Version 2026-08-30 · in force from 2026-08-30.
This version string is the one the app records when you accept this policy.
Caraidiz is a game. You record a short, silent video of yourself acting out a charade, and other people try to guess it. That means we handle video of your face, so this policy is written in plain language, and it describes what the app actually does today rather than what sounds best.
The operator of Caraidiz and the controller of your personal data is Caraidiz Inc., c/o SOHO Workspaces, 447 Broadway, 2nd Floor, New York, NY 10013, United States ("Caraidiz", "we", "us"). You can reach us at contact@caraidiz.com or through our contact page.
| What we handle | Why | Who else sees it | How long |
|---|---|---|---|
| Email address and password | To create your account, sign you in and reset your password | Supabase (our database, authentication and storage provider). We never see your password in readable form. | Until you delete your account |
| Handle, age, gender, app language, referral code | Your profile, the 16+ rule, and showing the game in your language | Supabase. Your handle, pictures, wallet and game stats are visible to every signed-in player. Your email, age and gender are not — the database refuses to serve those three columns to any account but your own. | Until you delete your account |
| Your videos ("caras") — video you record in the app — front camera by default, rear camera if you flip it — up to 20 seconds, no sound recorded | They are the game | Mux (video hosting, transcoding and delivery) | Until you delete the cara or your account. Deleting your account removes the videos from Mux first and fails safely if it cannot; deleting a single cara removes it from Caraidiz immediately and requests deletion from Mux, and we retry manually if that request fails. |
| Profile picture and cover photo | Your profile | Supabase Storage. These files sit in a public bucket: anyone with the link can open them, signed in or not. | Until you replace them or delete your account |
| Comments, likes, follows, blocks, private lists | The social side of the game | Supabase. Comment text is only shown to people who have already solved that cara (and to the cara's owner); your follower and following lists are open to any signed-in player. | Until you delete your account |
| Gameplay records: guess attempts, timings, clues bought, coins and diamonds, streaks, challenge progress, badges, and one record per cara you watch per day | To run the game, pay coins correctly, build leaderboards and stop cheating | Supabase | Indefinitely if you do nothing; deleted with your account — see How long we keep things |
| Coin purchases: which pack you bought, when, and the coins it credited | To credit your wallet, keep the coin ledger correct, and help you if a purchase goes wrong | Apple takes the payment and holds the payment details; we receive only confirmation that a purchase happened and what it was | Until you delete your account. Apple keeps its own transaction records under its policies. |
| Reports you file, and moderation records about you | Safety and enforcement | Supabase; Resend delivers the alert email to us | Moderation alerts about you: indefinitely, including after you delete your account. Reports you filed: deleted with your account. |
| Consent records: what you agreed to, which version, and when | So we can show your choices were respected | Supabase | Append-only while your account exists — never edited. Deleted with your account. |
| Advertising identifier and ad-consent choices | To show the ads that keep the game free | Google (AdMob and the User Messaging Platform), and Apple's SKAdNetwork. The advertising identifier never reaches our servers. | Governed by Google and Apple |
| Playback diagnostics: how smoothly a video played, on what kind of device | To find and fix playback problems | Mux Data | Governed by Mux. You can switch this off in Settings. |
Caraidiz is not for children. You must be at least 16 to have an account. We ask your age when you set up your profile, and our database refuses to create a profile for anyone under 16 or for anyone who does not state an age — that rule is enforced on the server, so no version of the app can skip it.
This is a self-declared age check. We do not verify identity documents, and — importantly for a product that handles video of faces — we do not run age-estimation software on your face or on anything else.
If you believe someone on Caraidiz is under 16, report their profile in the app (the "Under 16" reason) or email contact@caraidiz.com. We review such reports and remove accounts that break the age rule, along with their content. If you are a parent or guardian and believe your child has created an account, contact us and we will delete it.
Which of these are required: email, password, handle, age, gender and language are all required to create an account — the account cannot be created without them. Everything else is optional, and you can use Caraidiz without ever posting a cara.
Other users can report you or your caras. When that happens we store the report, and — from the first report about you or one of your caras — we assemble an alert for our moderation mailbox that contains your handle, your email address, a link to the reported content, and the handles and reasons of the people who reported you. If someone you had blocked reports you, the alert records that too, so we can spot retaliatory reporting.
