Privacy Policy

Effective date: October 15, 2026

System: Terra (“Terra”, “the app”) is built and operated by Owrang Studios LLC (“Owrang Studios”, “we”, “us”). This policy explains what Terra collects, how it’s used, and the choices you have. It applies to the System: Terra mobile app, its web panel for Wardens and event organizers, and this website.

The short version: we collect what the game needs to work — your account details, your location while you’re using the app, and the photos and screenshots you choose to upload. Some of what you write and upload is read by the AI services that work for us, as this policy describes. We don’t sell your data, and there is no third-party advertising. You can delete your account at any time.

Information you give us

Account: your email address, password (handled securely by Supabase, our authentication provider), display name, username, and birthdate. Your username is your handle: where two adventurers share a name, it is how the System and other players tell you apart. If you have not chosen one a day after Terra first asks, Terra gives you one made from your name and class, and you can change it in Settings. If you sign in with Apple or Google instead of a password, Apple or Google tells us your email address (with Apple’s Hide My Email, an address that forwards to you) and, if you allow it, your name; we never see your Apple or Google password.
Your name: your first and last name, which Terra asks for when you sign up (or, if you joined before it asked, the next time you open the app). They are kept private. Other players see them only in a story, which calls you by your first name and adds only as much more of your name as it takes to tell two people apart: the initial of your last name, your whole name, or I and II. A player under 18 is never named past the last initial. Until you give them, stories call you by your display name. You can change them in Settings once every 30 days.
Optional profile details: gender, height, and weight, if you choose to add them, a bio, and the city or area your profile shows. Your height, weight, and gender are used, with your other records, to judge whether the stat records you file are plausible. Other players can see your gender, never your height or weight.
Your phone number, if you choose to prove one: Terra keeps it with your account, and Twilio texts the code that proves it is yours. A text never signs you in or opens an account.
Personality test: your answers, used to assign your character class.
Skill assessment: your answers, used to find the skills you already have.
Photos: an optional selfie or profile photo (used to generate your AI avatar), dating photos if you opt into dating, pictures you send in chats, and the verification screenshots and pictures you upload or share to Terra from another app (for example from fitness, reading, or puzzle apps, a badge or certificate, or a festival bounty) to prove Daily Trials, stats, and skills. When you choose a picture as proof, the app reads a few of its own details on your phone — when it was taken and last changed, the app that saved it, the camera, and any tag an app wrote saying it was made by AI — and sends only those with it, for the AI that reads it to take into account. Before any of these pictures is uploaded, the app takes out of a JPEG file the details stored inside it, where a phone keeps the place a photo was taken; a picture in another format, such as a PNG screenshot, is uploaded as your phone saved it. The selfie you choose for your avatar is kept privately. Your avatar or profile photo is kept where anyone with its link can open it, though no one can browse the folder it is in; when you replace it, the one it replaces is deleted — unless a report needs it kept — and the rest goes when you delete your account.
Stat records: the numbers you file for your stats, such as a lift or a run time, and the evidence you attach. When you play a daily puzzle, its progress is kept on our server — the numbers you have placed, the answers you have typed, your strikes, and how long the puzzle has been on your screen — so you can pick it up where you left it.
Content you create: chat messages, what you say to the System in Speak to the System, custom quests, events, party names, and dating card text. If you organize an event, also its programme, the lists and schedules you paste or photograph, a PDF of it you choose on your phone or on the web for the System to read, and the descriptions you write for its quests and quest chains.

Location

Terra is a location-based game. While you’re using the app, your precise location is used to find nearby quests, events, hangouts, and other players, and to verify GPS check-ins at real places. You can also pin a position in Settings: Terra keeps it rounded to a grid of about half a mile, never the exact spot, and it powers nearby hangouts and dating distance. Other players see your distance in whole miles, worked out between those half-mile squares and never your coordinates, and the server caps how far any search reaches. Players under 18 are shown only to other players under 18 nearby, and see only them.

