Privacy Policy
Last updated: September 24, 2026
We know privacy policies are usually awful to read. We've tried to write this one like a normal human being would.
This policy describes the kinds of information we handle and why, rather than listing every field in every screen. MasquePlay is changing quickly, and describing categories lets us improve the app without rewriting this page for every small change. The commitments that matter most — we don't sell your data, we don't use it for advertising, and you can delete it — don't change with the features.
1. Who We Are
MasquePlay is operated by MasquePlay. When this policy says "we," "us," or "our," it means MasquePlay. We are based in Vancouver, British Columbia, Canada.
For privacy questions or requests, email support@MasquePlay.com.
2. What We Collect
Information you give us
- Account information — such as your email address, display name, password (stored only as a secure hash — we can't see it), and date of birth to confirm you are 18 or older.
- Partner and pairing information — such as invite codes, and any optional details you choose to enter when inviting your partner.
- Private beta applications — your email address and your answers when applying to test MasquePlay, such as eligibility, whether your partner is on board, and what devices you use. We don't ask for your partner's name, email, or date of birth when you apply.
- Content you create — such as your chat messages, persona choices, swipes, and anything you write or send while using features.
- Messages to us — reports, feedback, and support requests.
Information created as you use MasquePlay
- Activity and preferences — such as the personas and scenes you choose, matches, settings, and notification preferences.
- Feature use — such as when you use AI features, what they produced, and related usage limits.
- Subscription status — such as whether you are on a free, trial, or paid plan. Payment card details are handled by the payment provider, not us.
Information collected automatically
- Technical and device information — such as browser, operating system, device type, app version, timezone, and IP address.
- Approximate location — the country, region, and city associated with your network connection, derived from your connection by our infrastructure provider. We don't collect precise GPS location, and we don't track your location as you move.
- Usage, reliability, and diagnostic information — limited information about how the app and website are used and how they perform, such as which features are used, which links bring people to our website, errors, and delivery outcomes.
- Referral information — such as the link or source that brought you to our website or beta application.
Mobile apps
If you use MasquePlay on iOS or Android, Apple, Google, and our service providers may provide information needed to run the app, such as device and app information, notification tokens, crash and performance diagnostics, and purchase or subscription status. We do not use advertising identifiers.
What we don't collect
- Precise GPS location
- Your phone contacts, photos, microphone, or camera
- Payment card details
3. Sensitive Information
MasquePlay is a private roleplay app for couples, so your chats are likely to include intimate or sexual content, and may include other sensitive information such as details about your health, beliefs, or relationship. We don't require you to share any of it. We process what you share only to provide and improve the service as described in this policy — for example, to store your conversation history and, when you or your partner use AI features, to generate a response. By using MasquePlay's chat features, you consent to that processing.
4. How We Use Information
We use information to:
- Provide the service — run your account, pair you with your partner, personalise your personas and scenes, deliver chats and notifications, and power the features you use.
- Keep it safe and working — prevent fraud and abuse, secure accounts, fix bugs, measure reliability and performance, and manage costs.
- Improve MasquePlay — understand how features are used and make them better. When we use content or activity to improve the app, we use it in de-identified form (see below).
- Run the private beta — review applications, organize testing groups, and contact applicants.
- Communicate with you — send account, service, and support messages, and messages about testing you've asked to join.
- Meet legal obligations — respond to lawful requests, enforce our terms, and keep records the law requires.
De-identified data. We may use de-identified data — including de-identified conversation content and usage data — to test, evaluate, and improve MasquePlay's features. De-identified means we remove your name, email address, account identifiers, and other details that directly identify you or your partner, and we don't attempt to re-identify it. We do not use your conversations to train MasquePlay's own AI models.
We do not use your data for advertising, and we do not sell your data to anyone.
Legal basis
Where the law requires a legal basis for processing (for example in the EU, UK, or Switzerland), we rely on: what's needed to provide the service you signed up for; your consent, where consent is required — including for sensitive information you share in chats; our legitimate interests in operating, securing, and improving MasquePlay, where those interests aren't outweighed by your rights; and legal obligations.
5. Who We Share Information With
We share information with no one for marketing or advertising.
