Familiars Unleashed — Privacy Policy

Effective September 2026 · Version 1.0 · Surre's Creative Reality, LLC

The short version. You photograph your pet; we turn the photo into a fictional game card. To do that, your photo goes to our servers and to Google's Gemini API, which acts as our data processor and does not use your photo to train its models. We never sell your data, never show ads, never track you across apps, and never show your original photo to anyone but you. You can delete your account, and everything in it, from inside the app at any time.

Who we are

Familiars Unleashed is made by Surre's Creative Reality, LLC, a Tennessee limited liability company (“we”, “us”). We are the controller of the personal information described here. Contact: hello@surrescreativereality.com.

This policy covers the Familiars Unleashed iOS app, including TestFlight builds, the challenge links and battle records it creates, and any web pages we host for them. Our company website has its own, simpler privacy page.

What we collect

Information	Where it comes from	Why we have it
Sign-in email address — the address Apple gives us when you use Sign in with Apple. If you choose “Hide My Email”, this is Apple's private relay address, not your real one.	Sign in with Apple	To create and recognize your account. Our sign-in provider holds it; the game itself only stores an account ID.
Your pet's photo	You take or import it	To generate your familiar's card and portrait. See “How your pet's photo is processed” below.
Names and text you type — the name you give a familiar, the optional detail on a report.	You	To show your familiar as yours and to handle reports.
Generated game content — the AI analysis of the photo, the card's stats, abilities and flavor text, the rendered portrait, your battles and story-mode entries, and your place in Today's Standings.	Created by the game	It is the game.
Story-mode interaction events — which beats and screens you complete, which kind of choice you made at the Offering, a random per-session reference, and the hour of your local day. These never contain names, photos, free text, or anything you typed.	The app, as you play	To see whether the game works — for example, whether players finish a tale or return the next day. Linked to your account so deleting the account deletes them too.
Render usage records — a count of the portraits rendered for your account and their cost to us.	Created by the game	To enforce the free rendering allowance and keep our costs honest.

What we do not collect

No location. The app never asks for it.
No contacts, no address book. Challenges travel as links you share yourself.
No advertising identifiers and no tracking. There is no ad network, no attribution SDK, and nothing is joined with other companies' data. We do not “track” you in the sense used by Apple's App Tracking Transparency, so the app never shows that prompt.
No third-party analytics or crash-reporting service. Crash reports from TestFlight and the App Store come to us through Apple, under Apple's own terms, and only if you opted in with Apple.
No payment details. The app currently sells nothing. If in-app purchases are added, Apple handles payment and we only learn what was bought.

Your device's network address is used for a moment to limit abuse of our public endpoints. It is held in memory only and never written to our database or logs.

How your pet's photo is processed

This is the part of the game that matters most for privacy, so here it is in order.

Upload. The photo travels encrypted to our server and is stored in private, access-controlled storage. No public link to it ever exists.
Analysis. Our server sends the photo to Google's Gemini API to describe what it sees — species, markings, pose, setting — as structured data from which the card's fictional stats, abilities, and flavor are built. Google processes your photo as our data processor under the Gemini API paid-tier terms and the Data Processing Addendum incorporated in them. Under those terms Google does not use your photo, or the outputs generated from it, to train or improve its models, and may keep API inputs and outputs for a limited period to detect abuse and to meet legal obligations. We do not use any free or consumer tier of any AI service for your photos.
Portrait rendering. When a stylized portrait of your familiar is rendered, our server sends the same photo, with a short text description derived from the analysis, to Google's Gemini image model under the same terms. No additional company sees your photo. Rendered portraits carry an invisible SynthID watermark that identifies them as AI-generated.
Storage. The original photo, the analysis, the card, and the portrait are stored with your account in private storage. The photo is kept while the familiar exists so that its portrait can be rendered and, later, re-rendered.

The card is fiction generated by AI. It is not a description of your pet's health, breed, or temperament, and every battle is decided by fixed rules on our server, never by AI. We say so inside the app as well.

We do not look at your photos. A person at our company may see a photo only to handle a report you or another player filed, a support request you sent, or a fault you told us about.

Who sees what

Other players see your familiar's card when you battle them through a challenge link and in Today's Standings: its name, species group, stats, abilities, flavor text, and portrait. They never see your original photo, your email, or your account ID.
Anyone with a challenge or share link can see the battle it points to: the two familiars' names and species groups, the scores, and the battle story. Share records are frozen when the battle resolves and are served from that frozen copy. The original photo is never part of a share record.
Battles you already fought remain visible to the other player, and through their link, even after you delete your account — as a frozen record that is no longer linked to any account.

Service providers

These companies process data on our behalf, under contracts that limit them to providing the service to us. All processing takes place in the United States.

Provider	What they do for us
Apple	Sign in with Apple, TestFlight, and the App Store, under Apple's own terms and privacy policy.
Supabase	Sign-in accounts (holds the email address), our database, and the private storage that holds photos and portraits.
Render	Hosts our server.
Google (Gemini API)	Photo analysis and portrait rendering, as our data processor, described above.

We do not sell personal information, do not share it for advertising, and do not share it with data brokers. We would disclose information if the law required it, to protect someone's safety, or to enforce our Terms of Use.

How long we keep things

Your account, familiars, photos, portraits, story-mode entries and events, reports you filed, blocks, and render records are kept while your account exists and deleted when you delete it.
A single familiar can be deleted on its own from inside the app; its photo and portrait are deleted with it.
Battle records are kept, because the other player fought them too. After you delete your account they stay only as a frozen record with no link to any account.
Server logs hold counts and error codes, never photos, links to photos, names, or sign-in tokens.

Deleting your account

Open the account panel inside the app and choose Delete account. This immediately deletes your account, your familiars, your photos and portraits, your story-mode entries and events, and your sign-in identity from our systems, then signs you out. There is no waiting period and no way to undo it. If you prefer, email hello@surrescreativereality.com from the address on your account and we will delete it for you.

To disconnect the app from your Apple ID as well, use Settings → Apple Account → Sign in with Apple on your device.

Your rights

Wherever you live, you can ask us what personal information we hold about you, ask for a copy, ask us to correct it, or ask us to delete it, by emailing hello@surrescreativereality.com. We aim to respond within 2 business days and to complete requests within 30 days. We will never treat you differently for exercising these rights. If you are in the European Economic Area, the United Kingdom, or Switzerland, using the app means your information is transferred to and processed in the United States; you also have the right to complain to your local data-protection authority.

Reporting and blocking

You can report another player's familiar or a battle from inside the app, and you can block a player so that you can no longer join each other's battles. When you file a report we keep the reason, your optional note, and a reference to what you reported, and a person reviews it.

Children

Familiars Unleashed is rated 13+ on the App Store and is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, email us and we will delete it.

Security

Data travels encrypted, photos live in private storage that no public link can reach, our server verifies every sign-in token, and the keys we use with our providers can be revoked independently. No system is perfectly secure, and we will tell you if a breach affects your information.

Changes

When this policy changes we will update the version and date at the top of this page, and we will announce material changes inside the app before they take effect.

Contact

hello@surrescreativereality.com
Surre's Creative Reality, LLC · Brentwood, Tennessee, USA

Support · Terms of Use · Pet & Photo Safety · ← Back