Privacy Policy
Effective Date: August 12, 2026
Last Updated: August 12, 2026
The Short Version
- What you write is sent to third-party AI companies. That is how the game generates the next scene. They are all named in Section 5.
- Your stories are stored on our servers so you can come back to them, and are deleted when you delete your account.
- We do not train AI models on your stories, and we do not sell your personal information.
- You can delete everything from Settings in the app. It happens after a 7-day grace period, in case you change your mind.
- MYTHX is for ages 13 and over.
This summary is for orientation only. The sections below are what actually applies.
1. Introduction
This Privacy Policy explains how WEXPY TECHNOLOGIES (OPC) PRIVATE LIMITED ("we," "our," or "us") collects, uses, shares and protects personal information when you use the MYTHX.AI apps and website (together, the "Service"). Please read it together with our Terms of Service.
2. Who Is Responsible for Your Data
The data controller is:
WEXPY TECHNOLOGIES (OPC) PRIVATE LIMITED
A One Person Company registered in India
Contact: support@wexpy.com
3. Who Can Use MYTHX
MYTHX is intended for people aged 13 and over. It is not directed to children under 13, and we do not knowingly collect their personal information. Where local law sets a higher age for consenting to data processing, that higher age applies. If we learn that an account belongs to someone under 13, we will close it and delete the data. Parents or guardians who believe a child has provided us with personal information should contact support@wexpy.com.
4. What We Collect
4.1 Account Information
When you sign in through Google or Apple, we receive and store:
- A unique account identifier from the sign-in provider
- Your email address and display name, where the provider supplies them
- Which sign-in method you used, and when your account was created and last updated
We never receive or store your Google or Apple password.
4.2 Your Stories and Game Content
This is the most personal category of data we hold, because it is written by you and can contain anything you choose to type. We store:
- The text of the actions you write, and the choices you select
- The full transcript of each adventure — every scene generated in it
- Your characters and their attributes, appearance and backstory
- The worlds, quests and adventures on your account
- Images generated for your scenes
We store transcripts so that the story stays coherent from one scene to the next, and so you can return to an adventure later.
4.3 Purchases
- Subscription status, plan, and renewal state
- Transaction records and gem balances
- Receipt and validation data from Apple, Google or our web payment processor
We do not receive or store your card number. Payment details go directly to the app store or payment processor.
4.4 Device and Usage Data
- Device type, operating system, app version and platform
- Product analytics events — which screens you open and which features you use
- Crash reports and diagnostic logs
- A push notification token, if notifications are enabled
- IP address and approximate country, derived from it
4.5 Support and Safety
- Content reports you submit, including the reported scene and any note you add
- Messages you send to support
- Account deletion requests and their status
5. AI Providers: Where Your Words Go
MYTHX does not run its own AI models. To generate the next scene and its image, the text you write — together with enough of the current story for it to make sense — is sent to third-party AI companies, which process it and return the generated content.
Which provider handles a given request depends on the feature and on operational factors such as availability, so we may use any of the following:
| Provider | Location | What it does |
|---|---|---|
| OpenAI | United States | Generates story scenes and images |
| Anthropic | United States | Generates story scenes |
| Mistral AI | European Union (France) | Generates story scenes; screens messages for signs of real distress |
| DeepSeek | China | Generates story scenes |
| Together AI | United States | Generates story scenes |
| Black Forest Labs (FLUX) | Germany | Generates scene images |
| Replicate | United States | Generates scene images |
| fal.ai | United States | Generates scene images |
Please treat anything you type as leaving our systems. Do not enter real personal details about yourself or anyone else — real names, addresses, contact details, financial or health information — into the story.
5.1 Safety Screening
To recognise when someone may be describing real distress rather than writing fiction, the text of an action may be checked by an automated classifier before we show a link to mental-health support. Most messages are filtered out locally by a simple word check and are never sent for classification. This process only decides whether to offer you a support link; it never blocks your turn, and no human reviews it as part of that check.
5.2 Training
We do not use your stories, characters or messages to train AI models, and we do not sell or license them for anyone else to do so. We use these providers' commercial API services, under terms that do not permit them to train their models on data submitted through those APIs. Each provider remains subject to its own privacy policy, and we cannot control their internal practices beyond our contracts with them.
6. Other Services We Use
Alongside the AI providers, these companies process personal data on our behalf:
| Service | Location | Purpose |
|---|---|---|
| Google Firebase | United States | Sign-in, image storage, crash reports, analytics, push notifications, remote configuration |
| Amazon Web Services | United States | Hosting and the production database |
| Gumlet | Singapore / India | Image delivery (CDN) |
| Mixpanel | United States | Product analytics |
| RevenueCat | United States | Subscription management and purchase validation |
| Dodo Payments | United States / India | Payment processing for purchases made on our website |
| Apple / Google | United States | In-app purchase processing and billing |
7. Why We Use Your Data, and Our Legal Basis
For users in the European Economic Area and the United Kingdom, the legal bases under the GDPR are set out alongside each purpose:
- Running the game — generating scenes and images, storing your adventures, managing your account. Performance of a contract.
