Privacy Policy - DropTile

Superpose, LLC, doing business as DropTile ("we," "us," or "our"), operates the DropTile apps, droptile.com, and related puzzle, profile, event, and sharing services. This policy explains what information we collect, why we use it, who can see it, and how you can manage or delete it.

You need an account to play in the app. Public website pages and shared previews may be viewed without signing in. This policy also covers creator inquiries and support requests.

Information We Collect

Account and profile information: account identifiers, email address, sign-in provider, username, display name, profile image, bio, links, and settings you provide.
Sign-in information: authentication credentials and tokens processed by our authentication services. If you choose Apple, Google, or another supported sign-in provider, we receive the account identifier and the name, email, or profile image that provider makes available. Apple may provide a private relay email address. Where Facebook Login is offered, we request public_profile and email for account identification and profile setup, not friends, birthday, age range, or permission to post to Facebook.
Content and interactions: videos, audio, images, captions, comments, follows, likes, sharing choices, reports, and other information you submit or generate in DropTile. Uploaded media is processed into puzzles, thumbnails, previews, and share assets.
Gameplay and events: puzzle attempts, moves, completion times, scores, progress, leaderboard participation, event participation, and reminder preferences.
Age and consent information: age ranges or eligibility signals from supported platform services, a declared age range where permitted, applicable region or storefront information, and records of required approvals, corrections, or consent withdrawal. These records help apply age and privacy rules; they are not public profile fields or used for advertising.
Technical and security information: IP addresses, device and browser type, operating system and app version, request timestamps, service logs, authentication and device attestation results, and push-notification tokens. We use these to deliver and protect the service.
Communications: information in creator requests, support emails, content reports, appeals, and attachments you send us. Please do not send passwords or unnecessary sensitive information.
Guardian and supervised-creator information: for guardian-managed creator accounts, the guardian's name, email, and age confirmation; the guardian's attestations of their relationship to and authority for the creator; the supervised creator's age or age range; any verification information we request; and records of guardian consent and its withdrawal.
Legal and acceptance records: records of when and how you accepted our Terms and Privacy Policy. These include the document version, the date and time, the app or browser version, the device type, your IP address, and the screen and wording shown. They also include arbitration opt-out requests and your responses to updated terms.
Creator attestations and AI disclosures: your confirmations about rights and permissions when you upload content, and whether you marked a Drop as containing realistic AI-generated or altered content.
Copyright and legal notices: information in copyright notices, counter-notices, and other legal notices, including the names and contact details of the people who send them.

Where a paid feature is offered, we may receive purchase identifiers, product and subscription status, and store receipts needed to provide that feature. The store or payment provider handles payment details; DropTile does not receive your full payment-card number from an app-store purchase.

How We Use Information

We use information to:

Create and secure accounts, authenticate users, and restore progress.
Deliver puzzles, profiles, comments, events, leaderboards, and sharing features.
Process creator media and honor its visibility and distribution settings.
Apply age, consent, privacy, account, and content restrictions.
Review content and reports, prevent fraud or abuse, and handle appeals.
Send requested account emails, support responses, and enabled notifications.
Maintain reliability, troubleshoot problems, and understand use through permitted measurement.
Fulfill purchases where offered and meet legal obligations.
Operate and improve DropTile using automated processing, with current and potential AI uses described in "AI and Machine Learning" below.
Display AI-content labels and apply our content standards.
Record and prove acceptance of our Terms, process arbitration opt-outs, and enforce our Terms.
Process copyright notices and counter-notices and apply our repeat-infringer policy.
Detect, report, and prevent child sexual exploitation and other illegal content.

Where law requires a legal basis, we rely on providing the service you request, legitimate interests such as security and service maintenance, compliance with legal obligations, or consent where required. You can withdraw consent for consent-based processing as described below.

AI and Machine Learning

Current practices and future options. We do not currently send uploaded videos to an AI provider for automated policy review, or share or license uploaded content to business partners to train their own AI models. We are considering AI-assisted policy review, in which a service provider would analyze content on our behalf to help identify violations of our Terms. That feature is not yet implemented. The partner model-development uses described below are potential future activities; they do not mean that an outside model-training partnership is active. Before introducing a material new use or disclosure, we will update this policy, provide notice, and obtain consent where required, as described in Security and Policy Changes.

Automated processing. We and our service providers use automated tools to operate DropTile, including turning videos into puzzles and creating previews. We may introduce AI and machine-learning tools for tasks such as selecting thumbnails, estimating difficulty, generating captions, and detecting spam, fraud, cheating, and content that may violate our Terms. We may use content to develop and improve these tools.

Gameplay data. We may use gameplay and usage data to develop, train, test, and improve machine-learning models for DropTile. Gameplay and usage data includes puzzle attempts, moves, completion times, scores, progress, and how people interact with features. We use these models for purposes such as puzzle generation and difficulty, recommendations, personalization, fair-play and cheat detection, accessibility, and performance. Where practical, we use de-identified or aggregated data. We do not use age or consent records, sign-in email addresses, or support communications to train these models.

