Version: 1.0
Effective date: 6 May 2026
Last updated: 22 April 2026
Publisher: Stratara Ltd., Israeli company registration number 517197182
Registered office: Dan 14, Ness Ziona, 7412110, Israel
This Privacy Policy explains how Stratara Ltd. collects, uses, shares, and retains information when you use GOSSIP, our iOS mobile game.
In this Privacy Policy, "Stratara," "we," "us," and "our" mean Stratara Ltd. "GOSSIP," "the app," and "the Services" mean the GOSSIP iOS mobile application and related server-side services we operate for the app.
GOSSIP is a single-player drama and gossip simulation game. You play a fictional character in a fictional friend group dealing with an ongoing fictional crisis. You exchange text messages with AI-generated characters through an iMessage-style direct-message interface and view an Instagram-style social feed populated by AI-generated posts.
GOSSIP is not a multiplayer game. It does not offer user-to-user messaging, public profiles, community posts, friend lists, shared rooms, matchmaking, or other social features that allow users to interact with each other.
All scenarios are pre-authored by Stratara. AI systems improvise dialogue, images, and other in-game content within those scenarios.
This Privacy Policy covers how we handle information in connection with GOSSIP. It is separate from our Terms of Service.
The Terms of Service govern subjects such as acceptable use, subscriptions, AI-output terms, intellectual property, no-reliance language, disclaimers, and dispute resolution. This Privacy Policy focuses only on privacy and data handling.
At sign-up, GOSSIP requires you to tick a checkbox acknowledging links to both the Terms of Service and this Privacy Policy before sign-in is enabled.
This Privacy Policy is governed by the laws of the State of Israel, consistent with the Terms of Service. This does not limit any mandatory privacy rights you may have under the laws of your country, state, province, or territory.
GOSSIP is offered only to users who meet the minimum age shown for GOSSIP on the Apple App Store in their country or region, or any higher minimum age required by applicable law.
App Store age ratings for GOSSIP may vary by country or region. Users will only see the age rating that applies to their country or region on the App Store.
Depending on territory, the displayed App Store age rating may appear as 15+, 16+, 18+, or a similar local equivalent.
GOSSIP is distributed only through the Apple App Store and is available on iOS only.
GOSSIP is not offered in the following jurisdictions, which are blocked at the App Store level:
This Privacy Policy is written for users in the jurisdictions where GOSSIP is available, including the United States, Canada, Australia, New Zealand, Japan, South Korea, Singapore, Hong Kong, India, Brazil, Mexico, Argentina, Chile, Colombia, Peru, South Africa, Turkey, Israel, and other App Store jurisdictions not listed above.
This Privacy Policy is not drafted as a GDPR, UK GDPR, or EU/UK privacy notice because GOSSIP is not offered in the European Union, the European Economic Area, or the United Kingdom.
GOSSIP is not directed to children or to users who are below the applicable App Store age rating for their country or region. We do not knowingly collect information from users who do not meet that applicable age requirement. If we learn that we have collected information from such a user, we will delete that information.
See Section 11 for more detail.
GOSSIP uses three different data-handling patterns:
This distinction matters. Stratara can access and delete the server-side information it stores. Stratara cannot access or delete information that is stored only on your device because that information is not transmitted to or stored by Stratara.
We store the following information on Stratara-controlled server systems hosted through Supabase and related infrastructure:
| Category | What it includes | Purpose |
|---|---|---|
| Account information | Email address | Account identification, sign-in, account recovery, and essential service communication |
| Account identifier | Account UUID generated at sign-up | Unique user identification across server operations |
| Subscription information | Subscription tier | Entitlement enforcement and feature gating |
| Usage counters | Daily turns, monthly media, onboarding turns, and similar subscription counters | Enforcement of subscription-tier limits |
| Push notification token | Expo push token, if you grant push-notification permission | Sending push notifications to your device |
| User-reported message content | AI-generated message content you submit through the long-press report flow | Trust-and-safety review |
| Reported message metadata | Message ID, message type, NPC ID, scenario ID, and report timestamp | Trust-and-safety review |
We process the following information to provide GOSSIP, but we do not persistently store it on Stratara's servers:
| Category | Processing flow | Stratara persistence |
|---|---|---|
| User prompts | Text messages you send to in-game AI characters are forwarded to xAI's Responses API through Stratara's main simulation endpoint | Transit-only at Stratara |
| Image-generation prompts | Prompts for AI-generated photos, avatars, and screenshots are forwarded to Replicate or xAI, depending on the feature | Transit-only at Stratara |
| Apple StoreKit receipt payload | Receipt data is verified through Apple's App Store Server API | Not stored by Stratara after verification; only the resulting subscription tier is retained |
Prompts sent to AI providers may still be retained by those providers as described in Sections 6, 7, and 8.
