PixDart

Privacy Policy

Version 1.3.0 · Last updated September 1, 2026

PixDart is a social game where posts compete in duels, operated by Vestra AI ehf. (Iceland), which is the controller of this processing. This policy describes the kinds of information we process and why.

What we collect

To provide the service we process information including the following:

  • Account data, such as your email address and name via our sign-in provider (Clerk), your chosen username, optional bio and profile photo, country, and, if you subscribe, your subscription status (such as which subscription you hold and whether it renews).
  • Content and activity, such as photos you take for duel and collection challenges, comments, likes, follows, clan membership, clan chat messages, duel results, streaks, and reports you submit.
  • Device and usage data, such as your device's advertising identifier (used only for the advertising measurement described below, and only after you accept this policy), a push notification token if you enable notifications, basic usage records (day of activity, platform, app version) and sparse in-app events (for example, that the tutorial was shown or an invite was shared) used for aggregate statistics, and a record of which posts have been shown to you, used so your feed does not repeat itself and can rank what to show next.

How we use it

We use this information for purposes including:

  • Running the game: matching duels, computing trophies, showing feeds and leaderboards, and personalizing the order of your feed (performance of a contract with you, GDPR 6(1)(b)).
  • Judging duels: photos you submit for a challenge are analyzed by an AI vision model to decide whether they show the target (performance of a contract, GDPR 6(1)(b); see Sharing below).
  • Sending notifications, which you can turn off per category in the app or entirely in your device settings (consent, GDPR 6(1)(a)).
  • Moderation and safety: reviewing reports, enforcing our terms, and preventing spam and abuse, including limits on how many actions an account can perform in a period (legitimate interest in a safe service, GDPR 6(1)(f)).
  • Improving PixDart and developing AI technology: challenge and collection photos, together with related context such as the challenge text and the judge's verdict, may be used to train, evaluate, and improve computer vision and other AI models, ours or our partners' (consent given when you accept this policy, GDPR 6(1)(a), which you can withdraw at any time by deleting the content or your account).
  • Advertising measurement: we send a small set of in-app events, for example that a signup was completed or a first item was caught, together with your device's advertising identifier, to Meta Platforms Ireland Limited. This helps us measure our ads and show them to people more likely to enjoy PixDart. These events do not include your photos, messages, or profile details (consent given when you accept this policy, GDPR 6(1)(a); you can turn this off at any time under Settings, Privacy, Ad measurement in the app).
  • Meeting our legal obligations.

One mechanic worth knowing: when a duel photo passes the judge, it is published to the feed and stays on your profile, together with the challenge text and how quickly you found it. Items you collect, and the photos behind them, are visible on your profile too. Photos that do not pass the judge are never published.

App permissions

The app may ask for access to certain device features, such as:

  • Camera: to photograph duel targets. Challenge photos are camera-only by design.
  • Photos: so you can set a profile photo. Only images you pick are uploaded.
  • Notifications: to tell you about duels, comments, followers, and similar events. Controllable per category in the app and entirely in your device settings.

We do not collect your location.

Automated processing

Whether a challenge photo passes is decided automatically by an AI vision model, and matchmaking, feed ranking, and anti-abuse limits are automated too. These decisions only affect what happens inside the game: you can retry a rejected photo within your attempt limit, and we make no automated decisions about you with legal or similarly significant effects in the sense of GDPR Article 22. Moderation decisions such as removing content or suspending an account are made by people, and you can always ask us to review one.

Deletion and retention

You can delete individual posts or your entire account in the app (Settings). Deleted data is hidden immediately and permanently erased after 30 days, a window we keep for safety and legal compliance; signing back in within that window restores the account. The erasure includes, among other things, your posts, images, comments, likes, follows, chat messages, profile, and sign-in identity.

A few categories follow their own rules:

  • Usage records are deleted after 90 days regardless of account status.
  • Moderation reports are retained for safety and evidence purposes and are not part of ordinary account deletion.
  • Advertising measurement events are held by Meta under your device's advertising identifier rather than your account, so account deletion does not remove them; you can reset or delete that identifier in your device settings, and turn off the sending under Settings, Privacy in the app.
  • Duel results are retained in de-identified form, because your opponents keep their own game history; after erasure they no longer link to your profile or content.

Sharing

We share personal data with trusted service providers who process it on our behalf under confidentiality, including: Convex (database and file storage), Clerk (authentication), Expo (push delivery), Anthropic (challenge photos are sent to Anthropic's API for automated judging; API data is not used to train their models), Heroku, a Salesforce service (submitted challenge photos are scored there by our own image recognition model to power capture feedback and improve the game; photos are processed in memory and not retained on Heroku), and RevenueCat (subscription and purchase state; payment details stay with Apple or Google), and Meta Platforms Ireland Limited (the advertising measurement events described above, keyed to your device's advertising identifier; your photos and content are not sent to Meta). We may also disclose information where the law requires it.

Photos and related game data covered by the AI purpose above may also be shared with or licensed to partners for developing AI systems, among other purposes. When we do this, we remove direct account identifiers such as your username and email address. Deleting a photo or your account removes it from what we share going forward.

Your rights

Under the GDPR and Icelandic data protection law you can request access to, correction of, or erasure of your personal data, object to processing, and lodge a complaint with your supervisory authority (in Iceland: Persónuvernd). The fastest route for erasure is deleting your account in the app; for anything else, email us.

Contact

Vestra AI ehf. · vestra@vestra.is

PixDart · Vestra AI ehf. · Reykjavík, Iceland · vestra@vestra.is