | Up to 30 days; anonymous counts and timing information may remain after the text is removed |
| Director notes | Up to 30 days |
| Detailed AI requests, results, errors, and retries | Up to 30 days |
| Generated pictures available in the debug interface | Up to 7 days |
| User-reported message content | 2 years |
| Reported message metadata | 2 years (same period as reported message content) |
| Apple StoreKit receipt payload | Not stored by Stratara after verification; only the resulting subscription tier is retained |
Stratara keeps conversation text and detailed AI request and result records for up to 30 days as described in Section 8.1. Stratara does not persistently store voice-note audio.
However, AI providers may retain data as follows:
previous_response_id chain.When you delete your account, Stratara deletes the server-stored information it controls, subject to legal retention requirements. Account deletion does not necessarily delete data held by AI providers during their short provider-retention windows.
Conversation history, AI-generated images and screenshots, game progression, player name, crisis-intro data, long-term memory, chat channels, message histories, voice-note audio files, and voice-note transcripts are stored locally on your device. Voice-note audio is also transmitted for transcription as described in Section 6.5.
Stratara keeps the limited, short-lived server copies described in Sections 3 and 8.1, but does not provide cloud backup of the local game data.
This data may be lost if you:
Stratara does not provide cloud backup of game content.
GOSSIP provides in-app account deletion from the settings menu.
Account deletion removes server-stored user data through Supabase foreign-key cascade deletion, except for information Stratara is legally required to retain.
Account deletion is permanent for server-stored account data. It does not cancel an active Apple subscription. You must cancel subscriptions separately through Apple.
We use technical and organizational safeguards designed to protect information we store and process.
These safeguards include:
No app, server, provider, or transmission method is perfectly secure. We do not guarantee that information will never be accessed, disclosed, altered, or destroyed by unauthorized parties.
If we identify a security incident that requires user notice under applicable law, we will provide notice as required.
You can delete your GOSSIP account in the app settings menu.
Account deletion removes server-stored user data, except information Stratara is legally required to retain. It does not cancel an active Apple subscription.
Subscriptions are managed by Apple. To cancel an active subscription, use Apple's subscription-management tools in iOS.
Deleting your GOSSIP account does not cancel your Apple subscription. If you want to stop future subscription charges, cancel the subscription through Apple.
Push notifications are optional.
You can turn off push notifications at any time in iOS settings. If you turn off notifications, GOSSIP will no longer be able to send notifications to that device.
GOSSIP requests microphone access only when you choose to record a voice note. You can deny or later revoke microphone access in iOS settings; if you do, voice-note recording will not be available.
GOSSIP does not request camera, photo library, Apple's Speech Recognition service, location, or contacts access. If GOSSIP adds any such permission in the future, Stratara will update this Privacy Policy and the relevant in-app notices before collecting that data.
You may contact us to request access, correction, deletion, or other privacy assistance for information Stratara stores about you.
Stratara can provide or delete the short-lived server copies it controls, subject to identity verification and legal exceptions. Stratara cannot access, correct, or delete the separate game data that remains only on your device.
To make a request, contact us at [email protected].
We may need to verify your account before fulfilling a request.
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, may provide you with specific privacy rights, subject to legal limitations and exceptions.
These rights may include:
Stratara does not sell personal information and does not share personal information for cross-context behavioral advertising.
Stratara does not ask you to provide sensitive personal information. If you choose to include sensitive information in a prompt or report, it may appear in the short-lived records described in this Privacy Policy and is used only to provide, secure, and debug the requested feature or to review the report you submitted.
Residents of other US states may have privacy rights under applicable state consumer privacy laws. These rights may include the right to access, correct, delete, obtain a portable copy of personal information, opt out of targeted advertising, opt out of sale, opt out of certain profiling, or appeal a denied request.
Stratara does not sell personal information, does not use targeted advertising, and does not use personal information for profiling that produces legal or similarly significant effects.
You may submit requests by contacting us at [email protected].
Depending on where you live, you may have privacy rights under local law, including rights to access, correct, delete, withdraw consent where processing is based on consent, object to certain processing, or lodge a complaint with a local authority.
Nothing in this Privacy Policy limits mandatory privacy rights you may have under applicable law.
Some processing is necessary to provide GOSSIP. For example:
If you do not want prompts sent to AI providers, you should not use AI gameplay features. If you do not want audio sent to a transcription provider, do not record or send a voice note. If you do not want reported content sent to Stratara, do not submit a report.
GOSSIP is offered only to users who meet the applicable App Store age rating shown for their country or region, subject to any higher minimum age required by applicable law.
Stratara does not knowingly collect information from users who do not meet that applicable age requirement. If Stratara becomes aware that it has collected information from such a user, Stratara will delete that information.
GOSSIP is not directed to children or to users who are below the applicable App Store age rating for their country or region, and Stratara does not offer parental-consent account creation for younger users.
Stratara is an Israeli company.
GOSSIP's primary server-side infrastructure is hosted in the United States, including Supabase PostgreSQL in us-east-1 and AWS App Runner in us-east-1.
Your information may be processed in Israel, the United States, and other countries where Stratara's service providers operate.
If you use GOSSIP from outside Israel or the United States, you understand that your information may be transferred to and processed in countries that may have privacy laws different from those in your jurisdiction.
Because GOSSIP is not offered in the European Union or the United Kingdom, this Privacy Policy does not describe GDPR or UK GDPR transfer mechanisms.
Mandatory local rights continue to apply where required by law.
We may update this Privacy Policy from time to time.
If we make material changes, we will provide notice in a reasonable way, such as through the app, the App Store listing, or the policy page. If a change requires your renewed acknowledgment or consent under applicable law or Apple requirements, we will request it before the change applies.
We will update the effective date when we publish a new version.
For privacy questions or requests, contact Stratara at:
* * *
If you have any questions, please contact us at [email protected].
Related documents:
Gossip Terms of Service