If you refer someone, or are referred by someone, our coin ledger records the link between the two accounts.
When your phone talks to our servers, to Mux or to Google, those providers necessarily see technical connection data such as your IP address, the time of the request, and your device and app version. No table Caraidiz designed stores an IP address, device identifier, user-agent string or location — there is no such column anywhere in our schema. Our sign-in provider keeps its own security log of sign-in events, which records an IP address, and Google, Mux and Resend keep their own request logs, retained under their own policies rather than merely seen in passing. Google in particular derives an approximate (city-level) location from your IP address in order to serve ads. We do not receive that location, and we build no profile of you from any of it.
This is a social app, so a lot of it is public by design. We would rather be blunt about exactly how much.
Visible to every signed-in player, for every account: your handle, profile picture and cover photo, your app language, your coin balance, diamond balance and lifetime coins earned, your referral code and who referred you, your login and guess streaks, the total likes you have received, the date you last opened the app, and the date you joined.
Never visible to other players: your email address, your age and your gender. The database withholds those three columns from every account but your own.
A cara is a video of a person acting. If anyone other than you appears in it — a friend, a flatmate, someone walking past — then you are putting their image on the internet, not just your own.
Caraidiz is free and is paid for by advertising. You see a full-screen ad occasionally between caras, and you can choose to watch a rewarded ad to earn coins.
Before any ad code starts, the app runs Google's User Messaging Platform consent flow, and on iOS it then shows Apple's App Tracking Transparency prompt. The advertising SDK does not start until that flow has finished.
We record the outcome of your ad-consent choice in our consent ledger. We do not receive the contents of the ads you are shown, and we are not told who you are by the ad network.
You can remove the ads shown between games with a one-time purchase; the opt-in rewarded ads that pay coins stay. Apple processes that purchase and we receive only confirmation that it happened — never your card or billing details.
When a video plays, the app can send playback-quality information to Mux Data — start-up time, stalls, errors, and the player, device model, operating system and app version. The identifier sent with it is the cara's identifier: never its title, and never the answer. No Caraidiz account identifier is attached.
Mux's software also stores a random identifier for the installation on your device so that playback events from the same install can be grouped. That identifier is not linked to your account. It is removed when you uninstall the app; it is not removed by signing out or by deleting your account.
You can turn diagnostics off at any time in Settings → Share playback diagnostics. Your choice is stored against your account, so it follows you to a new device or a reinstall, and switching it off stops the reporting immediately, mid-video.
Caraidiz records video of your face. It does not analyse it.
We perform no biometric processing of any kind: no face detection, no facial recognition, no face embeddings, no face templates or "faceprints", no scan of face or hand geometry, no identification or verification of a person from an image, no emotion, age or demographic estimation, and no derived biometric identifier of any kind — not in the app, and not on our servers.
Stated against the specific tests some laws use: we do not collect or capture a scan of face geometry or any biometric identifier or biometric information; we do not create a biometric template; and we do not process facial images for the purpose of uniquely identifying a natural person. Because we never process your face for identification, the video is ordinary personal data to us, not special-category or biometric data. We do not sell, lease, trade or otherwise profit from biometric data, because we do not have any.
This is verifiable rather than aspirational: the application contains none of the frameworks such processing would require, on the device or on the server.
One honest caveat about our video provider. The thumbnail images shown in the app are produced by Mux using an automated cropping algorithm that picks an area of interest in the frame. Mux's public documentation does not state whether that algorithm detects faces. We receive nothing from it except a cropped image, we store no output from it, and no template, embedding or identifier of a person is created for us or given to us.
A cara can be public, or private to a list of people you choose.
Please read this before posting anything sensitive. Videos are delivered from our video provider's content network. Today those delivery links are not individually access-controlled: the "private" setting governs who can find and play a cara inside the app, not who could play it — or pull a still frame from it — if they obtained the underlying delivery link directly. We are moving to signed, expiring playback links. Until that work is finished, please do not post anything to Caraidiz that would harm you if it became public.
The same applies to your profile picture and cover photo: they are stored in a public bucket and can be opened by anyone who has their address.