Safety. We may use content, reports, and moderation decisions to develop and improve tools that detect and prevent content and conduct that violates our Terms or the law.

Your uploads and model development. We may use uploaded videos, audio, images, captions, and associated metadata to build, train, evaluate, and improve AI systems, machine-learning models, and algorithms. This includes generative models that produce video, images, audio, or text, and technologies and services developed for DropTile, our service providers, or our business partners. These uses may involve information in existing uploads and new uploads, subject to applicable law and any required notices or consents.

Settings and choices. Private and Link-only settings govern distribution to other users; they do not, by themselves, exclude content from the processing or model development described here. We honor applicable settings and privacy rights, and obtain consent where required by law. See Your Privacy Rights for how to make a request.

Service providers and business partners. We may share uploaded content and associated metadata with providers and partners for the model-development purposes above. Providers acting on our behalf process information for the services they provide to us. We may separately authorize business partners to develop or improve their technologies and services using this content. We require recipients to protect personal information and limit its use to the purposes permitted by our agreements, this policy, and applicable law.

Public Profiles, Content, and Sharing

Public profile details and eligible public content can appear in the app, on public web pages, in shared previews, and in search-engine results. Depending on your settings and the feature, other users may see your username, display name, avatar, bio, links, comments, published Drops, and leaderboard results. Your sign-in email and private age/consent records are not published as part of your public profile.

A Link only Drop is not listed in Discovery or on your public profile, but anyone who receives its link may be able to open its preview or access the Drop subject to applicable access rules. Links can be forwarded. Private is a separate visibility setting. Discovery distribution depends on the applicable content and creator-review process.

Staff and service providers may access submitted content as needed to process it, investigate reports, or operate the service, including content that is not public. If you share outside DropTile, the recipient platform processes the shared content under its own policies. Copies, screenshots, and search-engine caches controlled by others may remain after you remove content from DropTile.

If a creator marks a Drop as containing realistic AI-generated or altered content, or if we apply that label, the label may be shown with the Drop wherever it appears.

Creators' content may show people, including minors, who appear with permission. A guardian-managed creator account is owned and supervised by the creator's parent or guardian, and the public sees only the account's public profile details. If you, or your child, appear in content without your permission, contact support@droptile.com to request removal.

Service Providers and Other Disclosures

We use Google Firebase and Google Cloud for services such as authentication, hosting, storage, database operations, security, notifications, and permitted measurement. We use email delivery services, including Resend, for service communications. Apple and Google provide platform and store services; Meta is involved when Facebook Login is available and selected. RevenueCat may relay Apple server notifications used to handle consent changes and, where enabled, purchase services.

Providers processing personal information on our behalf must protect it consistently with this policy and applicable requirements, and use it for the services they provide to us. Sign-in providers, app stores, and external sites also process information under their own policies. We may disclose information when reasonably necessary to comply with law, protect rights and safety, investigate misuse, or carry out a merger, acquisition, or transfer of the business. Disclosures that applicable law treats as a sale or sharing of personal information are subject to that law's notice, choice, and consent requirements. See Your Privacy Rights.

We may also disclose information in these situations:

Potential AI development partnerships. We do not currently share or license uploaded content to business partners to train their own AI models. If we introduce such partnerships, disclosures of uploaded content and associated metadata for the uses described in AI and Machine Learning will be subject to the notice and consent process described there, applicable settings, contractual restrictions, and legal requirements.
Copyright notices. When we remove content in response to a copyright notice, we may give the uploader a copy of the notice, including the sender's name and contact details. When we receive a counter-notice, we forward it, including the sender's name, address, and phone number, to the person who sent the original notice, as the Digital Millennium Copyright Act requires.
Child safety. We report apparent child sexual exploitation to the National Center for Missing & Exploited Children (NCMEC), as federal law requires. The report includes relevant content and account information. We also preserve that information as required by law and cooperate with law enforcement.
Guardian-managed accounts. Information about a guardian-managed account and its content is available to the guardian who owns the account.

Information may be processed in the United States or other countries where we and our providers operate. Where required, we use legally recognized safeguards for international transfers.

Cookies, Measurement, and Your Choices

The website uses browser storage and related technologies for functions such as authentication, remembering choices, and carrying out requested actions. Hosting, security, media delivery, and font providers receive connection information, such as your IP address and browser details, when your browser requests their resources.

Public profile, Drop, and event pages offer a choice about optional analytics. When enabled, measurement may include page visits, actions, device/browser information, referring pages, and campaign links. You can decline the prompt. To reset a previous choice, clear DropTile's cookies and site data in your browser, close open DropTile tabs, and choose Decline when you return. Event pages also provide Privacy choices. These choices are specific to each browser and device. Essential service and security logs are separate from optional analytics.