When you walk a Wilds story or a delve, Terra keeps following the walk while that story is open, even with your screen locked — with a notification on Android and the location indicator on iPhone — so it can tell you when you reach a trial and when you are back at the trailhead. It stops when the story ends, when you leave the story’s page, when you are far from the trail, or twelve hours after the story began. The path you walk stays on your phone, is never sent to us, and is forgotten when the story ends. Terra never asks for “always” location, and it does not collect your location at any other time when you’re not using the app.

When a trial may begin on a Wilds story or a delve, the app also sends how far you have walked since your last trial — one number, worked out on your phone from the path it keeps there, never the path itself — and how precise your phone says its location is, so the System can tell that you have walked on and that you stand where the creature waits. When a delve’s creature stands near you, the System shows you where it is, so you can walk to it; it never says who walked there before you, or when. The place where one of your own trials began may be shown to later walkers and delvers in the same way, but only as one of a delve’s creatures — and a delve opens, or a creature joins one, only where at least three players’ walks left its creatures and no one player’s walk left more than half of them — and never with your name.

Finding your people

This is optional. If you choose to look through your contacts, your phone reads each contact’s name, email addresses, and phone numbers, and scrambles every address and number on the phone before anything leaves it. Terra compares the scrambles with those of players who have proven an email or a number, in memory, keeps none of them, and shows you who matched. Your contacts’ names never leave your phone. Your contacts’ phone numbers are compared only once you have proven a number of your own. Once you prove your email or your number, people who have it in their contacts can find you, unless you switch that off in Settings. To make that possible, Terra keeps a scramble of each email or number you have proven, only while your account holds it.

Game activity

Playing the game creates records tied to your account: quests taken and completed, the daily puzzles you play (the numbers you place, the answers you type, your strikes, and how long each puzzle is on your screen, which the app counts only while the puzzle is open in front of you), XP and stats, duels, delves, the creatures you have defeated, events you have joined, titles, and dating matches if you opt in. The System also writes about you — your morning greeting, the Sanctum, the Saga, your monthly Chapters, and the stories of your quests, duels, and events — from those records, and keeps what it writes with your account.

Health and activity

This is optional. It is off unless you turn it on, and you can turn it off at any time. If you switch it on in Settings, Terra reads daily totals only from Apple Health (HealthKit), Android Health Connect, or your phone’s motion sensor: steps, distance, active minutes, workout minutes, and how long you slept, which our server turns at once into a rough sleep band — short, normal, or long — keeping only the band. We do not read from them individual readings, times of day, heart rate, or any body measurement such as your weight or height, and health data never tells us where you have been.

We use these totals for two things: to colour the story Terra writes about your day, and — when a day’s workout minutes reach the trial’s threshold (30 minutes as Terra is set today), typed entries included — to complete that day’s exercise Daily Trial, “Train the Body”, which then pays that trial’s usual XP once. Beyond that one trial they earn you no XP, move no stat, change no rank, and give you no advantage in a duel. As with the rest of your game records, a day’s entry may be sent to Anthropic (Claude) to write that story, and the words it writes may then pass through OpenAI’s final writing pass — see Services we rely on.

We keep these daily totals for 180 days and then delete them. Turning the feature off in Settings erases both the totals we hold and the notes Terra wrote from them. We never sell health or activity data, never use it for advertising or marketing, and never use it to decide what content or offers you are shown.

Reading and listening time (Android)

This is optional, on Android phones only, and off unless you turn it on. Before each of the two Android permissions it needs, Terra shows you what it reads and why, and you turn it on — and off, at any time — in Android’s own settings. With Usage access, Terra works out on your phone how many minutes Kindle, Nook, Libby and Google Play Books were open on your screen each day. With notification access, it notes when Audible, Libby, Google Play Books, Kindle or Nook is playing and counts the minutes played, at any speed; it reads no notification. Terra never reads what you read or listen to — no titles, no pages, no text — and nothing about any other app.

All that is sent to us is a number of minutes per app per day, with whether it was screen time or playback. We use it to complete that day’s reading Daily Trial, “Feed the Mind”, when the day’s minutes reach 30, and to file your month’s reading hours as a Wisdom record; the trial and the record are game records like any other. We keep the minutes per app per day for 40 days and then delete them. They are never sent to an AI service, never sold, and never used for advertising.

