BIG MONK GAMES
Unified Privacy Policy
Clear privacy commitments for AI-assisted experiences, creative tools, subscriptions, and a growing software portfolio.
PRIVACY POLICY
Effective date: July 13, 2026
Applies to Big Monk Games websites, web applications, mobile applications, software tools, APIs, and related services.
At a Glance
Principle
Our commitment
Ownership
You retain ownership of the content you create.
Minimization
We seek to collect only what is reasonably needed to provide, secure, support, and improve the Services.
No sale
We do not sell personal information.
Private content
We do not use private user content to train Big Monk Games AI models.
Portability
Supported Services provide practical export and account-deletion controls.
Contents
1. Scope and Privacy Principles
2. Information We Collect
3. AI Processing
4. Analytics
5. Advertising
6. Notifications and Communications
7. Authentication
8. Payments
9. Data Storage
10. Sharing and Disclosure
11. Security
12. Data Retention
13. Account Deletion and Exports
14. International and State Privacy Rights
15. Children’s Privacy
16. App Feature Categories
17. Changes and Contact
1. Scope and Privacy Principles
This Unified Privacy Policy explains how Michael Cozzolino, a New York sole proprietor doing business as Big Monk Games (“Big Monk Games,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information when you use our websites, web applications, mobile applications, software tools, APIs, support channels, and related services (collectively, the “Services”). It applies across our portfolio unless a Service provides a supplemental notice.
Our principles
Users own the content they create. We process it under a limited license to operate the Services; we do not take ownership merely because our tools process it.
Data collection is minimized. We design for practical functionality without collecting information that is not reasonably needed.
Personal information is never sold. We do not exchange personal information for money.
Private user content is not used to train Big Monk Games AI models.
AI is assistive. We do not present AI processing as medical, psychological, legal, financial, or other professional advice.
Policies follow feature categories. This lets one transparent framework cover new products without hiding material differences.
Roles and legal bases
Big Monk Games generally acts as the controller or business responsible for personal information collected through the Services. Where applicable law requires a legal basis, we process information to perform our contract with you; with your consent; for legitimate interests such as security, support, product improvement, and fraud prevention; and to comply with legal obligations. We balance legitimate interests against your rights and provide consent controls where required.
2. Information We Collect
2.1 Information you provide
Account and profile information, such as email address, display name, authentication identifiers, and account preferences.
User Content, such as prompts, journal entries, reflections, chat messages, dream descriptions, images, skyboxes, cubemaps, sprite sheets, frames, anchor data, saved projects, and files you upload or create.
Context you choose to record, such as mood, stress, sleep, fatigue, pain, goals, habits, or other reflective information. Depending on what you enter, this may be sensitive personal information.
Communications, such as contact-form submissions, support requests, waitlist signups, survey responses, and feedback.
Transaction context, such as plan, product, purchase status, entitlement, billing country, and transaction identifiers. We do not receive full payment-card details from app stores or payment processors.
2.2 Information collected automatically
Device and technical information, such as browser or app type, operating system, device type, language, time zone, IP address, identifiers, and crash or diagnostic data.
Usage information, such as screens viewed, features used, button interactions, session timing, subscription funnel events, generations, credits, exports, errors, and referring pages or campaigns.
Security information, such as login events, rate-limit signals, suspicious activity, and records needed to prevent abuse and protect accounts.
Cookies, local storage, software development kits, and similar technologies used for authentication, preferences, analytics, security, and—where enabled—advertising.
2.3 Information from others
We may receive information from authentication providers, app stores, payment processors, analytics providers, advertising platforms, referral sources, and service providers. The information depends on your settings and the provider, and may include a verified email address, provider account identifier, subscription status, attribution data, or fraud signals. We do not receive your Google or Apple password.
2.4 Information we infer
We may derive operational information such as account status, feature eligibility, approximate region from IP address, engagement patterns, or whether a generation succeeded. Reflective and AI features may produce classifications, summaries, or suggestions based on content you submit. These are functional outputs, not clinical diagnoses or verified facts about you.
