Privacy Policy

1. Who We Are

Arguably (arguably.ai) is an independent project run by its creator (“we”, “us”). We decide how your personal data is used, which makes us the controller under the EU and UK GDPR, the Data Fiduciary under India's Digital Personal Data Protection Act 2023 (DPDP Act), the business under the California Consumer Privacy Act (CCPA/CPRA), and the organisation responsible for your information under Canada's PIPEDA and Quebec's Law 25. Contact: support@arguably.ai.

2. The Short Version

• Arguably is a game. The characters are AI, and the situations are fiction.
• Your messages are processed by the AI engine behind our characters to generate the character's reply and your score. It does not use them to train AI models.
• We do not use your conversations to train AI models. If that ever changes, we will ask for your separate, opt-in consent first. We will not switch it on by updating this page.
• We do not sell your data and we do not show ads.
• Analytics run only if you click Accept on the cookie banner.
• You can download all your data, or permanently delete your account, yourself, from your profile settings.

3. What We Collect

• Account: your email address. If you sign in with Google: your name, profile picture URL and Google account ID.
• Profile: display name, optional username, and your time zone.
• Age: the age you give us before your first game. We store it as an approximate date of birth (today minus the years you entered). We never ask for your real birthday. We show the app only whether an age is on record, never the date.
• Gameplay: the messages you write, the characters' replies, turn-by-turn scores, grades, XP, streaks, personal bests, milestones and any ratings you give characters or situations.
• Reports: if you report a session, the reason you pick and any details you type.
• Login and device: for each sign-in, your IP address, browser user agent (and the device type, operating system and browser we read from it), screen size, time zone and language setting; plus a log of sign-in events (successes, failures, logouts) with IP address and user agent. We use this to keep accounts secure. We do not fingerprint devices.
• Consent records: when you accepted these policies and gave the sensitive-details consent in section 4, which version, and the IP address and user agent at that moment.
• Payments: see section 6. We never receive your full card number.
• Usage and cost records: for each AI call, the model used, token counts, cost and timing, but no message text.
• Analytics (only with your consent): pages viewed, approximate location, device and browser details, and page performance, collected by Google Analytics and Vercel Web Analytics / Speed Insights.

What we don't collect: your gender, your real date of birth, contacts, precise location, or anything from other apps.

4. Sensitive Details: Please Keep It Fictional

The situations are made up, and you never need to share anything real to play well. We don't ask for sensitive information, and we don't analyse transcripts to work out things about you such as your health, sexuality or beliefs.

But a conversation is free text, and you might choose to write real details about yourself, for example about your mental health, sex life, religion or political views. Data protection law gives that kind of information extra protection. So before your first game we ask for your explicit consent to process any such details you choose to write, only to run the game: store them in your transcript, send them to the AI engine behind our characters to generate the reply, and let us review a session as described in section 5. We record that consent.

You can withdraw it at any time by deleting your account (which erases your transcripts immediately), or by emailing us to delete particular sessions. Please avoid writing identifying details about other real people.

5. Why We Use It

• To run the game (performance of our contract with you): sign you in, run sessions, compute scores and grades, track XP and streaks, and show the leaderboard.
• To check eligibility (legal obligation and legitimate interests): apply the minimum age in section 11.
• To take payments and meet tax and accounting duties (contract and legal obligation).
• To send emails you need (contract): one-time sign-in codes and account or billing notices. No marketing emails unless you opt in.
• To keep the service safe and working (legitimate interests): prevent abuse and unauthorised access, enforce the Terms, investigate reports, and fix bugs. To do this, and to tune game balance, we may read individual session transcripts. Only the operator of Arguably has that access.
• To understand how the game is used (your consent): analytics, only if you accepted them.

We do not use your data for advertising, we do not sell or “share” it for cross-context behavioural advertising (as the CCPA defines those terms), and we do not train AI models on it.

6. Who Receives Your Data

Only these service providers, each for the purpose stated:

• The AI engine behind our characters (USA): generates character replies and scores. It receives your messages and the conversation so far. Under its commercial terms it does not train models on this data, and it deletes inputs and outputs within 30 days, except that content its automated systems flag as violating its usage policies may be kept for up to 2 years.
• Dodo Payments: our Merchant of Record: it is the seller on your receipt and processes your payment, tax, fraud checks and chargebacks under its own privacy policy. We receive back the plan, amount, currency, tax, payment status, and a summary of the payment method (such as card network and last four digits, bank name or UPI ID) and your billing country.
• Neon, Inc. (USA): database hosting for all account and gameplay data.
• Railway Corp. (USA): hosts our API server.
• Vercel, Inc. (USA): hosts the website; with your consent, also Vercel Web Analytics and Speed Insights.
• Cloudflare, Inc. (USA): network security and delivery in front of our API; processes IP addresses.
• Resend, Inc. (USA): sends sign-in codes and service emails; receives your email address.
• Functional Software, Inc. (Sentry, USA): error monitoring. Configured not to collect personal data automatically; email addresses in error logs are masked.
• Google LLC (USA): if you choose Sign in with Google, provides your profile to us; with your consent, also Google Analytics.
• Other players: the leaderboard shows your display name, profile picture, XP, session count and streaks to signed-in players. Your conversations are never shown to other players.
• Authorities: where the law requires it, or to protect someone's safety.

