Privacy Policy
1. Who we are
Table Canon (“we,” “us,” or “our”) is operated by Das Good Code. This Privacy Policy explains how we collect, use, store, and delete information when you use the Table Canon mobile application and related services (the “Service”), including our website at tablecanon.app.
2. What this Service does
Table Canon helps tabletop game masters record table sessions, transcribe audio, build lasting campaign memory (people, places, events), and generate session recaps you can ask questions about later. The Service is available as a mobile app and on the web at tablecanon.app.
3. Information we collect
3.1 Account information
Depending on how you sign in, we may collect:
- Email address and display name (e.g. Google Sign-In or Sign in with Apple, when available)
- A unique account identifier from our authentication provider (Firebase Authentication)
- Guest / anonymous account identifiers if you use Guest mode
Guest mode creates a server-backed account under a unique ID so your campaigns can sync across visits on the same device or browser; it is not “stored only on this device.” Guest accounts are limited to one session; starting another requires connecting Google or Apple. We show a countdown of how long Guest data will be kept.
3.2 Session and campaign content
When you use the Service, we process content you provide, including:
- Audio recorded from your device microphone or audio files you upload (archive uploads)
- Transcripts derived from that audio
- Campaign and session metadata (titles, players, calibrations, settings)
- AI-generated outputs such as recaps, outlines, timelines, world/entity notes, prep notes, and answers to questions you ask about your campaign
Audio from the table may include voices of players and others near the microphone. You are responsible for obtaining any consent required in your jurisdiction before recording.
3.3 Device and usage data
We may collect:
- Device type, OS version, and app version
- Basic diagnostics and crash information
- Network connectivity status needed to upload audio and sync data
- Approximate usage of processing quotas (e.g. monthly processed audio time and any banked hour-pack balance)
We do not sell your personal information. We do not use your session audio to train generalized public AI models for unrelated products.
3.4 Payments
If you purchase a paid plan or hour pack:
- On mobile, payment is processed by the Apple App Store or Google Play (and managed with our billing partners).
- On the web at tablecanon.app, subscriptions and hour packs are processed by our billing partner RevenueCat, which may use payment processors such as Stripe.
We receive subscription status, purchase history, and entitlements needed to provide your plan. We do not receive your full payment card number.
4. How we use information
We use information to:
- Provide, operate, and improve the Service (transcription, memory, recaps, Ask)
- Authenticate you and secure your account
- Sync your campaigns across devices you sign into
- Enforce plan limits and prevent abuse
- Respond to support requests
- Comply with law and protect our rights
5. AI and service providers
To deliver the Service we use trusted processors, which may include:
- Google Firebase — authentication and related app infrastructure
- Google Cloud — hosting, storage (including audio objects), databases, and task queues
- RevenueCat (and payment processors such as Stripe for web purchases) — subscriptions, hour packs, and entitlement status
- Speech-to-text / LLM providers — to transcribe audio and generate campaign memory and recaps (e.g. via API gateways such as OpenRouter or similar vendors we configure)
These providers process data on our instructions to provide the Service. They are not authorized to sell your audio or campaign content.
6. Storage and retention
- For linked (Google or Apple) accounts: session audio, transcripts, and campaign memory are retained until you delete the session or your account, unless we must retain something longer for legal reasons.
- For Guest accounts:
- Campaigns and related data are automatically deleted 30 days after Guest account creation unless you connect Google or Apple before then.
- Connecting Google or Apple promotes the same account — your Guest campaigns stay with that account when the sign-in is new to us. If that Google or Apple account already has Table Canon data, we do not automatically merge two accounts; you choose which account to use.
- The app and website show a countdown while you remain a Guest.
- Hour packs: purchased processing time is stored as a banked balance on your account until used or your account is deleted. It is not tied to a calendar month.
- Local audio on your device is kept only as needed to finish upload/transcription retries, then removed when processing succeeds.
- We use industry-standard encryption in transit (HTTPS) and rely on cloud provider encryption at rest.
7. Sharing
We share personal information only:
- With processors who help run the Service (Section 5)
- With app stores and billing partners (including RevenueCat and payment processors) for subscriptions and hour packs
- If required by law, legal process, or to protect safety and rights
- If we transfer the business (you would be notified of material changes)
We do not sell personal information. We do not share session audio for third-party advertising.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, export, or delete personal information.
- Sign out
- Delete individual sessions
- Delete your account (typed confirmation required)
We will respond within a reasonable period. When you delete your account, we disable sign-in promptly and purge stored campaign data from our systems (including cloud storage and databases). Purge may complete asynchronously after access is removed.
9. Cookies and similar technologies
We use essential cookies and similar storage needed for authentication and security (for example Firebase Auth session). We do not use non-essential advertising or analytics cookies today. If that changes, we will update this Policy and add consent where required.
10. Children
Table Canon is not directed to children under 13 (or the minimum age in your country). Do not use the Service if you are under that age. If you believe a child provided us information, contact [email protected].
11. International users
We may process data in the United States and other countries where our providers operate. If you use the Service from elsewhere, you understand your information may be transferred to those locations.
12. Security
We use reasonable administrative and technical measures appropriate to the sensitivity of audio and campaign data. No method of transmission or storage is 100% secure.
13. Changes
We may update this Policy. We will post the new effective date at https://tablecanon.app/privacy. Continued use after changes means you accept the updated Policy where permitted by law.