3. AI Processing
3.1 What is sent
When you invoke an AI feature, we send the Input and limited technical instructions needed to produce a result to an AI provider, which may include OpenAI or Google Gemini. Depending on the feature, the Input may include text, images, project context, conversation history needed for continuity, or settings you selected. We seek to avoid sending unrelated account information.
3.2 Why we process it
We process AI Inputs to generate the result you request; maintain safety, rate limits, and reliability; troubleshoot failures; and, when permitted, evaluate and improve the feature using minimized, aggregated, or de-identified operational data. Big Monk Games does not use private User Content to train Big Monk Games AI models.
3.3 Provider processing
AI providers act as service providers or processors for applicable API traffic under their commercial terms and data commitments. They may retain limited data for abuse monitoring or legal compliance according to those terms. Provider practices can change, so we evaluate configurations and disclosures as Services evolve. Avoid submitting information that is not needed for the requested feature.
3.4 Sensitive content
Some reflective Services invite personal thoughts, dreams, emotions, symptoms, or life context. You choose what to enter. We treat this content as private User Content and limit access and use accordingly, but the Services are not medical records systems and are not intended to satisfy specialized health-record requirements such as HIPAA. Do not use them as your only repository for information you must preserve.
4. Analytics
We use analytics and diagnostics—including Google Analytics 4 and Firebase—to understand whether the Services work, identify crashes, measure feature adoption and conversion funnels, improve onboarding, attribute campaigns, detect abuse, and make product decisions. Events may include sign-up, login, second session, paywall view, checkout start, subscription completion, content creation, chat use, feature limits, device context, and generalized acquisition information.
We do not intentionally place the text of private journal entries, prompts, or creative files into analytics event names or parameters. Analytics providers may process device identifiers, IP-derived location, cookies, and usage data under their terms. Where legally required, non-essential analytics are subject to consent choices. Browser controls, operating-system settings, and in-product privacy settings may also limit collection.
5. Advertising
Some Services may show optional rewarded advertising or limited in-app advertising; we may also advertise Big Monk Games products through third-party platforms. Advertising technologies may process device, interaction, approximate location, attribution, and consent information to deliver an ad, measure performance, limit frequency, and prevent fraud.
Big Monk Games does not sell personal information. We do not use private User Content to select ads. We do not knowingly share personal information for cross-context behavioral advertising. If a future advertising practice constitutes “sharing” or targeted advertising under applicable law, we will provide the required notice and opt-out control before using it in that manner. You may be able to limit ad personalization through device privacy settings or consent controls. Choosing not to receive personalized ads does not necessarily remove all ads.
6. Notifications and Communications
We may send transactional messages necessary to operate the Services, such as verification, authentication, security, purchase, account, export, deletion, support, and material policy notices. We may use Resend, SendGrid, platform notification services, or similar providers to deliver them.
Marketing email, waitlist updates, and push notifications are sent with the permissions required by law. You may unsubscribe from marketing email through the message link and control push notifications through device settings. You cannot opt out of essential account, security, transaction, or legal notices while maintaining the relevant account or transaction.
7. Authentication
Depending on the Service and platform, authentication may be provided by Replit Auth, Clerk, Google Sign-In, Sign in with Apple, email-based authentication, or another provider shown at login. We receive an account identifier and information you authorize the provider to share, such as an email address or name. Authentication providers may independently process device, login, fraud, and account information under their privacy policies.
If you use an email relay or hide-my-email feature, we use the relay address supplied. Disconnecting a social login at the provider does not automatically delete your Big Monk Games account; use the Service’s Delete Account control or contact us.
8. Payments
Payments may be processed by Apple through in-app purchase, Stripe for direct web purchases, or another platform identified at checkout. Payment providers collect and process payment credentials; Big Monk Games generally receives transaction identifiers, subscription or entitlement status, product, amount, currency, billing region, and limited fraud or tax information. We do not store full payment-card numbers.
Payment providers process information under their own terms and may act as independent controllers for payment, fraud, tax, and regulatory purposes. Purchase history may be retained as required for accounting, dispute resolution, refunds, platform reconciliation, and legal compliance even after account deletion.