- Processing purchases — subscriptions, gems, receipts. Performance of a contract.
- Keeping the Service safe — content reports, moderation, abuse prevention, offering support links where someone may be in distress. Legitimate interests, and compliance with legal obligations.
- Improving the Service — analytics, crash reports, understanding which features are used. Legitimate interests, or consent where required.
- Communicating with you — support replies, service notices. Performance of a contract and legitimate interests.
- Meeting legal obligations — tax records, responding to lawful requests. Legal obligation.
8. Sharing and Disclosure
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share it only:
- With the providers named in Sections 5 and 6, so they can perform their function
- Where you ask us to, or otherwise consent
- To comply with law, a court order, or a valid request from a public authority
- To investigate or prevent fraud, abuse, or a serious risk to someone's safety
- To establish, exercise or defend legal claims
- In connection with a merger, acquisition or sale of assets — with notice to you, and the same protections continuing to apply
9. International Transfers
We are based in India, and the providers listed above are located in the United States, the European Union, Germany, China, Singapore and India. Using MYTHX therefore involves transferring your personal data outside your own country, including to countries that have not been found by the European Commission or the UK to provide an equivalent level of data protection.
Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards — principally the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum — together with additional measures where needed. You can request details of the safeguards applying to a particular transfer by writing to support@wexpy.com.
10. How Long We Keep Things
- Account information and your stories — for as long as your account is open. Deleted when you delete your account, as described in Section 11.
- Purchase and transaction records — retained after account deletion where tax and accounting law requires it, typically up to 8 years under Indian law.
- Content reports and moderation records — retained for up to 2 years so that repeat problems can be recognised.
- Analytics and crash data — retained in aggregated or pseudonymised form according to the provider's standard retention settings.
- Backups — deleted data may persist in encrypted backups for a short period before being overwritten in the ordinary course.
11. Deleting Your Account
You can delete your account and its data at any time, from Settings → Delete Account in the app, or by writing to support@wexpy.com.
Your account stops working immediately. The data is permanently erased after a 7-day grace period — a deliberate pause, so that an accidental or regretted deletion can be undone. Signing back in during those 7 days cancels the deletion and restores your account. After 7 days it cannot be recovered.
Deletion removes your account record, your adventures, worlds, quests, characters, scene transcripts and generated images.
Records we are legally required to keep — principally purchase and tax records — are retained as described in Section 10. Cancelling a subscription is separate: manage it in your Apple or Google account settings, since deleting your MYTHX account does not cancel store billing.
12. Your Rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you, and receive a copy
- Correct data that is inaccurate or incomplete
- Delete your data
- Receive your data in a portable, machine-readable format, and have it transmitted to another provider where technically feasible
- Object to, or ask us to restrict, certain processing — including processing based on legitimate interests
- Withdraw consent, where processing is based on consent, without affecting what was done before
- Not be discriminated against for exercising these rights
How to exercise them
Deletion is available directly in the app, as described in Section 11. For all other requests — including access, correction and a copy of your data — email support@wexpy.com. We handle these manually rather than through a self-service tool.
We will respond within 30 days, and will tell you if we need longer or if we need more information to verify that the request is yours. There is no charge unless a request is manifestly unfounded or excessive.
If you are in the EEA or the UK, you also have the right to complain to your local data protection authority. We would appreciate the chance to address your concern first.
13. Security
We use technical and organisational measures appropriate to the risk, including encryption of data in transit, authentication through established identity providers, access controls on production systems, and restricting who on our side can reach user data. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal data and is likely to result in a risk to your rights, we will notify you and the relevant supervisory authority as required by law.
14. Automated Decision-Making
We do not make decisions producing legal or similarly significant effects about you by automated means alone. The automated processes described in this policy — scene generation and the safety screening in Section 5.1 — do not restrict your access to the Service. Moderation decisions that affect your account involve human review, and you can ask a person to look again as described in our Terms of Service.
15. Cookies and the Website
Our website uses cookies and similar technologies that are necessary for it to function, and may use analytics cookies to understand how it is used. You can set your browser to refuse cookies, though some parts of the site may then not work properly. The MYTHX apps do not use browser cookies; they use the analytics and diagnostic services listed in Section 6.
16. Third-Party Links
The Service may link to third-party websites — for example a mental-health helpline directory, or an app store. We do not control those sites and are not responsible for their privacy practices. Please review their policies before providing personal information.
17. Changes to This Policy
We may update this Privacy Policy. If a change materially affects how we use your personal data, we will give notice in the app, by email, or on this page before it takes effect, and update the "Last Updated" date above. Where the law requires your consent for a change, we will ask for it.
18. Contact Us
For any privacy question, or to exercise the rights in Section 12:
WEXPY TECHNOLOGIES (OPC) PRIVATE LIMITED
Email: support@wexpy.com
This Privacy Policy is governed by the laws of India. If you are a consumer elsewhere, the mandatory data protection law of your own country continues to apply to you.