Called It Privacy Supplement

Relationship to RuneDance’s Privacy Policy

Read this supplement together with the RuneDance Privacy Policy dated 2026-06-14. This supplement describes Called It specifically and supplements, rather than replaces, the parent policy. RuneDance retains the ability to use the services and processing described in its policy, subject to applicable law and any required notice or consent. A service listed as a possibility is not necessarily active in Called It.

At the date of this supplement, Called It uses the authentication, analytics, hosting and AI services described below. Facebook Pixel, Google Analytics, PayPal, Shopify, personalized advertising and browser fingerprinting are not currently enabled in this product. This describes the current implementation, not a commitment that RuneDance will never introduce other services. Any future deployment remains subject to applicable privacy requirements. Necessary authentication cookies support sign-in. Acceptance of these agreements does not replace separately required marketing or tracking consent. Visits to RuneDance’s website are governed by its own practices.

Operator and contact

RuneDance LLC, Sheridan, Wyoming, United States, operates Called It. For privacy questions or account and data deletion requests, email hello@runedance.net from your account email. Requests are handled manually with identity verification; there is currently no automated account deletion tool.

Information we collect

Google sign-in provides your account identifier, name, email, verification status and profile image. Better Auth stores account credentials needed for sign-in and database-backed sessions, which may include IP address and user agent. We store your age-confirmation timestamp and versioned acceptance records for our Terms, Privacy Supplement and free-access policy, and the accepted RuneDance Terms and Privacy Policy versions, including your adult certification, not the birth date entered during confirmation. We also store friendships, invitations, questions, free-text Play for promises, their completion or skip status, update timestamps and the updating participant’s account identifier, rules, predictions, results, dispute history, reports, waiting-list requests and feature usage counts.

Who sees challenge information

One-on-one challenges and their friendly promise status are visible to their participants. A person with an invitation link can preview the attached question, Play for text, deadline and inviter’s display name. Links can be forwarded; these previews are not limited to people already on your friend list. Group invitation links reveal the question, description, options, deadline, resolution rules, host name and participation count. Hosts and submitted participants can see participant names, picks, results, leaderboards and change history. Authorized operators can review reports and relevant records. Do not put sensitive personal information in challenges.

Sharing an image card or copying post text exports the question and challenge status. Only participants can generate these exports, but anyone receiving them can view or forward them. You choose whether to publish them. Share only what you are comfortable making public.

Hosting, analytics and logs

The app runs on Vercel with PostgreSQL and Prisma; production database hosting is configured by the operator (currently Neon). Google and Better Auth support authentication. Vercel Web Analytics measures site usage. Our custom analytics send event names, not question text, invitations, account identities or OAuth payloads. We also store first-party conversion events and feature usage linked to accounts. Pino logs route templates, status, timing and request IDs, plus AI prompt versions, numeric token usage and sanitized validation field/reason codes; it does not log prompt or draft text. Axiom receives those logs when configured. We redact application payloads and credentials from custom logs, but hosting providers may maintain their own operational records.

AI processing

Configured AI API provider: openrouter.ai. Model: nvidia/nemotron-3-super-120b-a12b:free. The selected service may involve upstream model providers; their retention terms also apply.

AI is optional and runs through a server-configured external provider. Manually creating a challenge or promise does not send it to an AI reviewer. If you choose AI creation, only your submitted prompt, selected timezone, current time and generation instructions are sent; we do not send your friend list or unrelated challenge history. The provider and model may change. The operator must identify the enabled provider and its privacy terms before enabling AI for public users. We store request IDs, usage month, status and timestamps, not AI prompts or generated drafts as a separate AI history. A draft you publish becomes stored challenge content. External provider retention depends on its terms; this draft does not promise zero retention or exclusion from training.

Payments

Called It currently does not process payments or collect card details. Waiting-list requests are stored against your account so we can review demand and grant higher usage. We do not collect additional contact information for these requests.

Retention and requests

Account and challenge data remain in the database until reviewed for deletion, anonymization or necessary legal retention. There is no automatic expiration policy for all product records yet. Shared challenge history and audit records may need to be retained or anonymized to protect other participants and resolve disputes; historical billing records may be subject to legal requirements. Backups and provider logs follow their configured retention. Contact us to request access, correction or deletion. Final retention schedules and applicable US privacy rights require review before launch.

Abuse prevention and legal requests

We may use and retain relevant account, challenge, acceptance and moderation records to investigate abuse, protect the service, respond to lawful requests or establish, exercise or defend legal claims, subject to applicable law. This is not a promise that every record is retained permanently or can be restored. A request does not guarantee immediate deletion of shared history, backups or records subject to a lawful preservation requirement.

No data sales

We do not sell personal data, private challenge content or chat records. Called It has no advertising system or user-data trading feature. We collect information needed to operate, secure and improve the service.