The following information is stored locally on your device and is not transmitted to or stored by Stratara:
This local information may be lost if you delete the app, change devices, clear app storage, or restore your device. Stratara does not provide cloud backup for game content.
GOSSIP does not request access to your camera, microphone, photo library, speech recognition, location, or contacts.
GOSSIP does not collect health and fitness data, payment-card numbers, bank-account details, precise location, coarse location, address-book contacts, browsing history, search history, audio recordings, photos or videos from your device, or multiplayer gameplay content.
GOSSIP does not use advertising identifiers, third-party advertising SDKs, or cross-app tracking.
We collect your email address when you create an account through Supabase authentication.
We collect reported message content only when you choose to submit a report. To submit a report, you long-press an AI-generated message and use the in-app report flow. When you submit the report, GOSSIP sends the reported message content and related metadata to Stratara for review.
Submitting a report does not guarantee that Stratara will take any specific action.
We generate an account UUID when you sign up.
We calculate and store subscription usage counters based on your use of paid or limited features. These counters are used to enforce limits such as daily turns, monthly media, and onboarding turns.
We receive a push notification token if you grant notification permission through iOS. If you do not grant permission, we do not receive a push token for that device.
When you subscribe through Apple, Apple handles payment processing. Stratara does not receive your full payment-card details.
Stratara verifies Apple StoreKit receipt payloads through Apple's App Store Server API. After verification, we store the resulting subscription tier for your account.
When you send a message to an AI character, GOSSIP sends the prompt to Stratara's server, which forwards it to xAI to generate the AI character's response.
When GOSSIP generates certain images or screenshots, GOSSIP sends image-generation prompts to Replicate or xAI, depending on the feature.
Stratara does not persistently store those prompts. The AI providers may retain them as described in this Privacy Policy.
We use information only for the purposes described below.
We use your email address and account identifier to:
We use subscription tier and usage counters to:
Account deletion is separate from subscription cancellation. If you delete your GOSSIP account, that deletes server-stored account data, but it does not cancel any active Apple subscription. You must cancel your subscription separately through Apple's subscription-management tools.
We use prompts in transit to provide AI gameplay features, including:
Stratara does not persistently store your prompts on its servers for these features.
If you grant notification permission, we use your push notification token to send notifications to your device. You can turn off notifications at any time in iOS settings.
We use user-reported message content and reported message metadata to review AI-generated content that users choose to report.
Human review is limited to the user-report flow. Stratara does not review ordinary conversation history because ordinary conversation history is stored only on your device and is not transmitted to Stratara.
We use limited server-side information to:
We do not use your information for third-party advertising.
We do not sell your personal information.
We do not share your personal information for cross-context behavioral advertising.
We do not use your prompts, messages, conversation history, reported content, or AI-generated output for AI training.
We do not conduct human review of your gameplay except when you choose to submit a report.
GOSSIP includes AI-generated characters, messages, images, screenshots, avatars, and in-game social-feed content. These characters are fictional. They are not real people.
GOSSIP also includes in-app AI disclosure surfaces. An "AI content in this app" link on the name-entry screen and an "About this app" item in the settings menu open a modal explaining that characters are AI-generated, are not real people, should not be relied on for professional advice, and that users in crisis should contact appropriate crisis or emergency services.
This Privacy Policy does not restate all Terms of Service or in-app safety language. It describes the data flows behind those AI features.
When you send a text message to an in-game AI character:
Stratara does not persistently store the prompt or the ordinary conversation history on its servers.
xAI receives user prompts and conversation-thread context through the previous_response_id chain used by the Responses API. xAI retains Responses API thread data for 30 days under the current xAI retention policy for that feature.