7. International Transfers

Our providers process data mainly in the United States. If you are in the EEA, UK, Switzerland, India or another country with transfer rules, your data leaves your country. Where required, transfers rely on the Standard Contractual Clauses (or the UK Addendum) in our providers' data processing terms. Transfers from India are made as permitted under the DPDP Act.

8. Cookies and Browser Storage

Always on, because the site needs them:

• arguably_refresh: keeps you signed in (HTTP-only, up to 30 days).
• arguably_oauth_state: protects Google sign-in; lasts only for that sign-in.
• arguably_ea: remembers an early-access invite, while that gate exists.
• Browser storage entries that remember your cookie choice and coordinate sign-in across browser tabs. They are never sent to anyone.

Only after you click Accept: Google Analytics cookies (_ga, _ga_*) and Vercel Web Analytics / Speed Insights (which do not use cookies). If you click Decline, or your browser sends a Global Privacy Control signal, none of them load. You can change your choice at any time with the “Cookie & analytics settings” button on our Privacy Policy page (arguably.ai/privacy).

Dodo Payments' checkout may set its own cookies for payment security; those are governed by Dodo's policy.

9. How Long We Keep It

• Account, age, gameplay, transcripts and reports: until you delete your account.
• Sign-in event logs: 12 months.
• Login and device records: 12 months after that login was last used.
• Sign-in codes: valid for minutes; deleted after 7 days.
• Payment and invoice records: as long as tax and accounting law requires, including after account deletion.
• Crisis-support notices (section 12): we keep only a count with the date and time, nothing that identifies you or what you wrote.

When you delete your account, it happens immediately: your transcripts, sessions, XP, ratings, age, login history and consent records are erased, and your profile is overwritten so it no longer identifies you. Only payment records survive, attached to that anonymous placeholder, for the legal period. AI usage and cost records are kept with the link to your account removed. Copies in database backups expire on the backup cycle.

10. Scores and Automated Decisions

Your scores, grades, XP and leaderboard position are produced automatically: an AI evaluator rates each message in the context of the scenario, and fixed rules turn those ratings into outcomes. No person reviews them in real time. They affect only the game, nothing outside it. If you think a result was wrong, email support@arguably.ai and we will review the session within 10 business days and explain the outcome.

11. Adults Only

Arguably is only for people aged 18 or over, everywhere. AI characters in emotional situations may not be suitable for minors. We ask your age before your first game and don't allow play without it or below 18. We don't knowingly collect data from anyone under 18; if we learn an account belongs to a minor, we delete it. If you believe that has happened, contact support@arguably.ai.

12. AI Characters and Crisis Support

Every character in Arguably is AI-generated and labelled “AI” in the game. Characters are written to stay in role, but they are never real people. If a message you write suggests you may be thinking about suicide or self-harm, the game stops that turn: your message is not sent to the character or scored, and instead you see crisis helpline information. Details are on our Safety page.

13. Your Rights

Depending on where you live, you can:

• Get a copy of your data: download it yourself as a file from your profile settings (access and portability).
• Delete your data: delete your account yourself from your profile settings; it takes effect immediately.
• Correct your data: edit your name in settings, or ask us.
• Withdraw consent: for analytics, use the cookie settings button; for sensitive details (section 4), delete your account or ask us to delete particular sessions. Withdrawal doesn't affect anything done before.
• Object to or restrict processing based on our legitimate interests.
• Contest an automated result and get a human review (section 10).
• India (DPDP Act): seek grievance redressal from us, and nominate another person to exercise your rights if you die or become incapacitated. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
• California (CCPA/CPRA): know, access, delete and correct your personal information, and not be discriminated against for using these rights. We don't sell or share personal information, and we treat a Global Privacy Control signal as an opt-out. We don't use sensitive personal information to infer characteristics about you. You may use an authorised agent.
• EEA and UK: complain to your data protection authority.
• Canada: complain to the Office of the Privacy Commissioner of Canada, or the Commission d'accès à l'information in Quebec.

For anything you can't do in settings, email support@arguably.ai from the address on your account. We reply within 30 days, and may need to confirm it is really you.

14. Security

We use encrypted connections (TLS) everywhere, and our database provider encrypts data at rest. Sign-in uses one-time codes or Google, with short-lived access tokens and hashed, rotating refresh tokens. Admin tools are not reachable from the public internet and are protected by two-factor authentication. We apply rate limits to prevent abuse. No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.

15. Changes

We will update the date at the top when this policy changes, and tell you in the app or by email before a material change takes effect. We will never start a new use of your data that needs your consent (such as AI training) without asking you first.

16. Contact and Grievance Officer

For privacy questions, rights requests or complaints (including as our Grievance Officer under the DPDP Act), contact the operator of Arguably at support@arguably.ai. We acknowledge messages within 5 business days.