Do Not Track. Our public profile, Drop, and event pages do not send optional analytics when your browser reports an enabled Do Not Track signal. This does not stop the connection information and essential service or security processing described above.

Our mobile apps may use crash reporting, performance monitoring, and analytics tools to keep DropTile reliable and understand how it is used. Where the law requires your consent for nonessential measurement, we ask for it first, and you can change your choice in the app's settings or your device settings. Gameplay records, service logs, and information you send to support are processed to operate the app.

You can change supported profile and privacy settings in the app and manage notifications, camera, microphone, and photo access through your device settings. Feature permissions are requested when needed. Denying a feature permission does not require you to grant unrelated access. You can stop nonessential product emails using an unsubscribe option where provided or by contacting us.

You may disconnect a social sign-in provider through that provider's account settings. Disconnecting a provider or uninstalling DropTile does not by itself delete your DropTile account. Use the deletion steps below. To correct age information or ask about a required consent record, contact support; applicable platform or guardian controls may also need to be updated.

Retention

We retain account information and content while needed to provide the service, manage your settings, and resolve operational or legal obligations. Retention depends on the information's purpose, whether the account or content remains active, and security, dispute, or legal needs.

Account deletion removes or de-identifies associated data through background processing. Some records remain after deletion, generally in pseudonymized form and with restricted access:

Safety and audit records. We keep limited records for safety and audit purposes. For example, we generally keep moderation reports for about six months, and certain comment-report and event audit records for up to about one year.
Legal records. We keep records of Terms acceptance, arbitration opt-outs, copyright notices and strikes, and records of terminated accounts for as long as needed to enforce our Terms, prevent evasion of account bans, and establish or defend legal claims. This is generally up to six years after an account is closed.
Child-safety records. We keep information associated with a child-safety report for the period required by law.

Backups, legal holds, and records required for legal or transaction obligations may have different retention periods. We do not use retained records to restore a deleted public profile.

Machine-learning models, and de-identified or aggregated data developed before an account is deleted, are not deleted or retrained. Information from deleted accounts is excluded from future training data.

Delete Your Account or Data

In the app: open Profile > menu > Delete account, then follow the confirmation steps. You may be asked to sign in again to verify ownership. Once the request is accepted, your profile is removed from public access and cleanup proceeds in the background. Deletion covers the account and associated content and personal information, subject to the limited retention described above; it is not just an account deactivation.

Without app access: email support@droptile.com with the subject "DropTile data removal request." Include the account email or username and describe whether you want the full account or particular information removed. This route also applies to information received through Facebook Login. We may ask for proportionate information to verify ownership; never send your password.

Guardian-managed accounts: the guardian who owns the account can delete it using the steps above. A guardian, or a supervised creator, can also ask us to remove specific content featuring the supervised creator by emailing support@droptile.com with the Drop link. If you appear in someone else's Drop without permission, or your child does, email support@droptile.com with the link. We will review the request under our Terms.

Deleting an account does not necessarily cancel a store-managed subscription. If you have one, manage or cancel it in the relevant app store. Copies held by other people or platforms are outside our control, and the store may retain its own transaction records.

Age and Teen Privacy

DropTile is intended for people aged 13 and older, subject to higher minimum ages and required permissions where a person lives or on their platform. Users under 18 may use DropTile only with a parent or guardian who has reviewed and agreed to our Terms. We use age and consent information to apply eligibility, privacy, and feature protections.

Creators. Creating and publishing Drops is available to adults aged 18 or older. It is also available through guardian-managed creator accounts: a parent or legal guardian owns and supervises an account for a creator aged 13 to 17. For guardian-managed accounts, we collect the information described in "Information We Collect," and the guardian controls the account's settings and deletion. Guardian-managed accounts are not eligible for creator compensation.

Children under 13. We do not intend to collect personal information from children under 13, or below the applicable minimum age where you live. Children under 13 may not use DropTile or operate a guardian-managed account. If you believe a child has provided information improperly, contact support@droptile.com so we can investigate and take appropriate action. Parents or guardians may also contact us about their child's information and applicable consent rights.

Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal information; object to or restrict certain processing; withdraw consent; or appeal a decision on a privacy request. Where applicable, you may also opt out of disclosures that qualify as a sale or sharing of personal information. Contact us using the details below. We verify requests as needed and respond within the applicable legal period. You may also contact your local data-protection authority. Exercising a privacy right will not result in unlawful discrimination.

Security and Policy Changes

We use technical and organizational safeguards to protect information, but no online service can guarantee absolute security. We may update this policy as DropTile or its data practices change. We will revise the date above and provide additional notice or request consent when required.

If we make a material change to how we use personal information we have already collected, we will notify you in advance, and we will get your consent where the law requires it.

Contact

Superpose, LLC, doing business as DropTile, is responsible for the processing described here. For privacy questions, access requests, or deletion help, email support@droptile.com. To appeal a decision, email appeals@droptile.com.