Privacy Policy

Last Updated: July 8, 2026

This Privacy Policy describes how Runebook Labs LLC (“Runebook,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you use Runebook websites, mobile applications, games, features, and related services (collectively, the “Services”).

Runebook is an AI story game. To operate the Services, we process account information, gameplay content, generated story content, purchase and entitlement information, device and app integrity signals, and limited diagnostics.

If you do not agree with this Privacy Policy, do not use the Services.

1. Information We Collect

Account Information. We may collect information associated with your Runebook account, including your email address, display name, sign-in provider, Apple or Google account identifiers, Firebase authentication identifiers, subscription or entitlement state, and account settings.

Gameplay and Story Content. When you play Runebook, we collect and store information needed to operate your stories, including your typed or spoken moves, generated Storyteller responses, characters, story history, game state, world state, journal entries, clues, relationships, locations, inventory, generated media references, and related gameplay metadata.

Microphone and Speech-to-Text. If you choose to use speech-to-text, the app will request microphone permission. Microphone access is used only when you activate dictation or speech-to-text. We use your spoken input to create text for your game move. Speech-to-text audio may be transmitted to our service providers for transcription. Runebook does not retain speech-to-text audio after the transcript is generated.

Generated Audio, Images, and Alignment. Runebook may generate narration, voiceover audio, timestamp alignment, highlighted text, and images for story presentation. We may store generated media and related metadata so your game can play back and resume correctly.

Purchases and Entitlements. If you purchase a subscription, Adventure Credits, or other digital access, we process purchase and entitlement information. Web purchases may be processed by Stripe. Mobile purchases may be processed by Apple App Store or Google Play. We may store purchase identifiers, entitlement state, refund or revocation events, and credit balances, but we do not store full payment card numbers.

Device, App Integrity, and Security Signals. To protect Runebook from fraud, bots, abuse, and unauthorized trial use, we may process security and integrity signals such as App Attest, DeviceCheck, Google Play Integrity, app package or bundle metadata, installation channel, device or app proof results, IP address, session metadata, and abuse-prevention logs.

Usage, Diagnostics, and Log Data. We may collect information about how the Services are used, including pages or screens viewed, features used, device type, operating system, browser or app version, timestamps, server logs, crash or error information, and performance diagnostics. We may use analytics tools such as Google Analytics on the website.

Cookies and Similar Technologies. On the website, we may use cookies and similar technologies to keep you signed in, operate the Services, remember settings, measure usage, and improve security.

2. How We Use Information

We use information to:

Create and manage accounts.
Authenticate users and maintain sessions.
Operate AI story gameplay.
Generate, store, and resume story content.
Provide narration, images, alignment, speech-to-text, and related features.
Process subscriptions, Adventure Credits, entitlements, refunds, and revocations.
Prevent fraud, bot abuse, unauthorized trial use, and security incidents.
Provide customer support, bug review, and content or problem reporting.
Improve reliability, performance, and product quality.
Enforce our Terms of Service and safety policies.
Comply with legal obligations.

3. AI Processing and Service Providers

Runebook uses service providers to operate the Services. These providers may process information on our behalf for hosting, authentication, payments, analytics, AI text generation, image generation, text-to-speech, speech-to-text, alignment, diagnostics, security, and customer support.

Gameplay content may be sent to AI service providers so the Storyteller can respond, remember context, generate media, produce narration, and continue the story. AI service providers may include xAI, mor.org, and DeepInfra. We do not sell your personal information.

This AI processing may include the text you enter, relevant story context, character and game state, prompts needed to generate images or narration, and speech-to-text audio when you choose to use dictation. Speech-to-text audio is transmitted only to create text and is not retained by Runebook after the transcript is generated.

4. How We Share Information

We may share information:

With service providers that help us operate the Services.
With Apple, Google, Stripe, Firebase, or related providers when needed for authentication, purchases, refunds, entitlement validation, app integrity, or account management.
When required by law, legal process, or governmental request.
To enforce our Terms of Service or protect Runebook, users, or others.
In connection with a merger, acquisition, financing, reorganization, or sale of assets.

We do not sell personal information.

5. Data Retention

We retain information for as long as needed to provide the Services, maintain game continuity, support account and billing records, prevent abuse, comply with legal obligations, resolve disputes, and enforce agreements.

Story and gameplay data may be retained so your games, characters, relationships, clues, and history can persist across sessions. Security, billing, and diagnostic records may be retained as needed for fraud prevention, accounting, audit, and legal compliance.

6. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, or receive a copy of certain personal information. You may also be able to object to or limit certain processing.

To make a privacy request, contact us at support@runebook.gg. We may need to verify your identity before processing the request.

You can manage mobile app permissions, including microphone access, through your device settings.

You can cancel subscriptions through the platform where you purchased them, including Stripe, Apple App Store, or Google Play.

7. Account Deletion

If you want to delete your Runebook account, contact us at support@runebook.gg. Deleting an account may permanently remove access to saved games, characters, credits, subscription-linked features, and story history, subject to records we must retain for legal, security, billing, fraud-prevention, or dispute-resolution purposes.

8. Children and Age

Runebook is not directed to children. The mobile app is intended for users aged 17 and older. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete it.

9. Security

We use reasonable technical and organizational measures to protect information. No online service is completely secure, and we cannot guarantee absolute security.

10. International Users

Runebook Labs LLC is based in the United States. If you use the Services from outside the United States, your information may be transferred to, stored in, or processed in the United States and other countries where we or our service providers operate.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version and update the “Last Updated” date. Your continued use of the Services after the updated policy becomes effective means you accept the updated policy.