Privacy Policy

Chapter is operated by Chapter Technologies Limited (Companies House No. 14743161), registered at 2 Marston Brook, Hilton, Derbyshire DE65 5HS, United Kingdom. We act as the data controller for personal data processed via the Chapter app.

Privacy contact: privacy@chapterapp.co.uk.

1. 2.1 Minimum Age. The Service is intended for individuals 16 years and older. We do not knowingly collect personal data from children under 16.
2. 2.2 Misrepresentation. If we become aware that an under-16 has provided personal data, we will delete it promptly.

1. 3.1 Account Data: name, email, hashed password, date of birth for age verification, settings.
2. 3.2 University Journey Data: course interests and selections, accommodation preferences, societies, events followed, onboarding responses you provide.
3. 3.3 User-Generated Content (UGC): messages, posts, chats, photos, comments, ratings, polls, uploads.
4. 3.4 Chapter World Game Data: avatar configuration (face, hair, clothing, accessories, pets), dorm customisation (pinboards, décor, trophies), XP, levels, skills progression, quest completions, coin balance, shop purchases, unlocked items, career pathways, skills verification status, and zone/building interaction history.
5. 3.5 NPC Chat Data: messages you exchange with AI NPCs (e.g., Chappy, career and skills guides), chat session history, and attachments you upload to NPCs (including CVs, personal statements, images, and PDFs, plus text extracted from those files for processing).
6. 3.6 Device & Usage Data: device model, OS, app version, crash logs, diagnostics, usage analytics (Mixpanel).
7. 3.7 Location (optional): approximate or precise location when permitted for maps and nearby features.
8. 3.8 Notifications (optional): device tokens via Firebase/APNs to deliver push notifications.
9. 3.9 Support Data: information you provide when contacting support.
10. 3.10 Special Category Data: not intentionally collected. If users choose to post or share sensitive data (e.g., wellbeing, health details in NPC chats or UGC), we process it only to operate and secure the Service and discourage public disclosure.

1. 4.1 Directly from You: account creation, onboarding, UGC, support requests.
2. 4.2 Automatically: device/usage data, analytics, diagnostics.
3. 4.3 Consent-based: location and notifications via system permissions you can change at any time.

1. 5.1 Contract/Legitimate Interests: operate the Service; authenticate users; enable features (course matching, accommodation search, societies/events, chats and forums); moderation and safety; debugging and improvement.
2. 5.2 Consent: location services, push notifications, and other optional features where required by law; you may withdraw consent at any time.
3. 5.3 Legal Obligation: compliance with laws, regulations, and lawful requests.

1. 6.1 Provide/Personalise: courses, accommodation, societies/events, maps.
2. 6.2 Chapter World: operate the game (render avatars, save progression, deliver quests, award XP/coins, persist dorm and customisation state, enable multiplayer presence).
3. 6.3 AI NPC Responses: forward your messages and uploaded attachments to our AI provider (Anthropic) to generate NPC replies and feature outputs (e.g., CV feedback, personal-statement review, career guidance). See Section 13.
4. 6.4 Communication: group chats, forums, notifications (when enabled).
5. 6.5 Safety: moderation, fraud and abuse prevention, anti-cheat.
6. 6.6 Sponsored Placements & Marketplace: clearly labelled listings and in-game branded shops from universities, accommodation providers, or student businesses, including tracking first-visit XP rewards and affiliate links.No personalised ads at this time.
7. 6.7 Analytics & Improvement: Mixpanel and diagnostics for quality and performance.
8. 6.8 Compliance: legal obligations and rights enforcement.

We may share personal data with:

1. 7.1 Processors: Supabase (hosting/auth/DB/ storage), Cloudflare (CDN/images/DNS/security), AWS S3 / R2 (asset and attachment storage), Firebase/APNs (notifications), Mapbox (maps/geolocation), Mixpanel (analytics); each bound by contract to process only per our instructions.
2. 7.2 AI Provider: Anthropic (Claude models) - we send NPC messages and uploaded attachments to Anthropic to generate responses and feature outputs. Anthropic acts as our processor under its Commercial Terms and does not train its models on your inputs or outputs. See Section 13.
3. 7.3 Ambassador & Partners API: when you chat with a university ambassador or partner-powered feature, relevant messages are routed via our Partners integration to the partner handling your request.
4. 7.4 Sponsorship Partners: universities, accommodation providers, student-focused companies for clearly labelled sponsored placements and in-game branded shops; not for personalised ads. Affiliate/visit metadata may be shared to attribute rewards.
5. 7.5 Legal/Protection: where required by law, to protect rights, users, or the Service.

