CaraccaPrivacy Policy
Last updated: October 19, 2026
Caracca is a language-exchange app run by Black Prelude LLC, a New Mexico limited liability company ("we", "us"). This policy explains what data we collect when you use the Caracca app, caracca.world and the Gold shop, why we use it, who we share it with and the choices you have. Contact: support@blackprelude.com.
1. Who can use Caracca
Caracca is only for adults. You must be 18 or older to create an account. We don't knowingly collect data from anyone under 18; if we learn we have, we delete the account.
2. Data we collect
- Account: email address and an encrypted password (handled by Firebase Authentication).
- Profile: display name, date of birth (to check you are 18+; other users see your age, not the date), country, native and learning languages and levels, interests, bio and, if you choose, gender and pronouns, profile photo, cover and avatar.
- Selfie for the 3D avatar (optional): if you create an avatar from a photo, the photo (and your pet's photo) is sent to Google's Gemini AI to draw the avatar. We keep the resulting avatar, not the original photo.
- Content you create: posts, photos, reels, comments, reactions, votes, chat messages, voice messages, gifts, vocabulary cards and reports.
- Activity: when you were last active, profile visits, likes, follows, blocks, call times (calls themselves are peer-to-peer and not recorded), and daily usage counters used to enforce limits.
- Purchases: Gold balance and history, VIP status, and purchase records (order IDs and product; we never see your full card number). In-app purchases are processed by Google Play or the App Store; web purchases by Stripe.
- Device and ads: if ads are shown, Google AdMob may use your device's advertising ID and approximate location, according to the consent you give in the app.
3. How we use it
- To run the service: your account, profile, matching you with language partners, chats, calls, feeds, Gold and VIP.
- AI features you request: message translation and the dictionary (sent to DeepSeek), the 3D avatar (sent to Google Gemini) and AI practice partners, which are always labeled as AI.
- Safety: limits, fraud prevention, handling reports and enforcing our Terms.
- Payments: crediting purchases, renewals and refunds.
- Aggregate statistics about how the app is used (counts, not individual profiles).
Where the GDPR applies, our legal bases are: performing our contract with you, our legitimate interests (safety, fraud prevention, improving the app), your consent (ads personalization, optional AI features) and legal obligations (tax and accounting records).
4. Who we share it with
Other users see your public profile and the content you post. We don't sell your personal data. We use these service providers, who process data on our behalf:
| Provider | What for |
|---|---|
| Google Firebase / Google Cloud (USA) | Accounts, database, servers, file storage |
| Cloudflare (USA) | Photo, video and voice storage (R2), website and call relay |
| Google Play, Apple App Store | In-app purchases and subscriptions |
| Stripe | Web purchases in the Gold shop |
| Google AdMob | Ads (never shown to VIP members) |
| DeepSeek (China) | Translations and dictionary (only the text you translate) |
| Google Gemini | Generating your 3D avatar from your photo |
We may also share data if required by law or to protect the safety of our users. Some providers are outside your country; where required we rely on standard contractual clauses or equivalent safeguards.
5. How long we keep it
We keep your data while your account is active. When you delete your account we delete your profile, content, chats and files (see Delete your account). We keep purchase records as required for tax and accounting (usually up to 7 years) and reports about abuse when needed for safety. Backups are overwritten within 30 days.
6. Your rights and choices
- Edit your profile at any time in the app.
- Delete your account in the app (Settings → Delete account) or by request.
- Change your ads consent in the app's privacy settings.
- Depending on where you live (for example the EU, UK or California) you can ask to access, correct, export or delete your data, or object to some processing. Write to support@blackprelude.com from your account's email. You can also complain to your local data protection authority.
7. Security
Data travels encrypted (HTTPS). Access is limited by security rules so users only see what they should; voice messages and paid photos are private. No system is perfect, so please use a strong password.
8. Changes
If we change this policy we'll update the date above and, for important changes, tell you in the app.