9. Data Storage
Core application and account data may be stored in PostgreSQL databases, including Neon-backed PostgreSQL, and in infrastructure supplied by hosting, database, file-storage, content-delivery, logging, and backup providers. Data may be processed in the United States and other countries where our providers operate.
We separate systems and limit collection where practical, but no online service can promise absolute security or continuous availability. The Services are not intended to be the sole system of record. Use available exports and maintain independent backups of important content.
10. Sharing and Disclosure
We disclose personal information only as reasonably necessary for the purposes described in this Policy:
Service providers and processors. Authentication, AI, hosting, database, storage, analytics, communications, support, security, advertising, and payment providers process information to perform services for us.
At your direction. We share content when you use a public gallery, shared link, export, integration, or other feature that directs us to disclose it.
Legal and safety reasons. We may disclose information when we reasonably believe it is required by law, legal process, or government request, or necessary to protect rights, safety, security, and the integrity of the Services.
Business transition. If Big Monk Games or relevant assets are reorganized, financed, sold, or transferred, information may transfer subject to this Policy and appropriate confidentiality protections.
Aggregated or de-identified information. We may use or disclose information that does not reasonably identify an individual, and we will not attempt to re-identify it except to test de-identification safeguards.
We do not sell personal information. We do not disclose private User Content to data brokers or use it to train Big Monk Games AI models.
11. Security
We use administrative, technical, and organizational safeguards appropriate to the nature of the information and the size and operation of our business. These may include managed authentication, encryption in transit, access controls, least-privilege practices, provider security controls, logging, backups, dependency maintenance, and incident response procedures.
No method of transmission or storage is completely secure. You are responsible for using a strong authentication method, protecting your devices and credentials, and avoiding unnecessary sensitive information. If we discover a breach requiring notice, we will notify affected individuals and regulators as required by applicable law.
12. Data Retention
We retain personal information only as long as reasonably needed for the purpose collected, including to provide the Services, maintain your account and projects, process subscriptions, support exports, resolve disputes, enforce agreements, prevent fraud and abuse, meet accounting or legal obligations, and maintain security.
Typical retention approach
Account and active project data: while the account is active and until deletion is requested, subject to the exceptions below.
Private User Content: until you delete it, delete the account, or the applicable feature’s disclosed retention period ends.
Guest or temporary generation data: for the short period operationally needed to produce, deliver, secure, or troubleshoot the result.
Support and communications records: as reasonably needed to resolve the request, document the outcome, and protect against abuse.
Transaction, tax, consent, security, and legal records: for the period required or permitted by law and legitimate business needs.
Backups: deleted information may remain in rotating backups for a limited period and is not restored to active use except for disaster recovery, security, or legal necessity.
Retention periods vary by Service architecture and provider. We may retain de-identified or aggregated data that no longer reasonably identifies you.
13. Account Deletion and Exports
13.1 Account deletion
Services with accounts provide an in-product Delete Account control. You may also submit a request through https://www.bigmonkgames.com/contact. We may verify your identity before acting. Deletion removes or de-identifies account data from active systems, subject to limited retention for backups, security, fraud prevention, transactions, legal obligations, dispute resolution, and content you intentionally made public or shared with others.
Deleting an account does not automatically cancel a subscription billed by Apple, Google, Stripe, or another provider. Cancel recurring billing through the applicable platform. Deletion may be irreversible, so export important content first.
13.2 Data exports
Where supported, you can export categories of User Content such as images, cubemaps, sprite or scene assets, JSON anchor data, journal or reflection text, and structured records. Export formats vary by feature. If an in-product export does not include information you are legally entitled to receive, submit a privacy request through our contact page.
14. International and State Privacy Rights
14.1 Rights that may apply
Depending on where you live and subject to legal exceptions, you may have the right to request access to, correction of, deletion of, or a portable copy of personal information; object to or restrict certain processing; withdraw consent; opt out of sale, sharing, or targeted advertising; limit certain uses of sensitive personal information; and appeal a denied request. You may also have the right not to receive discriminatory treatment for exercising privacy rights.
