1. DATA PRACTICES & ARCHITECTURE (DREAMCIPHER)

Panixircus Entertainment operates under strict data minimization principles. DreamCipher is designed for symbolic narrative exploration and entertainment; it does not collect identity documentation, government IDs, or sensitive biometric facial profiles.

1.1. Account Architecture & Anonymous Access

DreamCipher primarily implements Firebase Anonymous Authentication. By default, users interact with the service without providing email addresses, real names, or phone numbers. A randomized, alphanumeric User Identifier (UID) is generated locally to persist application preferences and token counters.

1.2. Account Linking & Cloud Backup (Optional)

Users may elect to associate their anonymous session with a Google Account via OAuth. When initiated, Vectixore LTD processes your basic provider-supplied identifier and verified email address strictly to synchronize session history and restore in-app entitlements across devices. We do not engage in behavioral cross-profiling or data brokerage.

1.3. Dream Text & AI Analysis Cascade

When you submit narrative text for interpretation:

• Processing: Input text is analyzed through Vectixore LTD's neural inference cascades (including Analyst, Mystic, and Guide frameworks) to derive archetypal and symbolic patterns.
• Zero Permanent Identity Linkage: Narratives are processed ephemerally for generative decoding. Dream text is not bound to permanent real-world identity dossiers.
• Entertainment Scope: Outputs are machine-generated symbolic narratives. We do not perform medical diagnosis, mental health therapy, or clinical psychological profiling.

1.4. In-App Currencies, Energy & Virtual Goods

DreamCipher monitors daily usage tiers, optional rewarded access tokens, and virtual consumable credits (e.g., energy/stamina tokens) using RevenueCat and standard app-store billing APIs.

• Status: Virtual goods represent non-refundable, non-transferable digital service licenses without real-world currency value.
• Retention: In accordance with company policy, accounts remaining fully inactive for twenty-four (24) consecutive months may be decommissioned and associated virtual allocations revoked.

1.5. Safety, Reporting & Model Auditing

If an interpretation is flagged via the in-app reporting tool, the underlying dream fragment, AI generation output, and reporter's categorical reason are retained in an isolated administrative safety log for model quality auditing and abuse mitigation.

1.6. Diagnostics, Analytics & Advertising Infrastructure

• Diagnostics: Performance telemetry, non-fatal exceptions, and crash traces are gathered via Firebase Crashlytics to resolve stability regressions.
• Telemetry: Aggregated, non-identifying application usage patterns are monitored via Firebase and AppMetrica to guide optimization.
• Ad Serving & Mediation: Monetized tiers incorporate Yandex Mobile Ads and Unity Ads via certified mediation pipelines, governed by Google User Messaging Platform (UMP) consent frameworks. Advertising IDs (AAID/IDFA) are governed by device-level opt-out mechanisms.

1.7. Minor Safety & Age Assurance Compliance

In adherence to the UK Age Appropriate Design Code, the UK Online Safety Act, and the Brazil Digital Child and Adolescent Statute (Digital ECA):

• We integrate platform-level age signals (such as the Google Play Age Signals API) to identify minor accounts without accessing raw birth certificates or underlying identity documents.
• When minor telemetry is indicated, telemetry drops to Firebase Restricted Data Processing (RDP) mode, and third-party ad calls are flagged with TFCD (Child-Directed) and TFUA (Under Age of Consent) parameters to prevent personalized tracking.
• Loot-box mechanics or randomized paid transactions are prohibited for confirmed minors.

2. DATA SUBJECT RIGHTS & GOVERNANCE

Under the UK GDPR, EU GDPR, and applicable global data protection frameworks, you maintain enforceable rights regarding your personal records:

• Right of Access & Portability: Obtain disclosure of stored account-level keys and associated records.
• Right to Rectification: Request correction of inaccurate account records.
• Right to Erasure: Request unconditional purging of account telemetry and stored preferences.

2.1. Jurisdiction & Supervisory Authority

This privacy architecture is governed by the laws of England and Wales. You maintain the right to lodge inquiries directly with the United Kingdom Information Commissioner's Office (ICO) or your territorial data supervisory authority.

2.2. Contacting the Controller

Formal inquiries or Data Subject Access Requests (DSAR) must be addressed to:

• Email: info@vectixore.com
• Subject Header: "Panixircus Entertainment - Privacy Data Request"
• Statutory Turnaround: Responses are fulfilled within 30 calendar days.

ACCOUNT & DATA DELETION

In accordance with global privacy regulations and Google Play policies, users have the right to request the permanent removal of their accounts and associated application data.

* Notice: Submitting a data erasure request permanently revokes access to historical journal logs and forfeits accrued virtual energy tokens.

3. COOKIE & LOCAL STORAGE NOTIFICATION

On web endpoints (including panixircus.vectixore.com), we utilize client-side storage technologies (Local Storage, Session Storage, and operational cookies) solely to retain UI themes, language selections, and consent tokens. We do not deploy cross-site tracking cookies across our web interfaces.