We do not sell your personal data for money, and we do not give it to data brokers. Advertising is the one place where data about you leaves us for a commercial purpose; that is described in section 6 and, for California, in section 18. Otherwise we use the following providers, only for the purposes listed:
| Provider | What it does for us | What it receives |
|---|---|---|
| Supabase | Database, authentication, file storage and our server-side functions | Everything stored on our servers, as listed in section 1 |
| Mux | Receives, transcodes, stores and delivers your videos; generates thumbnails | The video file itself; an identifier for the cara and for the account that posted it; the charade's generic category tags (for example "food", "nature") and whether the cara is private. Not your handle, not your email, and not the charade answer. |
| Mux Data | Playback-quality diagnostics | Playback events, the cara's identifier, and player, device and app information — see section 7 |
| Google — AdMob and the User Messaging Platform | Serves the ads that keep the game free, and collects your ad-consent choices | Your advertising identifier (only if you allowed tracking), your consent choices, your IP address and the approximate location derived from it, and standard ad-request data. For its own advertising business Google acts as an independent controller, not merely as our processor. |
| Resend | Sends transactional email | Your email address; your data export when you request one; and, if you or your cara are reported, an alert to us containing your handle, your email address and a link to the reported content |
| Apple | App distribution and the App Tracking Transparency prompt | Whatever Apple's own terms describe, plus SKAdNetwork ad-attribution signals. Those attribution postbacks also reach the advertising networks Google buys from on our behalf — 51 are registered in the app for this purpose. Apple designs these postbacks so that they do not identify you. |
We may also disclose data where we are legally required to, or where it is necessary to investigate abuse, protect someone's safety, or establish or defend legal claims — see section 15.
Our providers operate internationally, and your data is processed in [HOSTING REGIONS — the Supabase project region and the Mux environment region, to be inserted]. Google, Apple and Resend process data in the countries described in their own policies, including the United States.
Where personal data is transferred out of the EEA, the United Kingdom or Switzerland to a country without an adequacy decision, that transfer is made under the European Commission's Standard Contractual Clauses (with the UK International Data Transfer Addendum where the UK GDPR applies), together with the additional safeguards described in our agreements with those providers. You can ask us for more detail about these safeguards using the contact details below.
We are going to be straightforward about this, because the honest answer is not the impressive one.
Caraidiz runs no automatic deletion schedule today. If you do nothing, we keep your account, your videos and your gameplay history indefinitely. The only deletion that happens is deletion you ask for: deleting a cara, or deleting your account. Defining and implementing retention periods per category of data is planned work, and until it exists we will not claim to have it.
You can delete your account at any time from Settings → Delete account. When you do, we delete your videos from our video provider, delete your profile picture and cover photo from storage, and then delete your account and the records that hang off it — your profile, caras, comments, likes, follows, blocks, private lists, guess history, coin ledger, watch records and consent records. If the media deletion fails for any reason, the account is deliberately not deleted, so that the whole operation can be retried rather than leaving your videos behind. If that happens the app tells you — email contact@caraidiz.com and we will finish it by hand.
What deletion does not reach, precisely:
Note the deliberate asymmetry in one direction: your consent records are deleted with your account, even though they are otherwise append-only and can never be edited. We would rather erase the proof than keep data about someone who has asked to be forgotten.
We make no automated decisions that produce legal or similarly significant effects about you, and we do no profiling for that purpose. In particular, no account is suspended and no content is removed automatically: reports raise an alert for a human, and every takedown, hiding or account removal is a human decision. If we hide one of your caras it disappears everywhere, including from your own profile, and the app does not yet tell you why. Email us and we will give you the reason and reconsider the decision. Feed ordering and leaderboards are ranked automatically, but they only affect what you see next, not your rights.
Data is transmitted over encrypted connections and stored by our providers on encrypted storage. Passwords are stored only as hashes. Access to data in our database is restricted by database-level rules rather than left to the app to enforce, and access to answers, moderation data and administrative functions is restricted to server-side code.
No service is perfectly secure, and we do not claim otherwise. If a personal-data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where the law requires it, we will notify you directly.
We may disclose personal data where we believe in good faith that it is necessary to: comply with a law, regulation, legal process or enforceable governmental request; enforce our Terms and Community Guidelines, including investigating potential violations; detect, prevent or address fraud, security or technical problems; or protect the rights, property or safety of our users, ourselves or the public, in particular where there is a risk of serious harm to a person or a child.