Your calendar

The System adds the festivals and gatherings you choose to your calendar. Only if you turn it on in Settings, it also reads the titles of your events for the coming day, so its morning words can fit your day. Titles are kept no longer than a day.

That reading is off unless you turn it on, and you can turn it off at any time. Once a day the app reads, on your phone, the titles of your calendar’s events for the coming day — the titles only, never who is invited, notes, places or times — and sends them to Terra. The titles are sent to Anthropic (Claude) with the rest of what the morning greeting is written from; the System is told never to repeat a title back to you and never to read anything about your health into one, and they never enter the notes the System keeps about you. Terra deletes them once the greeting is written, and in any case within about a day; turning the feature off deletes them at once.

Sealed threads

A one-to-one chat has a second tab, Sealed. A sealed message is locked on your phone before it is sent — to the other player’s key and to your own — so only the two of you can open it, each on your own phone. Terra’s server holds each player’s public key and, for each sealed message, only the locked text, the random numbers it was locked with, the chat it belongs to, who sent it and when: it cannot read a sealed message, and neither can we. Your secret key never leaves your phone, so if you lose the phone, or sign in on another, the messages sealed to it cannot be opened again. If you report someone from a sealed thread, the report names them and the reason you chose, and carries no message: nothing of a sealed message reaches Terra, its Wardens or any AI, whatever version of the app sent the report.

Speak to the System

Speak to the System is a chat with the System itself. What you write there is first read by OpenAI’s moderation check, then sent to Anthropic (Claude), with what the System knows of your record, to write the answer. The answer then goes through OpenAI’s final writing pass, so the words OpenAI receives can carry what you told the System, and through the same check before you see it. The conversation is kept with your account, and the System may remember what you tell it in your morning greeting and your stories. If your words suggest you may be in danger, Terra sends you where to find help at once, tells a Warden, and keeps those words out of every story. There is a daily limit on how much the System will say.

Keeping the community safe

No check, no Warden and no one at Terra reads your messages or a private event unless someone reports them, and no AI reads your messages. The one thing that reads a private event without a report is an AI feature someone at it asks for: when the event’s organizer, or a player checked in to it, asks the System for the event’s chapter, Anthropic (Claude) and OpenAI’s writing pass read the event’s page — its name, description, venue, program and vendors — whether the event is public or private, and what an organizer pastes into the questline or list tools is read the same way, to write what they asked for. Two things are read without a report, by OpenAI’s free moderation check, which scores words for harm and follows no instruction. Public pages are read when they are saved: your handle, display name and bio; your dating card’s bio while it is shown in the Dating Hall; a public event’s name, description, venue, place and program; a public quest you offer on the board; and a hangout’s title and description. And a festival’s chat is read only while its organizer (or the Warden who planted the festival) has turned moderation on, which is off unless they turn it on; the chat tells everyone in it when it is on, and a private event’s chat is never read. Words the check finds likely harmful are flagged to a Warden — the players who moderate Terra — who decides what happens; nothing is hidden or removed automatically, and a copy waiting to be read is deleted once it has been read, or after two days. If the words suggest their writer may be in danger, Terra sends them where to find help. Nothing else is read unless someone reports it.

When you report something — anywhere, private events included — the report and what it is about are read first by an AI first layer. OpenAI’s moderation check scores reported words and pictures for harm, and Anthropic (Claude) reads the context the check cannot judge, as it also reads stat records the screenshot check doubted, skill claims, and level-ups. The first layer may take content down or give a strike, and every decision it makes can be appealed to a Warden. A reported picture in which anyone involved is under 18, or has not given an age, is never sent to any AI model; it goes to the System administrator alone. A report from a sealed thread carries no message at all. Apparent child sexual abuse material that a report brings to our knowledge is reported to the National Center for Missing & Exploited Children (NCMEC), as US law requires — see Child Safety.

Crash reports

If the app crashes, or a launch never finishes, Terra sends us a crash report: the error and where in the app it happened, your phone’s operating system and the name its settings give it (often its model, though on some phones it is a name you chose), the app’s version, and what the app was doing as it started. A report is tied to your account, is read only by us (the System’s administrator, never a Warden), and is deleted after 30 days.

