Familiars Unleashed — Privacy Policy

Effective September 2026 · Version 1.6, updated 3 October 2026 · Surre's Creative Reality, LLC

The short version. You photograph your pet; we turn the photo into a fictional game card. To do that, your photo goes to our servers and to Google's Gemini API, which acts as our data processor and does not use your photo to train its models. We never sell your data, never show ads, never track you across apps, and never show your original photo to anyone but you. You can delete your account, and everything in it, from inside the app at any time.

Who we are

Familiars Unleashed is made by Surre's Creative Reality, LLC, a Tennessee limited liability company (“we”, “us”). We are the controller of the personal information described here. Contact: hello@surrescreativereality.com.

This policy covers the Familiars Unleashed iOS app, including TestFlight builds, the challenge links and battle records it creates, and any web pages we host for them. Our company website has its own, simpler privacy page.

What we collect

Information	Where it comes from	Why we have it
Sign-in email address — the address Apple gives us when you use Sign in with Apple. If you choose “Hide My Email”, this is Apple's private relay address, not your real one.	Sign in with Apple	To create and recognize your account. Our sign-in provider holds it; the game itself only stores an account ID.
Your pet's photo	You take or import it	To generate your familiar's card and portrait. See “How your pet's photo is processed” below.
Names and text you type — the name you give a familiar, the optional detail on a report.	You	To show your familiar as yours and to handle reports.
Your public alias and display name — the alias you choose (3 to 20 letters, numbers, or underscores) and, if you add one, a display name.	You	To show you beside your familiar on Today's Standings and to let players who know your exact alias find you. See “Who sees what” below.
Generated game content — the AI analysis of the photo, the card's stats, abilities and flavor text, the rendered portrait, your battles and story-mode entries, and your place in Today's Standings.	Created by the game	It is the game.
Story-mode interaction events — which beats and screens you complete, which kind of choice you made at the Offering, a random per-session reference, and the hour of your local day. These never contain names, photos, free text, or anything you typed.	The app, as you play	To see whether the game works — for example, whether players finish a tale or return the next day. Linked to your account so deleting the account deletes them too.
Render usage records — a count of the portraits rendered for your account and their cost to us.	Created by the game	To enforce the free rendering allowance and keep our costs honest.
Which terms you accepted — the versions of our Terms of Use and of this Privacy Policy you have accepted in the app, and when. Nothing about your device or your network address is recorded with them.	You, when you accept them	To keep a record of what you agreed to, and to know when to ask you to accept a newer version.

What we do not collect

No location. The app never asks for it.
No contacts, no address book. Challenges travel as links you share yourself.
No advertising identifiers and no tracking. There is no ad network, no attribution SDK, and nothing is joined with other companies' data. We do not “track” you in the sense used by Apple's App Tracking Transparency, so the app never shows that prompt.
No third-party analytics or crash-reporting service. Crash reports from TestFlight and the App Store come to us through Apple, under Apple's own terms, and only if you opted in with Apple.
No payment details. The app currently sells nothing. If in-app purchases are added, Apple handles payment and we only learn what was bought.

Your device's network address reaches our services whenever the app connects. Our server uses it for a moment to limit abuse of our public endpoints, and our server's request logs record it with each request; Render, our host, keeps those logs for a limited time. When you sign in, Supabase, which runs our sign-in accounts, records the network address with your sign-in session.

How your pet's photo is processed

This is the part of the game that matters most for privacy, so here it is in order.

Upload. The photo travels encrypted to our server and is stored in private, access-controlled storage. No public link to it ever exists.
Analysis. Our server sends the photo to Google's Gemini API to describe what it sees — species, markings, pose, setting — as structured data from which the card's fictional stats, abilities, and flavor are built. Google processes your photo as our data processor under the Gemini API paid-tier terms and the Data Processing Addendum incorporated in them. Under those terms Google does not use your photo, or the outputs generated from it, to train or improve its models, and may keep API inputs and outputs for a limited period to detect abuse and to meet legal obligations. We do not use any free or consumer tier of any AI service for your photos.
Portrait rendering. When a stylized portrait of your familiar is rendered, our server sends the same photo, with a short text description derived from the analysis, to Google's Gemini image model under the same terms. No additional company sees your photo. Rendered portraits carry an invisible SynthID watermark that identifies them as AI-generated.
Storage. The original photo, the analysis, the card, and the portrait are stored with your account in private storage. The photo is kept while the familiar exists so that its portrait can be rendered and, later, re-rendered.

The card is fiction generated by AI. It is not a description of your pet's health, breed, or temperament, and every battle is decided by fixed rules on our server, never by AI. We say so inside the app as well.

We do not look at your photos. A person at our company may see a photo only to handle a report you or another player filed, a support request you sent, or a fault you told us about.