We assess each request on its merits and disclose only what is necessary to respond to it.
Depending on where you live you may have some or all of the following rights: to access the personal data we hold about you; to receive it in a portable format; to have it corrected; to have it deleted; to restrict or object to how we use it; to withdraw consent at any time; and not to be discriminated against for exercising any of them.
How to use them, in practice:
We respond to privacy requests within 30 days, and faster where the law requires it. We may need to verify that the request really comes from you — normally by asking you to write from the email address on the account. We do not charge for these requests. If we refuse a request, we will tell you why and how to challenge it. An authorised agent may act for you if you give them written permission and we can verify it.
If you are in the European Economic Area, the United Kingdom or Switzerland, the GDPR, the UK GDPR or the Swiss FADP applies, and the following additional information is given under those laws.
| What we do | Legal basis |
|---|---|
| Create and run your account; store and deliver your caras, comments and social actions; operate the game economy and leaderboards | Performance of a contract (Art. 6(1)(b)) — we cannot provide the service without these |
| Recording a coin purchase and crediting your wallet | Performance of a contract (Art. 6(1)(b)) — you bought something and we have to deliver it — and a legal obligation (Art. 6(1)(c)) to keep the records tax and consumer law require |
| Enforcing the 16+ minimum age | Legal obligation and our legitimate interest (Art. 6(1)(c) and (f)) in keeping children off an adult-facing UGC service |
| Recording gender | Legitimate interests (Art. 6(1)(f)) in wording streak messages correctly. It is asked once at signup, pre-set to "prefer not to disclose", and used for nothing else. The app does not yet let you change it afterwards — email us and we will change or clear it for you. |
| Preventing cheating and abuse of the coin economy; de-duplicating view counts; keeping the service secure | Legitimate interests (Art. 6(1)(f)) — specifically, running a game whose rewards are not trivially farmed, and protecting other users |
| Safety, moderation and enforcement, including keeping records after an account is deleted | Legitimate interests (Art. 6(1)(f)) in protecting users from harm and preventing ban evasion, and establishing or defending legal claims |
| Playback diagnostics | Legitimate interests (Art. 6(1)(f)) in a video app that plays properly — with an unconditional opt-out in Settings |
| Personalised advertising and access to the advertising identifier | Consent (Art. 6(1)(a)), collected through the Google UMP consent form and Apple's ATT prompt, withdrawable at any time |
| Non-personalised advertising | Legitimate interests (Art. 6(1)(f)) in funding a free service |
Where we rely on legitimate interests we have weighed them against your interests and rights, and you can ask us for that assessment. You have the right to object to any processing based on legitimate interests (Art. 21) — see section 16 for how.
Your caras show your face, but we do not process them to identify anyone (see section 8). We therefore do not process biometric data within the meaning of Art. 9, and we ask you not to post caras that reveal special-category information about you or anyone else — for example about health, religion, political opinions or sexual orientation — since if you do, you are making that information public yourself.
The app stores a small amount of information in its own storage on your device: your sign-in session token (without which you would be signed out constantly), your language choice, your playback-diagnostics choice, an ad-frequency counter, the consent strings written by Google's consent tool, a record of the last ad-consent state we mirrored (which contains your account identifier), and the installation identifier described in section 7. Everything except that last item is strictly necessary to provide the service or records a choice you made. Our website sets no cookies at all and loads no third-party scripts, tags or trackers.
[IF THE CONTROLLER IS ESTABLISHED OUTSIDE THE EEA / UK: insert the name and contact details of the Art. 27 EU representative and of the UK representative. If the controller is established inside the EEA, state where, and name the lead supervisory authority.]
You have the right to lodge a complaint with your local data protection authority. In the EEA you can find yours through the European Data Protection Board; in the UK it is the Information Commissioner's Office (ico.org.uk); in Switzerland it is the Federal Data Protection and Information Commissioner. We would appreciate the chance to address your concern first.
We have not appointed a Data Protection Officer, as we are not required to: our core activity is not large-scale monitoring of individuals, and we process no special-category data on a large scale.
