Privacy Policy for Critter Gram
Critter Gram ("the app") is developed and published by Machinaut Studios LLC ("we", "us"). This policy explains what data the app handles. The short version: there is no account, grams are generated on your device, and we do not build a profile of you. If you choose to send grams straight to a friend, they pass through one small relay of ours that holds no names, cannot read what it carries, and deletes it on delivery.
Information we collect
We do not ask for your name, email address, phone number, or contacts, and there is no account to create. We run no analytics, no advertising, and no tracking of any kind, and we do not sell or rent data to anyone.
If you never use the friend-to-friend features, the app makes no request to our relay at all — it holds no record of you whatsoever.
Making a gram stays on your device
The message you type, the sender name you enter, the voice, the animation, and the finished video are all produced locally on your phone. Speech is synthesized by an offline engine bundled in the app; the video is encoded by your device's own hardware. Nothing in that path is uploaded to us, and none of it requires a network connection. Sharing the finished video is an ordinary share, initiated by you, to whichever app or person you pick.
Microphone and camera
Critter Gram does not use your microphone or camera. Every critter voice is synthesized, never recorded. On iOS you may see microphone and camera notices in the app's store listing or system settings; those exist only because the video encoder the app links against contains Apple's capture code, which causes iOS to require the declarations. The app never opens either device, and we never receive audio or images from you.
Sending grams to a friend (the critter relay)
Optionally, when both people have the app, a gram can travel as a small text payload instead of a video. This uses a store-and-forward server we operate, called the relay. It is a staging area, never an archive:
- Payloads are opaque. The relay never parses gram bodies. It stores bytes and forwards bytes.
- No names, ever. It holds no display names, profiles, phone numbers, or email addresses. A device is identified only by a random identifier generated on your phone.
- Deleted on delivery. A gram is deleted the moment the recipient's app acknowledges it. Anything undelivered expires automatically after 7 days.
- Pairing is by invite only. You reach someone by sharing a single-use invite code, which expires after 24 hours. There is no directory, no search, and no way for a stranger to reach you.
- Credentials are stored hashed. Only a one-way hash of your device secret and of invite codes is ever written to disk.
- Logs are minimal and anonymized. Gram contents and pairing blobs are never logged, and device identifiers are truncated in logs. IP addresses are used transiently to rate-limit abuse and are not used to build any profile.
You can block a paired friend, unpair from them, or erase this phone's messaging identity entirely from within the app — the last of which deletes the device, its pairings, any pending grams, and its notification tokens from the relay. Grams you have already received stay on your phone.
Notifications
If you allow notifications, the app can tell you a gram has arrived. The notification is deliberately content-free: it always reads "Critter Gram / A gram just arrived." and never contains the message, the sender, the critter, or a count. Delivery uses Firebase Cloud Messaging, a Google service, which issues your device a notification token; on iOS, Firebase relays to Apple's push service. That token is only ever handed to our relay after you have paired with a friend. Google's handling of this is governed by the Firebase privacy documentation and the Google Privacy Policy. Notifications are only ever a hint to check for grams; the app works without them.
The optional on-device model ("Big Brain")
Settings offers an optional download of a language model that writes some critters' dialogue. Downloading it fetches a file over the network; after that, it runs entirely on your device. Your messages are never sent anywhere to be written — generation is always local. The feature is optional, can be switched off, and the download can be removed at any time. Without it, every critter still works using a built-in procedural engine.
Reporting abuse
If someone sends you something abusive, you can report it. This is the one place where we deliberately keep content: a report includes the reason you give and the material you chose to quote, so that a person can review it and act. Reports are automatically deleted after 90 days, and filing one also blocks that sender for you. If you never file a report, we never receive any gram content.
Purchases
Critter Gram offers a single optional in-app purchase that unlocks the rest of the critter roster for sending. There is no subscription. Purchases are processed entirely by the store you downloaded the app from — Apple's App Store on iOS, or Google Play Billing on Android. We do not receive or store your payment details, card information, or billing address. On iOS, payment handling is governed by the Apple Media Services Terms and Conditions and the Apple Privacy Policy; on Android, by the Google Play Terms of Service and the Google Privacy Policy. The app stores only a local flag indicating whether the purchase was made.
Data sharing
We do not sell, rent, or trade your data, and we do not share it for advertising. The only third parties involved are the infrastructure providers described above: Apple and Google for app distribution and payments, and Google's Firebase Cloud Messaging for notification delivery. Grams sent through our relay are passed only to the friend you addressed them to.
Children's privacy
Critter Gram does not knowingly collect personal information from anyone, including children, and requires no account. Because the app can send and receive messages between paired friends, we recommend that younger users have a parent or guardian involved in deciding who they pair with. Pairing always requires deliberately sharing an invite code, and any pairing can be blocked or removed at any time.
Your choices
- Use the app entirely offline by only sharing grams as videos — the relay is never contacted.
- Decline notification permission; grams still arrive when you open the app.
- Skip or remove the optional model download.
- Block or unpair any friend, or erase this phone's messaging identity from the relay, from within the app.
- Delete the app, which removes the grams and settings stored on your device.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Contact
Questions about this policy can be sent to info@machinautstudios.com.