Privacy Policy

1. Operator and website

Artur Tuzbekov, Spain, is the controller of the personal data described here. You do not need to give your name or email to play.

This website has no visitor accounts, contact forms or advertising integrations. We have not added website analytics or non-essential cookies. OpenAI Sites hosts the website and may process technical access and security information needed to deliver it under its applicable terms.

2. Information on your device

The app stores your language, favorites, recent cases, round statistics, cached previews, purchase-access information, dialogue, unsent drafts and AI data permission on your device. These records can remain until you clear them or delete the app, subject to device backups. Server retention does not automatically clear your device.

3. Guest accounts and activity

The app uses an anonymous Supabase authentication account for online play and purchase access. Its random user identifier is also used as your RevenueCat customer identifier. “Anonymous” means no name or email is required; it does not mean the records are impossible to link.

A separate random installation identifier is sent with language, platform, first and last activity, case and archive identifiers, and events such as a played round, outcome or favorite. These records measure installations and activity, not unique people or who is online. Reinstalls and testing can affect the counts.

4. AI conversations and editorial review

After you allow the named AI processors, ordinary yes/no questions pass through our server to Typesafe. Preparing case facts and checking proposed solutions use the OpenAI API, with the relevant dialogue and case material. Anthropic is a backup if OpenAI is unavailable; existing games may continue using Anthropic. A game keeps the processor permissions saved when it started, and adding OpenAI requires the updated permission. The integration does not deliberately add your name, contact details, installation identifier or account identifier to model prompts. Anything you type can still identify you: avoid personal, sensitive or confidential information.

We save questions, explanations, replies, case and language, results, optional ratings or comments, and technical call records such as model, timing, token usage and error status. Editors can inspect dialogue and feedback, select examples of mistakes, and replay those examples through Typesafe, the OpenAI API or Anthropic to evaluate game behavior. Replays use only processors covered by the permission saved with the original game. Editorial review is different from training a provider’s model; it is not public posting.

5. Optional iPhone dictation

If you choose the microphone, the app asks for microphone and speech-recognition access and uses Apple Speech to turn your voice into text. Apple may process the audio on its servers. This can happen during dictation, before you send a message to the game; on-device-only processing is not guaranteed.

Bureau does not upload or save an audio recording. Recognized words are placed in your editable draft on the device. Only when you choose Send or Check solution does the text enter the game’s server processing, where Typesafe, the OpenAI API or Anthropic may process it under the saved permission and it may be saved and reviewed like a typed message.

You can stop dictation or continue by typing. Microphone and Speech Recognition permissions can be changed in iPhone Settings under Privacy & Security. Apple’s processing and device choices follow its own privacy information; Bureau’s 90/365-day retention and account deletion do not erase records held independently by Apple.

6. Purchases

Apple handles payment credentials and billing. RevenueCat checks purchases and entitlements using your Bureau user identifier, product and transaction information, receipts and basic technical context. The Bureau receives purchase and access status, not your full payment-card details.

Deleting your Bureau account does not cancel an Apple purchase or erase Apple’s transaction records. With a new Bureau account, Restore Purchases can recover eligible access through the same Apple Account, subject to Apple and RevenueCat rules.

7. Optional material and support

If you send a story or an alternative explanation, we receive its text, language and any author name or contact detail you choose to include. Submissions are private by default and reviewed before publication. Do not send another person’s personal data or material you have no right to share.

Email support receives the address and information in your message. Your email service and the support mailbox provider also handle that correspondence. TestFlight separately shares beta usage, crashes and feedback with Apple and the developer under Apple’s TestFlight privacy notice; public-link testers’ names and email addresses are not normally shown to the developer.

8. Purposes and legal bases

We process the account, gameplay and purchase data needed to provide the service you request and administer our agreement with you. Where consent is required, including the AI data choice, you can withdraw it without affecting processing that was lawful beforehand.

We use limited activity, reliability records, dialogue review and selected examples for our legitimate interests in running a secure service, finding AI errors and improving the game. You can object to this use. We also process information where necessary to meet legal obligations or handle rights requests. We do not use advertising, sell personal data or combine it with other apps’ data for advertising tracking.

9. Providers and model training

Supabase provides authentication, database storage and server functions; RevenueCat manages purchase access; Apple provides TestFlight and purchases; OpenAI Sites hosts this website and the private editorial interface. Records an editor opens can pass through that interface’s server. The OpenAI API separately prepares game facts and checks solutions; Typesafe handles ordinary questions, and Anthropic provides backup or serves existing games. These AI processors also handle permitted editorial replays under the original game’s saved processor permissions. Their infrastructure and approved subprocessors can also process information needed to provide those services.

Typesafe states that customer requests and responses are not used to train its model; retention depends on the applicable agreement, data and law. The commercial APIs of OpenAI and Anthropic do not use inputs and outputs for training by default; explicit data-sharing opt-ins can change that. These are provider terms, not a promise of zero storage. We have not verified a special zero-data-retention agreement for these providers.