This section is for California residents and is given under the CCPA as amended by the CPRA.
| Statutory category | Collected? | What, specifically |
|---|---|---|
| Identifiers | Yes | Account identifier, handle, email address, referral code |
| Customer records information | Yes | Email address, and the photo and video content you upload |
| Protected classification characteristics | Yes | Age and gender, collected once at signup |
| Commercial information | Yes | Coin and diamond ledger, clue purchases, and your in-app purchase history (which coin pack, when, and the Apple transaction identifier). No payment instruments: Apple takes the payment and we never receive card, bank or billing data. |
| Internet or network activity | Yes | Guess attempts, caras watched per day, likes, follows, in-app actions |
| Geolocation data | Not by us | We collect none. Google derives approximate location from your IP address for advertising. |
| Audio, electronic, visual or similar information | Yes — visual only | Your silent videos and profile images. No audio is ever recorded. |
| Biometric information | No | We create no faceprint, template or other biometric identifier — see section 8 |
| Professional, education, or inferences | No | We draw no inferences to create a profile about you |
| Sensitive personal information | Yes — one item | Your account log-in credentials (email plus password). We use them only to sign you in and secure your account, which is a use for which no right to limit applies. We do not use or disclose sensitive personal information to infer characteristics. |
Sources: you; your device and use of the app; and other users (reports about you). Purposes: those set out in this policy. Retention: as described in section 12 — we keep personal data for as long as your account exists, with the moderation exception noted there.
We do not sell personal information for money. However, when you consent to personalised advertising, your advertising identifier and ad-request data are made available to Google for cross-context behavioural advertising. Under California law that counts as "sharing", and it may fall within the broad statutory definition of a "sale". The categories involved are identifiers and internet or network activity. We have not sold or shared the personal information of anyone we know to be under 16.
Your right to opt out of sale/sharing: open Settings → Ads privacy & consent in the app and refuse — or, if that form is not offered on your device, email contact@caraidiz.com with "Do Not Sell or Share" in the subject line and we will apply it to your account. The email route always works. We honour opt-out preference signals such as Global Privacy Control where we receive them; our website carries no advertising or analytics technology at all, so there is nothing on it to opt out of.
You also have the rights to know, access, correct, delete and port your information, and not to be discriminated against for exercising them — we offer no financial incentives and will never degrade the game because you exercised a privacy right. See section 16 for how.
If you live in a state with a comprehensive privacy law — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Maryland, Minnesota, Tennessee, Indiana, Kentucky or Rhode Island — you have rights to confirm and access, correct, delete and obtain a copy of your personal data, and to opt out of targeted advertising and of any sale of personal data. Use the same routes as in section 16 and section 18; where your state requires us to honour a universal opt-out signal such as Global Privacy Control, we honour it where we receive one.
You may appeal a decision we make about a privacy request by replying to our response; we will tell you the outcome of the appeal in writing, and how to complain to your state Attorney General if you remain dissatisfied.
Users aged 16 and 17. Several states — including Maryland, Connecticut, Colorado, Delaware, Montana, New Hampshire and New Jersey — prohibit targeted advertising to, and the sale of the personal data of, consumers under 18, and consent does not cure it. We do not serve personalised advertising to, and do not share the data of, any user whose stated age is under 18: the app marks every ad request from those accounts as non-personalised whatever they consented to, and does the same whenever an age is not yet known, so no cross-context behavioural advertising is requested for them. Google still receives the ad request itself, including the IP address it is sent from.
For residents of Illinois (BIPA), Texas (CUBI) and Washington: we do not collect, capture, purchase, receive through trade or otherwise obtain a biometric identifier or biometric information; we generate no scan of face geometry and no biometric template; and we do not sell, lease, trade or otherwise profit from such data. Recording a video is not, by itself, the capture of a biometric identifier, and we do nothing further with it. See section 8. We also collect no consumer health data of any kind.
Wherever you are, if your local law gives you a stronger right than this policy describes, your local law wins.
If we change this policy we will update the version string at the top of this page. The app records that same version string when you accept the policy, so the two always match. For changes that materially affect how we use your data, we will ask you to accept the new version in the app before you continue, and where the law requires consent we will ask for it again rather than assume it carries over.
Privacy questions, requests and complaints: contact@caraidiz.com, or the contact page.
Postal address: Caraidiz Inc., c/o SOHO Workspaces, 447 Broadway, 2nd Floor, New York, NY 10013, United States