Privacy Policy

The short version

• There is no sign-up. Baddi never asks for your name, your email, your birthday, or a password to work.
• Your Pal, your credits and your progress live on your phone first. The app works with no network at all.
• There is no analytics, no crash reporting and no advertising SDK in Baddi. Not a single one. Nobody is building a profile of you from this app.
• The only things that leave your device are the save file that backs up your Pal, a one-line record of finished arena matches, and — only while you are actively searching — a deliberately rounded location.

What stays on your phone

Almost everything. Baddi writes three files into your device's own storage, and none of them leave it unless the cloud backup described below is switched on:

• Your Pal — its name, colours, shape, personality, which elements it belongs to, which moves it knows, and its four care meters (Food, Clean, Joy, Energy).
• Your wallet — credits you have earned, and the cosmetics you have unlocked or bought.
• Your progress — arena wins and losses, your login streak, and today's missions.

Deleting the app deletes all of it. No copy is left on your phone.

What reaches our servers

Baddi keeps a backup of your Pal so that a lost or replaced phone does not mean a lost pet. To do that without a login screen, the app creates an anonymous account the first time it runs — a random identifier with no name attached to it. That identifier is the only handle we hold for you.

Against that identifier we store:

• Your Pal save file. The same contents listed above, plus your running step total and the last time you opened the app. This is what lets your Pal come back to you on a new phone.
• A line per finished arena match. Who won, and both players' Pal name, level, shape and elements. Nothing about the person behind either Pal, and nothing said during the match.
• Your purchased credit balance, if you have ever bought credits. This one is deliberately kept on our side — see Purchases below for why that is good for you.

Every one of these rows is locked to your account at the database level. Another player's app cannot read your save, your matches or your balance, and neither can anyone who is not you.

Location, and Nearby Match

Baddi asks for your location for exactly one feature, and only at the moment you tap to search for someone nearby. If you never use Nearby Match, the app never asks.

When you do search, your position is rounded before it is shared — to roughly a kilometre if you search wide, about a hundred metres at the middle distances, and about ten metres at the tightest setting. The rounding is scaled to the radius you picked, so it is always too coarse to point at a doorstep. That rounded position is broadcast to the other people searching in the same pool, and it is not written to our database — it exists only for as long as your search is running, and it is gone when you stop.

We never store a location history, and we never see where you have been.

Camera

Your Pal can watch you move, using the front camera. That video is processed entirely on your phone, in memory, to work out what your Pal should do about it. No frame is stored, and no frame is sent anywhere. The camera runs only while you have the camera feature open.

Steps

If you take your Pal for a walk, the app reads your step count and your Pal gets a little happier. Your phone reports a total, not a route, and we never see your pace, your path or your workout.

One thing worth being straight about: that running step total is part of the Pal save file described above, and so it is included in the cloud backup. It is a number that goes up, sitting beside your Pal's name. It is not a movement history, but it is not purely local either, and we would rather say so than let a permission prompt imply otherwise.

Bump Match

When you bump phones with a friend, the two devices talk directly to each other over your local network. That match does not pass through our servers and is not stored by us — only the result line described above is.

Purchases

Credit purchases are handled entirely by Apple. We never see your card, your name or your billing address — Apple does not give them to us.

What we do receive is Apple's confirmation that a specific transaction was paid, which we check directly with Apple before adding credits to your account. We keep the transaction identifier, the product, and Apple's confirmation, so that your purchased credits can be restored to a new phone and so that nobody can forge a purchase. That record is read-only from your app: no phone can write to it, including yours.

Refunds are Apple's to grant, under their policy, not ours. Because credits are bought through the App Store, a refund is requested from Apple, and we are told about it.

The same applies if you subscribe to Baddi+: Apple tells us whether the subscription is active so the app knows to unlock it, and we keep that alongside the transaction record. We still never see your payment details. What the subscription includes, how it renews and how to cancel it are set out in the Terms of Service.

Linking an account, or not

You can leave your anonymous account exactly as it is forever. If you would rather be able to recover your Pal on a new phone without the anonymous identifier, you can optionally attach an email address, an Apple Account, or a Google account. That is the only circumstance in which we ever hold an email address for you, and it is used to sign you back in and nothing else.

If you use Sign in with Apple to link, you choose what — if anything — Apple shares with us, including Apple's private relay address if you prefer it.

Deleting your data

There is no delete button in the app yet, and that is a gap rather than a policy. Here is what you can do today:

• Delete the app to remove everything on your phone immediately. If you never linked an email or a social account, the backup row on our side is keyed to an identifier that is now gone from your device and exists nowhere else — nobody, including us, can tie it back to you.
• Email us at hello@gnarlux.com and ask. If you linked an email address, that is enough for us to find you. If you did not, tell us your Pal's name, the approximate date you installed, and anything else distinctive, and we will do our best to locate the row — though an anonymous identifier is anonymous by design, and we may not be able to.

We will action a deletion request within 30 days, and we will write back to confirm.

Children

Baddi is not directed at children under 13, and we do not knowingly collect personal information from them. The app never asks for a name, an email address or a birthday to function, so it gathers almost nothing about anyone of any age. If you believe a child has linked an email address to an account, write to us and we will remove it.

Where your data is kept

Backups and match records are held with Supabase, our database provider, and App Store transactions are confirmed with Apple. We do not sell your data, we do not share it with advertisers, and we do not use it to train anything — there is no third party in Baddi other than those two.

Changes to this policy

If what the app collects changes, this page changes with it, and the date at the top changes too. If a change is significant, the app will say so in the release notes rather than quietly updating a page nobody re-reads.

Contact

Questions, corrections, or a deletion request: hello@gnarlux.com