14.2 How to exercise rights
Use available account controls or submit a request through https://www.bigmonkgames.com/contact. Identify the Service and the right you wish to exercise. We may ask for information reasonably necessary to verify your identity and authority. An authorized agent may submit a request where law permits, but we may require proof of authorization and direct verification with you. We will respond within the period required by applicable law.
14.3 European Economic Area, United Kingdom, and Switzerland
Individuals in these regions may have rights under the GDPR or comparable law, including access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and a complaint to a supervisory authority. Where we transfer personal information internationally, we rely on legally recognized safeguards where required, such as adequacy decisions, standard contractual clauses, or provider transfer mechanisms. Withdrawing consent does not affect prior lawful processing.
14.4 California and other U.S. states
Residents of California and certain other states may have rights to know or access categories and specific pieces of personal information, delete or correct information, obtain portability, opt out of sale or certain sharing or targeted advertising, limit certain sensitive-information uses, and appeal. Big Monk Games does not sell personal information. We do not knowingly share personal information for cross-context behavioral advertising. Because legal thresholds vary, a particular statutory right may not apply to Big Monk Games or to every request; we will nevertheless respond in good faith and honor rights where required.
14.5 Appeals and complaints
If we deny a request and your law provides an appeal right, reply through the contact channel and label the request “Privacy Appeal.” You may also contact your local data-protection or consumer-protection authority. We encourage you to contact us first so we can try to resolve the issue.
15. Children’s Privacy
The Services are not directed to children under 13, and we do not knowingly collect personal information from a child under 13 without legally valid parental consent. If we learn that we collected such information without required consent, we will delete it. A parent or guardian who believes a child provided personal information should contact us through https://www.bigmonkgames.com/contact.
Users between 13 and the age of legal majority may use the Services only with permission and supervision from a parent or guardian, and a particular Service may require a higher age. We do not knowingly sell or share the personal information of minors. We also do not use private content from minors to train Big Monk Games AI models.
16. App Feature Categories
The following categories explain how this Policy maps to present and future Services. A Service may include more than one category.
AI conversation and reflection
Processes prompts, conversation context, journals, dreams, reflections, selected concepts, and optional personal context to generate assistive responses. Content may be highly personal, but outputs are not professional advice.
Creative generation and editing
Processes prompts, source images, skyboxes, environment maps, sprite sheets, frames, scene assets, settings, and exports. Files are used to provide the requested generation, edit, storage, or export workflow.
Journaling, practice, and wellbeing
Stores entries, completion status, preferences, streaks, exercises, optional mood or context, and related progress. These features support reflection and education and are not clinical services.
Cognition and memory activities
Stores session results, response timing, difficulty, streaks, words or matching activity, and optional sleep, stress, or fatigue context to show personal trends. Results are not medical assessments.
Prediction and analytical tools
Processes schedules, odds, historical inputs, model results, entitlement status, and user interactions. Predictions are uncertain and are not betting, financial, or professional advice.
Accounts, subscriptions, and support
Processes authentication, entitlements, transactions, communications, waitlists, deletion requests, and security records across the portfolio.
Public and sharing features
Displays the content and profile information you intentionally publish or share. Public content can be copied by others; remove sensitive information before publishing.
17. Changes and Contact
17.1 Changes
We may update this Policy to reflect new features, providers, legal requirements, or practices. We will post the revised Policy with a new effective date and provide additional notice for material changes when required. We will not retroactively apply a materially less protective use to previously collected private User Content without an appropriate legal basis and notice or consent where required.
17.2 Contact
Big Monk Games is operated by Michael Cozzolino, a New York sole proprietor doing business as Big Monk Games. For privacy questions, requests, appeals, account deletion, or security concerns, contact:
https://www.bigmonkgames.com/contact
Please identify the relevant Service and account email, if applicable. Do not send passwords, full payment-card numbers, or unnecessary sensitive information.
BIG MONK GAMES / LEGAL
Publication Notes
Effective date: July 13, 2026
Document owner: Big Monk Games
Publication scope: Big Monk Games websites, web applications, mobile applications, software tools, APIs, and related services.
