Privacy Policy
1. Who we are
Table Canon (“we,” “us,” or “our”) is operated by Das Good Code. This Privacy Policy explains how we collect, use, store, and delete information when you use the Table Canon mobile application and related services (the “Service”), including our website at tablecanon.app.
2. What this Service does
Table Canon helps tabletop game masters record table sessions, transcribe audio, build lasting campaign memory (people, places, events), and generate session recaps you can ask questions about later.
3. Information we collect
3.1 Account information
Depending on how you sign in, we may collect:
- Email address and display name (e.g. Google Sign-In or Sign in with Apple)
- A unique account identifier from our authentication provider (Firebase Authentication)
- Guest / anonymous account identifiers if you use Guest mode
Guest mode still creates a server-backed account under a unique ID so your campaigns can sync; it is not “stored only on this device.”
3.2 Session and campaign content
When you use the Service, we process content you provide, including:
- Audio recorded from your device microphone or audio files you upload (archive uploads)
- Transcripts derived from that audio
- Campaign and session metadata (titles, players, calibrations, settings)
- AI-generated outputs such as recaps, outlines, timelines, world/entity notes, prep notes, and answers to questions you ask about your campaign
Audio from the table may include voices of players and others near the microphone. You are responsible for obtaining any consent required in your jurisdiction before recording.
3.3 Device and usage data
We may collect:
- Device type, OS version, and app version
- Basic diagnostics and crash information
- Network connectivity status needed to upload audio and sync data
- Approximate usage of processing quotas (e.g. monthly processed audio time)
We do not sell your personal information. We do not use your session audio to train generalized public AI models for unrelated products.
3.4 Payments
If you purchase a subscription, payment is processed by Apple or Google (and, when configured, our subscription partner such as RevenueCat). We receive subscription status and entitlements; we do not receive your full payment card number.
4. How we use information
We use information to:
- Provide, operate, and improve the Service (transcription, memory, recaps, Ask)
- Authenticate you and secure your account
- Sync your campaigns across devices you sign into
- Enforce plan limits and prevent abuse
- Respond to support requests
- Comply with law and protect our rights
5. AI and service providers
To deliver the Service we use trusted processors, which may include:
- Google Firebase — authentication and related app infrastructure
- Google Cloud — hosting, storage (including audio objects), databases, and task queues
- Speech-to-text / LLM providers — to transcribe audio and generate campaign memory and recaps (e.g. via API gateways such as OpenRouter or similar vendors we configure)
These providers process data on our instructions to provide the Service. They are not authorized to sell your audio or campaign content.
6. Storage and retention
- Session audio, transcripts, and campaign memory are retained until you delete the session or your account, unless we must retain something longer for legal reasons.
- There is no automatic “expire after N days” deletion of session content at launch.
- Local audio on your device is kept only as needed to finish upload/transcription retries, then removed when processing succeeds.
- We use industry-standard encryption in transit (HTTPS) and rely on cloud provider encryption at rest.
7. Sharing
We share personal information only:
- With processors who help run the Service (Section 5)
- With app stores / billing partners for subscriptions
- If required by law, legal process, or to protect safety and rights
- If we transfer the business (you would be notified of material changes)
We do not sell personal information. We do not share session audio for third-party advertising.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, export, or delete personal information.
- Sign out (when available in Settings)
- Delete individual sessions
- Delete your account (when available — removes associated campaign data per our deletion process)
We will respond within a reasonable period. For account deletion requests we disable access promptly and purge stored campaign data from our systems as described in our product documentation (async purge across databases and storage).
9. Children
Table Canon is not directed to children under 13 (or the minimum age in your country). Do not use the Service if you are under that age. If you believe a child provided us information, contact [email protected].
10. International users
We may process data in the United States and other countries where our providers operate. If you use the Service from elsewhere, you understand your information may be transferred to those locations.
11. Security
We use reasonable administrative and technical measures appropriate to the sensitivity of audio and campaign data. No method of transmission or storage is 100% secure.
12. Changes
We may update this Policy. We will post the new effective date at https://tablecanon.app/privacy. Continued use after changes means you accept the updated Policy where permitted by law.