7.6 No Sale: we do not sell personal data.

Where personal data is processed outside the UK/EEA, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, or adequacy decisions, as applicable.

1. 9.1 Principle: retain only as long as necessary for the purposes described or as required by law.
2. 9.2 NPC Chats & Attachments: stored in your account so you can return to previous conversations. You can delete individual sessions or attachments in-app, or request full erasure. After deletion, residual copies held transiently by our AI provider follow their retention policy (typically ≤30 days).
3. 9.3 Game State: avatar, dorm, progression, coins, and purchases are retained while your account is active, and deleted or anonymised on account deletion.
4. 9.4 Account Deletion: we delete or anonymise personal data upon account deletion, subject to legal, security, and anti-fraud obligations.
5. 9.5 Illustrative Examples: basic account and log data may be retained for a limited period for security, auditing, and legal compliance.

1. 10.1 Measures: appropriate technical and organisational measures proportional to risk, including encryption in transit, access controls, and secure hosting.
2. 10.2 No Absolute Guarantee: no system is 100% secure; we continuously improve safeguards.

1. 11.1 Sponsored/Featured: clearly labelled placements from universities, accommodation providers, or student businesses.
2. 11.2 No Personalised Ads: if introduced in future, we will provide notice and obtain consents where required.

1. 12.1 Analytics: Mixpanel and diagnostic SDKs measure usage and performance, including in-game events (zones visited, quests completed, features used).
2. 12.2 Game Engines & Rendering: PixiJS, Three.js, and related libraries render Chapter World locally on your device; Mapbox / Leaflet may be used for certain map interactions.
3. 12.3 Controls: you can adjust device or in-app settings to limit analytics, notifications, or location (where available).

1. 13.1 Game Progression. We store avatar configuration, dorm customisation, XP, levels, skills, quests, career pathways, coin balance, shop purchases, and unlocked items so your progress persists across devices.
2. 13.2 AI NPC Processing. When you message an AI NPC (e.g., Chappy, career and skills guides), your messages and any attached files (CVs, personal statements, images, PDFs) are sent to Anthropic for processing and a response is returned to you. We may also send minimal context about your profile or session to personalise the response (e.g., course interest).
3. 13.3 AI Provider & Training. Anthropic acts as our processor. Under its Commercial Terms, Anthropic does not use Chapter's inputs or outputs to train its foundation models. Transient operational copies may be held by Anthropic for safety, abuse detection, and reliability.
4. 13.4 Chat Storage & Deletion. NPC chat sessions and attachments are stored in your account so you can return to previous conversations. You can delete sessions in-app or request full erasure - see Section 14.
5. 13.5 Multiplayer & Presence. Your avatar, display name, and approximate in-world location may be visible to other players sharing the same zone or dorm.
6. 13.6 Safety. We may review in-game chats, NPC inputs, and UGC for moderation, fraud, and anti-cheat.
7. 13.7 Sensitive Content. Please avoid sharing unnecessary sensitive information with NPCs or in dorm/avatar content. Do not upload documents containing other people's personal data without their consent.

1. 14.1 UK/EU GDPR: rights to access, rectification, erasure, restriction, objection (including to profiling), portability, and to withdraw consent at any time. These rights extend to game state, NPC chat history, and uploaded attachments.
2. 14.2 Global Users: we consider comparable rights under applicable local laws where you reside.
3. 14.3 Exercising Rights: contact our account deletion page or email privacy@chapterapp.co.uk. We will respond within statutory timeframes.
4. 14.4 Complaints: UK residents may contact the Information Commissioner’s Office (ICO).

Although the Service is 16+, we align with the UK Age Appropriate Design Code principles: high privacy by default, data minimisation, and avoiding nudges to overshare.

The Service may link to or integrate third-party platforms (e.g. ticketing or accommodation providers). Their privacy practices apply; review their notices before sharing data.

1. 17.1 Territorial Scope: the Service is focused on UK universities; students globally may use it.
2. 17.2 Applicable Law: we primarily apply UK GDPR and, where relevant, EU GDPR; other local laws may also apply depending on your residence.

We may update this Privacy Policy from time to time. Material changes will be notified in-app or via email. Continued use after the effective date constitutes acceptance.