Anthropic’s standard API policy deletes inputs and outputs within 30 days, with exceptions for agreed services, safety enforcement or law. Provider feedback or an explicit data-sharing opt-in can have different rules. A rating inside Bureau goes to Bureau; it is not Anthropic’s own feedback button.

OpenAI API abuse-monitoring logs may include prompts and replies for up to 30 days, with legal and safety exceptions. Encrypted prompt-cache data may remain for up to 24 hours. Disabling response storage is not zero data retention.

Apple also provides optional speech recognition. Audio may be sent to Apple for transcription; it is not sent to Typesafe, the OpenAI API or Anthropic as audio.

Expo delivers compatible app updates through EAS Update. Update checks send a random persistent installation token (EAS Client ID), operating system, app project, runtime, update and channel information to Expo. Recovery from a failed update can also send a technical error description. This integration does not add your Bureau account identifier, dialogue, drafts or audio to update requests. The installation token is separate from your Bureau account and is not erased by deleting that account. Expo handles update delivery and technical service records under its own privacy policy.

10. How long records are kept

Ordinary server gameplay records become due for scheduled deletion 90 days after the last successfully saved turn, or 90 days after creation if there was no turn. Reading a session, a failed request or an editor review does not restart that clock. This includes the dialogue and its linked feedback and technical request records.

Editors may retain selected error examples for up to 365 days from when the example was first saved. Selecting or reviewing it again does not renew that period. When the ordinary session expires, only the selected turn and bounded context needed to evaluate it are retained with the example. Confirmed account deletion removes linked examples sooner.

These periods apply to our active gameplay database, not every copy held by a provider or on your device. Scheduled cleanup may run after the expiry time. Provider backups, security logs and legally required records follow their applicable arrangements; we cannot promise immediate erasure of every backup or a universal provider-log period.

• After completion, a minimal deletion-status receipt becomes due for scheduled removal after 30 days. A pending request keeps the minimal information needed to finish deletion. Neither record contains dialogue; a completed receipt has no account link.
• Aggregate operating-cost records can remain without dialogue or an account identifier; deleting a session does not reset the service’s spending controls.
• Older installation analytics and submissions without a verified account link are not covered by the account-deletion action or the gameplay clock. No fixed automatic deletion period has been configured for those legacy records.
• Support correspondence and purchase-related records are kept according to the need to resolve the request, administer access or meet legal requirements; provider retention may differ. Contact support about a particular record.

11. Delete your account and data

In the current app, open Profile and choose Delete account and data. Confirming removes your anonymous Bureau account, its linked server gameplay, feedback and selected editorial examples, and local dialogue, drafts, history, statistics, access cache and AI data permission on this device. Your language preference is kept. Deletion cannot be undone.

The process requests deletion of the linked RevenueCat customer. RevenueCat queues deletion asynchronously; our confirmation is not proof that every vendor backup has already been erased. Apple’s billing records and eligible purchases remain subject to Apple’s rules.

If the app says deletion is pending or local cleanup is incomplete, use its retry control. A message that only local data was removed does not confirm server deletion. Uninstalling the app or withdrawing AI permission also does not delete the server account.

Older installation analytics, unlinked submissions and separate support correspondence cannot safely be removed merely from an account identifier. Email support@bureauofoddcases.com for help locating them. We will explain any records we cannot locate or must retain, rather than deleting another person’s data.

12. Processing locations and security

Processing can take place outside your country, including the United States. Typesafe documents US hosting. Anthropic stores data in the US and may route processing across the US, Europe, Asia and Australia. Supabase’s core region is project-specific; support and service metadata can be processed elsewhere. This policy does not promise EU-only hosting.

Providers publish data-processing terms and transfer safeguards, including standard contractual clauses where applicable. Account-specific agreements, backup periods and the existing website’s hosting region have not all been independently verified. Contact us for the applicable information or a copy of available safeguards.

We use protected server access and separate private game content from the public catalog. No internet service or device storage is completely secure. Do not send passwords, full receipts, payment-card details or sensitive identity documents in chat or support reports.

13. Your choices, rights and contact

You can withdraw AI data permission in Profile. That stops new AI requests from this device; a request already in progress may finish. It does not remove saved history or prevent a separate rights request. Without permission, online AI play is unavailable.

Depending on applicable law, you can request access, correction, deletion, restriction or portability, withdraw consent, object to processing based on legitimate interests, and complain to your local authority, including Spain’s AEPD. Email support@bureauofoddcases.com. We may need proportionate information to locate an anonymous record. Rights requests are normally answered within one month; we will explain any lawful extension.

The app contains dark fictional themes and is not designed for children. Follow the age rating shown by Apple. Do not submit children’s personal details. Material changes to this policy will be dated here; new uses requiring a choice will be presented before that use.