NUNU COMPANY - CURSOS PROFISSIONAIS LTDA. Contact: swithfriends@outlook.com.
Mission data is invented. Information you provide and any payments are real and deserve care.
1. About this policy
This policy describes data processing on the institutional website and in the version of Scam With Your Friends reviewed on October 14, 2026, including its iPhone app. Mission data is fictional; the voice recordings, text, and usage data you provide may be real personal data.
Service operator and data controller: NUNU COMPANY - CURSOS PROFISSIONAIS LTDA. Contact: swithfriends@outlook.com.
2. Data used by the service
- Profile and preferences: your chosen name or nickname, avatar, language, and game preferences.
- Gameplay: messages, transcripts, conversation state, scores, fictional coins, XP, and completed characters.
- Voice: clips captured when you activate recording, sent to the server and transcription service to enable the conversation.
- Technical data: connection and device information, error logs, and operational metrics such as duration, service usage, and session identifiers.
- iPhone purchases: subscription service user identifiers, products, transactions, and access status. Apple processes payments; the game does not request your full bank card details.
This institutional website has no registration form, audio recording feature, or advertising tool. Fonts and images are served locally. Vercel hosts this website and may process technical data needed to deliver and secure the pages. Your language choice is reflected in the page URL; this website does not store a language preference in cookies or local storage.
3. Why data is used
Data enables gameplay, responses to your speech, synthesized character voices, saved preferences and progress, subscription verification, purchase restoration, troubleshooting, and service security.
Depending on the purpose, processing may rely on performance of the service you request, compliance with legal obligations, legitimate interests in security and operation while respecting your rights, or consent where required. The operating system’s microphone permission controls device access; it does not replace information about data processing.
4. Microphone and artificial intelligence
Recording starts when you activate the voice feature and authorize microphone access. Clips are sent to OpenAI for transcription. OpenAI processes conversation text to generate and evaluate responses; character response text is sent to Cartesia for voice synthesis.
The game implementation does not maintain its own permanent audio recording archive. This does not mean providers do not process or retain data. Each service’s retention and use conditions depend on its contracts, settings, and policies.
You can revoke microphone permission in your device settings. Doing so limits the voice feature. Do not speak or type banking information, identity documents, passwords, sensitive information, or other people’s data.
5. Services involved in operation
| Service | Purpose and data involved |
|---|---|
| OpenAI | Audio transcription and processing of AI conversation text. |
| Cartesia | Voice synthesis from character response text. |
| Vercel | Hosting of the game and this website, network requests, and operational logs. |
| Apple / App Store | Payments, transactions, subscription renewal, and purchase restoration. |
| Superwall | Paywalls, subscription status, user and device identifiers, interaction metrics and approximate location derived from IP addresses. |
| RevenueCat | Management and restoration of App Store purchases, subscription access and purchase analytics linked to a service-generated identifier. |
Information may also be provided when necessary to comply with a legal obligation or a valid order from a competent authority.
These services may process data outside Brazil. International transfers must comply with the grounds and safeguards provided by Brazil’s General Data Protection Law (LGPD). Do not assume that data sent to external services remains exclusively on your device.
6. Storage, cookies, and retention
The game uses local storage for your profile, language, tutorial, and progress. Call data and drafts may remain in the tab’s session storage. A call token is valid for approximately one hour. Verified character progress uses a signed, HttpOnly, SameSite cookie valid for up to one year, renewable during use.
Clearing browser or WebView data may erase your profile and progress. It does not automatically delete provider records or cancel an Apple subscription. Local storage is not an account with cross-device synchronization.
Technical and purchase data may be retained for as long as needed for their respective purposes, security, compliance with legal obligations, and the exercise of legal rights. Provider retention varies by service, data type, contractual requirements and settings. Contact us for information about your data or to request deletion, subject to lawful retention requirements.
7. Your rights and choices
Under the LGPD, where applicable, you may request confirmation of processing and access to your data, correction, information about sharing, portability subject to regulation, anonymization, blocking or deletion of unnecessary or unlawfully processed data, withdrawal of consent, and deletion of data processed on that basis, subject to lawful retention exceptions.
Send privacy requests to swithfriends@outlook.com. Proportionate identity verification may be necessary to prevent disclosure to others. You may also submit a petition or complaint to Brazil’s data protection authority, ANPD, where applicable.
See ANPD’s guidance on data subject rights and the LGPD (in Portuguese).
8. Security and use by minors
The implementation uses HTTPS, server-side handling of service keys, and cryptographic protection for call state. These measures reduce risks, but no system guarantees absolute security.
Follow the age rating applicable to the store or distribution channel. Minors should have guidance and, when required, authorization from a parent or guardian. The game must not be used to collect children’s data or other people’s information. Any processing of children’s and teenagers’ data must respect their best interests and applicable legal requirements.
9. Contact and updates
Privacy contact: swithfriends@outlook.com.
Service operator and data controller: NUNU COMPANY - CURSOS PROFISSIONAIS LTDA. Contact: swithfriends@outlook.com.
This policy may be updated to reflect changes to the service or applicable obligations. Material changes should be communicated appropriately. The version date appears at the top of this page.