Privacy Policy

Last updated: June 16, 2026

recursive.eco (the “Service”) is operated by PlayfulProcess LLC, a Delaware limited liability company (“we,” “us,” “our”). This policy explains what we collect, why, who we share it with, and the rights you have. By using the Service you agree to this policy and to our Terms of Service.

What recursive.eco is

recursive.eco is a platform where people create and share grammars — symbolic systems like tarot decks, stories, I Ching books, and interpretation sets — and generate AI illustrations for them.

Information we collect

How we use it

To provide the Service (store and render your grammars, run AI features you initiate, process payments), to secure it (authentication, rate-limiting, abuse prevention), and to communicate with you about your account. Our lawful bases (where the EU/UK GDPR applies) are performance of a contract (running the Service you signed up for), legitimate interests (security and improvement), and consent(any optional communications). We do not sell your personal data, we do notrun advertising or third-party tracking scripts, and we do not use your private content to train AI models.

AI features and your content

When you initiate an AI interaction (chat, agent tool-call, or image generation), the relevant prompt and content are sent to the AI provider that serves that request (below) solely to produce your result. Outputs are AI-generated and may be inaccurate — see the AI disclaimer in our Terms.

Sub-processors & third-party services

These providers process data on our behalf under their own terms. Some are located in the United States; if you are in the EU/UK, your data may be transferred there under appropriate safeguards (such as Standard Contractual Clauses or an equivalent framework).

Publishing & the commons

recursive.eco is a commons. When you choose to publish a grammar (offer it to a channel or make it public), you grant a Creative Commons Attribution-ShareAlike 4.0 (CC‑BY‑SA 4.0) license: others may view, fork, adapt, and build on that work, with attribution and under the same license. We record your acknowledgement of this at the moment you publish.

Because that license is, by its nature, irrevocable, published work (and the images it depends on) may remain available to people who have forked or saved it even if you later delete your account — otherwise their copies would break. Your private drafts, journal entries, chats, and personal data are never part of the commons and are deleted as described below. You can also unpublish a grammar at any time (it leaves the public catalog going forward), and we keep a narrow takedown path for genuine issues such as personal information in a published image or a copyright complaint.

Data retention

We keep your account and content for as long as your account is active. If you delete content, it is removed from the database; deleted images are removed from storage. If you close your account, we delete your private personal data within a reasonable period (except limited records — e.g. payment/tax — we must retain to comply with law). Content you published to the commons may be retained and re-attributed as described above. We do not retain personal data indefinitely.

Your rights

You can access, correct, export, or delete your data. Most actions are self-service: edit or delete grammars and journal entries in the app, and rotate or revoke your API token in Account settings. For a full export or account deletion, contact us (below). If the GDPR or a U.S. state privacy law (e.g. CCPA/CPRA) applies to you, you also have the right to object to or restrict certain processing and to lodge a complaint with your local data-protection authority; we do not “sell” or “share” personal information as those laws define it.

Security

Data is stored in Supabase with row-level security so you can only access your own records. All connections use HTTPS. Service credentials are kept server-side. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your data and will notify affected users and authorities of a qualifying breach as required by law.

Children

The main Service is intended for users aged 13 and older and is not directed to children under 13. A family/“kids” viewing experience is intended to be set up and supervised by a parent or guardian from their own account; it is not designed to collect personal information directly from children. If you believe a child under 13 has provided us personal information without verifiable parental consent, contact us and we will delete it. (See the Terms for more.)

Changes

We may update this policy; we will revise the “Last updated” date and, for material changes, provide notice in the app.

Contact

For privacy questions, data-access, or deletion requests, contact pp@playfulprocess.com(PlayfulProcess LLC). We respond to verified requests within the timeframe required by applicable law.