Notifications

If you allow notifications, Terra keeps your device’s push token and sends its notifications through Expo’s push service, which hands them to Apple or Google to deliver. A notification carries what it says — for a chat message, the sender’s name and the first 120 characters of the message — so Expo, and Apple or Google, handle that text to deliver it. A sealed message’s notification says only that a sealed message arrived, and carries none of its words.

On the Stories tab you can turn off its pushes — the System’s morning greeting, its evening Question and the Saga’s chapters. Terra keeps that choice with your account and sends those pushes no more until you turn them back on; their notices still arrive in the app.

How we use this information

To run the game — assign your class, verify Trials and check-ins, score your stats, and narrate your quests, duels, delves, and events.
To operate the social features you choose to use — parties, events, duels, hangouts, finding your people, and dating.
To keep the community safe — reviewing reports and enforcing the rules — and to fix what breaks.
To contact you about your account and the beta — sign-up codes and links, password resets, invitations, updates, and important notices.

Services we rely on

These providers process data on our behalf to run the app:

Supabase — database, sign-in, and file storage (the app’s backend).
Anthropic (Claude) — the AI that reads your verification screenshots and proof pictures; reads your skill assessment, and finds which of the skills you have proved are one; forges your abilities from your character sheet; writes the System’s words (quests, duels, Wilds stories, delves, events, your morning greeting, the Sanctum, the Saga, and your Chapters); writes the daily crosswords’ words and clues — and, if you are Premium, receives for your own daily crossword the names of your two highest skills and nothing else from your record; chooses which creature of the Wilds would live where a new one appears, from the place’s name and a position rounded to about ten kilometres — never your exact spot — and, where the System administrator plants a delve, from a photo of the spot the administrator may take there with the camera, the details stored inside it taken out on the phone first, which is sent with that one choice and kept nowhere; answers you in Speak to the System; helps moderate what is reported, and judges whether a stat record you file is plausible, with your height, weight, and gender if you have given them; and drafts an event’s trials and quest chains from what its organizers write or paste, from a PDF an organizer chooses on their phone or on the web, or from the event’s own website, and reads the vendor lists and schedules an organizer pastes or photographs; and, if you turn it on in Settings, reads the titles of your calendar’s events for the coming day to write your morning greeting.
OpenAI — draws your fantasy avatar from the selfie you upload, and the pictures for abilities, weapons, creatures, and your Chapters’ covers; gives the System’s writing a final pass, for which it receives the words alone — they name you and other players as the story does, and can carry what you told the System — and never your email or anything else from your account; and runs its moderation check on reported words and pictures, on public pages when they are saved and the messages of a festival chat whose organizer turned moderation on (the words alone, never your account), on what you say to the System, and the text an organizer pastes or the System writes for an event, a walk, a quest chain, a sponsored quest or a daily crossword.
Google — Sign in with Google, if you choose it, and Terra Premium bought through Google Play. The Places API receives coordinates, with no name or account attached, to find highly-rated places near you, what you type into a place search, with where you are if the app knows it, to put nearby places first, the places an event’s quest chain names, and a sponsoring business’s place, to read its Google rating. On Android, the maps in the app are drawn by Google Maps; on iPhone, by Apple Maps — or, if you choose Google Maps in Settings, by Google Maps, inside the app as well as in Open in Maps.
Apple — Sign in with Apple, if you choose it, and Terra Premium bought through the App Store. If you sign in with Apple, Terra keeps the token Apple gives it for your sign-in, only so that it can revoke it at Apple when you delete your account.
RevenueCat — handles Terra Premium bought in the App Store or Google Play: it receives your account’s ID (a random code, never your name or email) and your purchases, renewals and cancellations, and tells our server whether Terra Premium is active. Your payment details stay with Apple or Google.
Twilio — texts the code that proves your phone number, if you choose to prove one.
Resend — sends Terra’s emails: sign-up codes and links, password resets, and email proofs.
Expo (EAS) — delivers the app, its updates, and its notifications.
Netlify — hosts this website, its beta enrollment form, and the web panel.