Stratara does not use your prompts, messages, conversation history, or any AI-generated output associated with your account to train, fine-tune, or evaluate any machine-learning model operated by Stratara or any third party. Our AI providers (xAI and Replicate) commit contractually not to train on the data they receive from GOSSIP.
This is a firm commitment. We do not use vague "service improvement" language to reserve a hidden right to train models, fine-tune models, evaluate models, or conduct ordinary human review of your gameplay.
GOSSIP uses AI image-generation features for in-game images, avatars, and screenshots.
Depending on the feature:
When an image-generation feature is used:
Stratara does not persistently store the image-generation prompt or generated image on its own servers.
Replicate removes API prediction input parameters, output values, output files, and logs after one hour by default.
If you long-press an AI-generated message and submit a report, the reported message content and associated metadata are transmitted to Stratara.
The metadata may include:
Stratara uses this information for trust-and-safety review. Submitting a report does not guarantee any specific action, response, or outcome.
We share information with service providers only as needed to operate GOSSIP.
| Provider | Role | Information received |
|---|---|---|
| xAI | Primary language model provider through Grok 4.1 via Responses API; fallback image generator through Grok Imagine | User prompts and conversation-thread context through the previous_response_id chain; image-generation prompts for fallback image features |
| Replicate | Image model hosting for Seedream 4 photos and avatars, and Nano Banana screenshots | Image-generation prompts |
| Supabase | Authentication and database hosting | Email address, account UUID, subscription state, usage counters, push token, reported messages, and reported-message metadata |
| Amazon Web Services | Application server hosting through App Runner in us-east-1 | Request traffic transiently; infrastructure logs according to AWS logging configuration |
| Apple | App Store distribution, StoreKit payment processing, receipt verification, and push-notification delivery | Payment information handled by Apple; StoreKit receipt payloads; push payloads as applicable |
| Expo | Expo Application Services and Expo Push Service | Push notification payloads and push tokens |
These providers may process information only for the purposes of providing their services to Stratara, subject to their applicable contracts and policies.
xAI and Replicate are AI providers. They receive prompts only to provide the AI features described in this Privacy Policy.
xAI and Replicate contractually commit not to train on the data they receive from GOSSIP.
Apple independently processes information for App Store distribution, payments, subscriptions, device-level push delivery, and related Apple services. Apple's own privacy terms apply to Apple's processing.
Stratara does not receive full payment-card details from Apple.
Stratara does not sell personal information.
Stratara does not share personal information for cross-context behavioral advertising.
Stratara does not use advertising SDKs, data brokers, or third-party ad networks in GOSSIP.
We may disclose information that we store if we are legally required to do so, or if disclosure is necessary to protect the rights, safety, or security of Stratara, users, or others.
We retain server-side information as follows:
| Information | Retention |
|---|---|
| Email address | Duration of the account plus a reasonable period after deletion |
| Account UUID | Duration of the account |
| Subscription tier | Duration of the account |
| Subscription usage counters | Duration of the account; counters reset periodically according to business logic |
| Push notification token | Replaced on each new token issuance; cleared on account deletion |
| User-reported message content | 2 years |
| Reported message metadata | 2 years (same period as reported message content) |
| Apple StoreKit receipt payload | Not stored by Stratara after verification; only the resulting subscription tier is retained |
Stratara does not persistently store ordinary user prompts or image-generation prompts on Stratara servers.
However, AI providers may retain data as follows:
previous_response_id chain.When you delete your account, Stratara deletes the server-stored information it controls, subject to legal retention requirements. Account deletion does not necessarily delete data held by AI providers during their short provider-retention windows.
Conversation history, AI-generated images and screenshots, game progression, player name, crisis-intro data, long-term memory, chat channels, and message histories are stored only on your device.
Stratara does not have a copy of this data.
This data may be lost if you:
Stratara does not provide cloud backup of game content.
GOSSIP provides in-app account deletion from the settings menu.
Account deletion removes server-stored user data through Supabase foreign-key cascade deletion, except for information Stratara is legally required to retain.
Account deletion is permanent for server-stored account data. It does not cancel an active Apple subscription. You must cancel subscriptions separately through Apple.