We use service providers to run MasquePlay. They process information on our behalf, only for the services they provide to us. Today these include providers for:
- Hosting, databases, and networking — currently primarily Cloudflare
- Abuse and bot prevention
- AI features — see the AI Disclosure
- Email delivery
- Push notification delivery — such as Apple, Google, and browser notification services
- App distribution, diagnostics, and payments — such as app stores and payment processors, when used
We may replace or add service providers that perform these same functions. We'll update this policy before we start sharing information with a new type of provider.
Authorized MasquePlay staff may access account or content data only when reasonably needed to operate or debug the app, respond to support requests, investigate reports or abuse, protect security, enforce our terms, or comply with the law.
We may also disclose information when required by law, or when reasonably necessary to protect someone's safety, rights, or property.
Business transfers. If MasquePlay is acquired, merged, reorganized, or sells substantially all of its assets, your information may transfer as part of that transaction. Whoever receives it must honour this policy for information collected under it, or we will notify you first and give you the chance to delete your account.
6. Where Your Information Is Processed
MasquePlay currently relies primarily on Cloudflare's global infrastructure, alongside the service providers described above. Your information may be processed in countries other than your own, wherever we or our providers operate, subject to appropriate safeguards. Information held in another country may be accessible to the courts, law enforcement, and national security authorities of that country.
7. How We Protect Your Information
We use encryption in transit, hashed passwords, access controls, and our providers' security features to protect personal information. Access to admin tools is restricted. No online service can promise perfect security, but we design MasquePlay to avoid collecting more than we need.
8. Notifications
If you enable notifications, we store a device or browser token to deliver them. You can turn them off at any time in the app or in your device settings. Notifications are meant to be vague — we try not to include roleplay details in notification text.
9. Cookies and Similar Technologies
We use essential cookies and browser storage to keep you signed in, keep the app and website working, and count visits without identifying you. We don't use advertising or cross-site tracking cookies.
10. How Long We Keep Information
We keep information only as long as we need it for the purposes in this policy:
| Information | How long |
|---|---|
| Account information, content, and activity | For the life of your account |
| Beta applications | While needed for the relevant testing round and reasonable follow-up. Incomplete applications are deleted after a period of inactivity, and an application showing either participant is under 18 is deleted immediately |
| Partner invite details | Until the invite is used, changed, or deleted, or your account is deleted |
| Reports, support requests, and security records | As long as needed to respond, protect safety and security, enforce our terms, or meet legal obligations |
| De-identified and aggregate data | As long as it's useful, because it no longer identifies you |
What happens when you delete your account
- Deleted. Your account, authentication, and notification records, your content, and other personal information attributable to you are removed from our active systems. Because MasquePlay is shared, this may also remove or affect roleplay history you share with your partner.
- De-identified and kept. Some usage and analytics records may remain, with information that identifies you removed, for aggregate analysis, improving the service, and security.
- Kept temporarily. Deleted information may remain for a limited period in backups, logs, and disaster-recovery systems (ours and our providers') until those systems cycle out under their normal schedules. Providers, including AI providers, may also keep data they received for a limited time for abuse monitoring, security, or legal reasons.
- Kept where required. We may keep limited records where needed to meet legal obligations, resolve disputes, prevent abuse, or enforce our terms.
11. Your Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you, and get a copy of it
- Correct it
- Delete it
- Object to or restrict certain processing
- Withdraw consent where we rely on it — this doesn't affect processing that already happened
- Complain to a privacy regulator where you live, or in Canada
You can export your data and delete your account from inside the app. Exports include your data without exposing your partner's private information or security credentials. You can also email support@MasquePlay.com and we'll respond within 30 days.
Your partner's own account data remains theirs.
If you applied to the beta but don't have an account, email us from the address you applied with to make a request.
12. Children's Privacy
MasquePlay is strictly for users aged 18 and over. We do not knowingly collect data from anyone under 18. If we discover we have done so, we will delete it immediately.
13. Changes to This Policy
As MasquePlay evolves — including our move from beta to the iOS and Android apps — the information we collect and the providers we use may change. When we make a material change, such as collecting a new kind of information or using it for a new purpose, we'll update this policy and its "Last updated" date before relying on the change, and give any notice required by law. Where a change requires your consent, we'll ask for it first.
14. Contact
MasquePlay — Vancouver, BC, Canada Email: support@MasquePlay.com