Accepting Terra’s covenant, and its card “The System’s AI”, is your permission for what this policy says goes to Anthropic and OpenAI. Terra’s System is written by them, and the game cannot run without them: if you decline the card — or turn it off later in Settings — Terra goes no further, and the app offers only to accept it after all, to sign you out, or to delete your account. While you decline it, none of Terra’s AI features runs for you; a report someone files about something of yours is still read by the AI first layer described above.

The web panel draws its maps from OpenStreetMap, whose servers see the address of the computer viewing them.

When a Warden asks the System to read an event’s own website, Terra’s server visits that site itself — only its public pages, only what its robots.txt allows, naming itself as the System’s reader — and sends the site nothing about anyone. What the pages say is read by Claude and kept as a draft for the Warden.

Like any online service, these providers keep short logs of the requests the app and our websites make to them — the address of the connection, the app or browser, and the time — for as long as their services keep such logs. Supabase also keeps, for each phone or computer you are signed in on, the address and app it signed in from, until you sign out there.

What other players can see

Content you publish is visible to other users as described in the app — for example public custom quests, events you host, hangout beacons, and your dating card if you enable dating. Your character sheet — your display name, handle, avatar, bio, gender (if you give one), the city or area your profile shows, class, level, rank, stats, skills, titles, equipment, and duel record — and your place on the leaderboards can be seen by other players. If you choose to appear among nearby adventurers, they see your distance in whole miles, never your coordinates — and only players on the same side of 18 as you. If you turn on the online indicator, your companions and the people in chats you have accepted can see when you are online. Blocking and reporting tools are built into the app.

What we don’t do

We do not sell your personal information, and there is no third-party advertising in Terra. There is no advertising or analytics software in the app.

Age

Terra is for people 13 and older. Dating features are restricted to users 18 and older, based on the birthdate you declare at signup.

Your choices and deletion

You can edit your profile in the app, and switch off what is optional — health and activity, your calendar’s titles, appearing among nearby adventurers, showing when you’re online, being found by your contacts — in Settings. You can delete your account at any time — see Delete Your Account for both the in-app and email options. Deletion is permanent, and if you signed in with Apple, it also revokes the sign-in tokens Apple gave Terra. It takes your account, your profile, your records and every photo and file you uploaded. A few things stay, tied to no account: the messages you sent stay in the other players’ chats, and a sealed message stays locked there; a custom quest you wrote stays for other players; the Wardens’ record of a flag or a removal keeps the words it was about; a crash report stays until its 30 days are up; and the database’s backups keep a copy until newer ones replace them. If a backup is ever restored, your deletion is carried out again before the app is back for anyone; so that it can be, Terra keeps a record that your account was deleted — its random account code and the moment, nothing else — for 90 days. One more thing is kept, in one case the law asks for: when a player reports that an account may put a minor at risk, what the report pointed to — the message or picture as it stood when the report was filed (a report on a whole chat, rather than one message, keeps up to that account’s last 100 messages there, with their pictures), or the profile’s name, handle, bio and avatar, or the dating card, event or hangout as it was then — is copied at once, with the reported account’s random account code, for Terra’s administrator alone and for no other purpose than the law’s. That copy is kept for a year from the report: editing or deleting what was reported, or deleting either account, neither changes it nor removes it — and nothing else of your account is kept for it. Apple, Google and RevenueCat keep their own records of any purchase. An account whose email is never confirmed, and that never signs in, is deleted automatically, after a week as Terra is set today.

This website

owrang.io is hosted by Netlify. It sets no cookies, runs no analytics, and loads nothing from other companies. If you enroll in the beta, the answers you give — your first name, email, platform, city or area, whether you are 18 or over, and anything you add — are stored by Netlify for us and used only to run the beta. We keep them until Terra’s public release and delete them then — or sooner, if you ask us to delete yours. The page a sign-up link opens reads the result from the link in your own browser, sends it nowhere, and clears it from the address bar.

A note on the beta

Terra is in beta. During this period, game data may occasionally be reset. We’ll update this page as the app evolves, and change the effective date above when we do.

Contact

Owrang Studios LLC — adam@owrang.io