We use technical and organizational safeguards designed to protect information we store and process.
These safeguards include:
No app, server, provider, or transmission method is perfectly secure. We do not guarantee that information will never be accessed, disclosed, altered, or destroyed by unauthorized parties.
If we identify a security incident that requires user notice under applicable law, we will provide notice as required.
You can delete your GOSSIP account in the app settings menu.
Account deletion removes server-stored user data, except information Stratara is legally required to retain. It does not cancel an active Apple subscription.
Subscriptions are managed by Apple. To cancel an active subscription, use Apple's subscription-management tools in iOS.
Deleting your GOSSIP account does not cancel your Apple subscription. If you want to stop future subscription charges, cancel the subscription through Apple.
Push notifications are optional.
You can turn off push notifications at any time in iOS settings. If you turn off notifications, GOSSIP will no longer be able to send notifications to that device.
GOSSIP does not request camera, microphone, photo library, speech recognition, location, or contacts access.
If GOSSIP adds any such permission in the future, Stratara will update this Privacy Policy and the relevant in-app notices before collecting that data.
You may contact us to request access, correction, deletion, or other privacy assistance for information Stratara stores about you.
Because most gameplay content is stored only on your device, Stratara cannot provide, correct, or delete ordinary conversation history, AI-generated images, screenshots, game progression, player name, long-term memory, or local chat histories.
To make a request, contact us at privacy@stratara.ai.
We may need to verify your account before fulfilling a request.
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, may provide you with specific privacy rights, subject to legal limitations and exceptions.
These rights may include:
Stratara does not sell personal information and does not share personal information for cross-context behavioral advertising.
Stratara does not ask you to provide sensitive personal information. If you choose to include sensitive information in a prompt or report, we use it only as described in this Privacy Policy: to provide the requested AI feature or to review the report you submitted.
Residents of other US states may have privacy rights under applicable state consumer privacy laws. These rights may include the right to access, correct, delete, obtain a portable copy of personal information, opt out of targeted advertising, opt out of sale, opt out of certain profiling, or appeal a denied request.
Stratara does not sell personal information, does not use targeted advertising, and does not use personal information for profiling that produces legal or similarly significant effects.
You may submit requests by contacting us at privacy@stratara.ai.
Depending on where you live, you may have privacy rights under local law, including rights to access, correct, delete, withdraw consent where processing is based on consent, object to certain processing, or lodge a complaint with a local authority.
Nothing in this Privacy Policy limits mandatory privacy rights you may have under applicable law.
Some processing is necessary to provide GOSSIP. For example:
If you do not want prompts sent to AI providers, you should not use AI gameplay features. If you do not want reported content sent to Stratara, do not submit a report.
GOSSIP is offered only to users who meet the applicable App Store age rating shown for their country or region, subject to any higher minimum age required by applicable law.
Stratara does not knowingly collect information from users who do not meet that applicable age requirement. If Stratara becomes aware that it has collected information from such a user, Stratara will delete that information.
GOSSIP is not directed to children or to users who are below the applicable App Store age rating for their country or region, and Stratara does not offer parental-consent account creation for younger users.
Stratara is an Israeli company.
GOSSIP's primary server-side infrastructure is hosted in the United States, including Supabase PostgreSQL in us-east-1 and AWS App Runner in us-east-1.
Your information may be processed in Israel, the United States, and other countries where Stratara's service providers operate.
If you use GOSSIP from outside Israel or the United States, you understand that your information may be transferred to and processed in countries that may have privacy laws different from those in your jurisdiction.
Because GOSSIP is not offered in the European Union, the European Economic Area, or the United Kingdom, this Privacy Policy does not describe GDPR or UK GDPR transfer mechanisms.
Mandatory local rights continue to apply where required by law.
We may update this Privacy Policy from time to time.
If we make material changes, we will provide notice in a reasonable way, such as through the app, the App Store listing, or the policy page. If a change requires your renewed acknowledgment or consent under applicable law or Apple requirements, we will request it before the change applies.
We will update the effective date when we publish a new version.
For privacy questions or requests, contact Stratara at:
* * *
If you have any questions, please contact us at privacy@stratara.ai.
Related documents:
Gossip Terms of Service