Legal
Privacy Policy
This policy explains how the Infernal Codex developer handles information in the Infernal Codex Android app. Questions and privacy requests may be sent to infernalbuldog@gmail.com.
Who the app is for
Infernal Codex is intended for users in the age groups ages 16–17 and 18+. It is not designed for children under 16.
Campaign data stored on your device
Campaigns, NPCs, notes, encounters, maps, homebrew creatures, sessions, and preferences are stored locally on your device. Infernal Codex does not require an app account and does not provide cloud synchronization. If you export a backup, you choose where the backup file is sent or stored.
Optional AI features
AI processing happens only when you deliberately use an AI feature. The prompt and relevant campaign context, or a PDF you select for import, are sent encrypted in transit over HTTPS to an Infernal Codex service on Cloudflare, which forwards the request to Anthropic. The service checks subscription access and enforces per-user credits. Its application code does not store ordinary prompts, PDFs, or generated outputs in the Infernal Codex database.
For PDF import, the app requests deletion of the temporary Anthropic file after processing or cancellation. Under Anthropic's standard API policy, API inputs and outputs are automatically deleted within 30 days, except where different terms apply or retention is needed for usage-policy enforcement or legal compliance.
AI output reports
If you choose “Report AI output,” the app sends only the exact flagged output, the category you select, an optional comment, the feature and model, a timestamp, and a one-way hashed customer identifier. AI output reports are stored in Cloudflare D1 for 30 days and then deleted. The original prompt is not included. Reports are limited per user to reduce abuse.
Purchases and subscription access
Payments are handled by Google Play. RevenueCat helps the app verify Pro subscription access and may process an anonymous app-user identifier, purchase and subscription information such as the Google Play purchase token, and limited technical device information. The developer does not receive your payment-card or bank details.
Operational data and security
The Cloudflare service keeps short-lived quota and job records so it can enforce the 10-credit daily allowance and complete or cancel AI jobs. Daily aggregate request, token, and error counts contain no prompt content or customer identifiers and are used to measure reliability and AI cost. Cloudflare encrypts D1 data at rest, and app-to-service information is encrypted in transit.
How information is used and shared
Information is used only to provide app features, verify purchases, secure the service, prevent abuse, respond to user-submitted reports, and measure aggregate service cost and reliability. Data is not sold. The app contains no advertising and uses no behavioral analytics or cross-app tracking.
Your choices, deletion, and retention
You control whether to use AI features, import a PDF, submit an AI output report, or export a backup. Deleting app records or uninstalling the app removes locally stored app data from the device, subject to Android or device backups outside the developer's control. Delete exported backup files from the location where you saved them.
To request deletion of an unexpired AI output report or seek help with RevenueCat-related records, email infernalbuldog@gmail.com. Include the Anonymous purchase ID shown in Settings if available; do not send payment information. Anthropic's standard API data is automatically deleted within 30 days as described above.
Changes to this policy
This page will be updated if the app's data practices materially change. The date at the top identifies the latest version.