Who sees what

Other players see your familiar's card when you battle them through a challenge link and in Today's Standings: its name, species group, stats, abilities, flavor text, and portrait. They never see your original photo or your email, and the app never shows them your account ID.
Your alias appears beside your familiar on Today's Standings, and a player who types your exact alias can find you and see your display name. There is no search, directory, or suggestion list. You can turn this off with “Let players find me by my alias” in the app: lookups then cannot find you, and your familiar appears on the board without your alias. A player you have blocked, or who has blocked you, cannot find you and does not see your alias.
Rivals. You can ask another player to be your Rival, and they can ask you. A request you send shows them your alias and display name — asking is how you introduce yourself — and either of you can decline, cancel, or later remove the relationship without the other being told. While you are Rivals, each of you sees the other's alias and display name in your Rivals list even with “Let players find me by my alias” turned off. A player you fought through a challenge link can ask you to be Rivals from that battle even if you have turned lookups off; until you accept, they see only the familiar they fought, not your alias. A request is dropped after 30 days unanswered. Blocking a player ends any Rival relationship or request between you at once, and neither of you can ask again while the block stands. Rivals exist only inside Familiars Unleashed; we do not build a friends list that reaches any other product.
Anyone with a challenge or share link can see the battle it points to: the two familiars' names and species groups, the scores, and the battle story. Share records are frozen when the battle resolves and are served from that frozen copy. The original photo is never part of a share record.
Battles you already fought remain visible to the other player, and through their link, even after you delete your account — as a frozen record that is no longer linked to any account.

Service providers

These companies process data on our behalf, under contracts that limit them to providing the service to us. All processing takes place in the United States.

Provider	What they do for us
Apple	Sign in with Apple, TestFlight, and the App Store, under Apple's own terms and privacy policy.
Supabase	Sign-in accounts (holds the email address, and the network address of each sign-in session), our database, and the private storage that holds photos and portraits.
Render	Hosts our server, and keeps its logs for a limited time.
Google (Gemini API)	Photo analysis and portrait rendering, as our data processor, described above.

We do not sell personal information, do not share it for advertising, and do not share it with data brokers. We would disclose information if the law required it, to protect someone's safety, or to enforce our Terms of Use.

How long we keep things

Your account, public profile, familiars, photos, portraits, story-mode entries and events, reports you filed, blocks, Rival relationships and requests, and the record of which terms you accepted are kept while your account exists and deleted when you delete it. A Rival relationship or request is deleted when either of its two accounts is deleted.
Render records outlive your account. A count of the portraits rendered for your account and what they cost us is kept after you delete your account, with no link to any account. It is how we measure what the game costs us to run, so it has to survive the accounts it came from.
A block keeps the name it was made by. When a player blocks you, their block records the name they knew you by at that moment — your alias as it was then, or the name of your familiar if they blocked you from a battle — so that they can find the block again and undo it. That name is not updated if you later change your alias. It is deleted when they unblock you, or when either of your accounts is deleted. The same is true, the other way round, of players you block.
Your alias is released when you change it or delete your account. A released alias is held for 90 days so that no one else can claim it and pose as you. After you delete your account it is held with no link to any account.
Reports other players filed about you are kept after you delete your account, together with the alias they reported, so a person can still review them.
A single familiar can be deleted on its own from inside the app; its photo and portrait are deleted with it.
Battle records are kept, because the other player fought them too. After you delete your account they stay only as a frozen record with no link to any account.
Server logs hold counts, error codes, and the network address each request came from, for a limited time; never photos, links to photos, names, or sign-in tokens.

Deleting your account

Open the account panel inside the app and choose Delete account. This immediately deletes your account, your public profile, your Rivals and Rival requests, your familiars, your photos and portraits, your story-mode entries and events, the record of which terms you accepted, and your sign-in identity from our systems, then signs you out. Your alias is then held for 90 days with no link to any account, and your render records are kept with no link to any account, both as described above. There is no waiting period and no way to undo it. If you prefer, email hello@surrescreativereality.com from the address on your account and we will delete it for you.

To disconnect the app from your Apple ID as well, use Settings → Apple Account → Sign in with Apple on your device.

Your rights

Wherever you live, you can ask us what personal information we hold about you, ask for a copy, ask us to correct it, or ask us to delete it, by emailing hello@surrescreativereality.com. We aim to respond within 2 business days and to complete requests within 30 days. We will never treat you differently for exercising these rights. If you are in the European Economic Area, the United Kingdom, or Switzerland, using the app means your information is transferred to and processed in the United States; you also have the right to complain to your local data-protection authority.

Reporting and blocking

You can report another player's familiar, a battle, or a player's alias from inside the app, and you can block a player — including by their alias — so that you can no longer join each other's battles, find each other by alias, or be Rivals. When you file a report we keep the reason, your optional note, and a reference to what you reported; for an alias, that reference includes which account held it at the time, so a later change of alias does not hide it. A person reviews it.

You can see the players you have blocked, and unblock any of them, inside the app. Each is listed only by what you already knew when you blocked them: the alias you typed, or the familiar you fought. The list never shows you an alias you did not already have, and it does not follow a player who changes their alias. Unblocking lets you find each other and join each other's battles again; it does not bring back a Rival relationship that the block ended.

Children

Familiars Unleashed is rated 13+ on the App Store and is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, email us and we will delete it.

Security

Data travels encrypted, photos live in private storage that no public link can reach, our server verifies every sign-in token, and the keys we use with our providers can be revoked independently. No system is perfectly secure, and we will tell you if a breach affects your information.

Changes

When this policy changes we will update the version and date at the top of this page, and we will announce material changes inside the app before they take effect.

Contact

hello@surrescreativereality.com
Surre's Creative Reality, LLC · Brentwood, Tennessee, USA

Support · Terms of Use · Pet & Photo Safety · ← Back