PixDart

Privacy Policy

Version 1.2.0 · Last updated August 13, 2026

PixDart is a social game where posts compete in duels, operated by Vestra AI ehf. (Iceland), which is the controller of this processing. This policy describes the kinds of information we process and why.

What we collect

To provide the service we process information including the following:

  • Account data, such as your email address and name via our sign-in provider (Clerk), your chosen username, optional bio and profile photo, and country.
  • Content and activity, such as photos you take for duel and collection challenges, comments, likes, follows, clan membership, clan chat messages, duel results, streaks, and reports you submit.
  • Device and usage data, such as a push notification token if you enable notifications, basic usage records (day of activity, platform, app version) used for aggregate statistics, and a record of which posts have been shown to you, used so your feed does not repeat itself and can rank what to show next.

How we use it

We use this information for purposes including:

  • Running the game: matching duels, computing trophies, showing feeds and leaderboards, and personalizing the order of your feed (performance of a contract with you, GDPR 6(1)(b)).
  • Judging duels: photos you submit for a challenge are analyzed by an AI vision model to decide whether they show the target (performance of a contract, GDPR 6(1)(b); see Sharing below).
  • Sending notifications, which you can turn off per category in the app or entirely in your device settings (consent, GDPR 6(1)(a)).
  • Moderation and safety: reviewing reports, enforcing our terms, and preventing spam and abuse, including limits on how many actions an account can perform in a period (legitimate interest in a safe service, GDPR 6(1)(f)).
  • Improving PixDart and developing AI technology: challenge and collection photos, together with related context such as the challenge text and the judge's verdict, may be used to train, evaluate, and improve computer vision and other AI models, ours or our partners' (consent given when you accept this policy, GDPR 6(1)(a), which you can withdraw at any time by deleting the content or your account).
  • Meeting our legal obligations.

One mechanic worth knowing: when a duel photo passes the judge, it is published to the feed and stays on your profile, together with the challenge text and how quickly you found it. Items you collect, and the photos behind them, are visible on your profile too. Photos that do not pass the judge are never published.

App permissions

The app may ask for access to certain device features, such as:

  • Camera: to photograph duel targets. Challenge photos are camera-only by design.
  • Photos: so you can set a profile photo. Only images you pick are uploaded.
  • Notifications: to tell you about duels, comments, followers, and similar events. Controllable per category in the app and entirely in your device settings.

We do not collect your location.

Automated processing

Whether a challenge photo passes is decided automatically by an AI vision model, and matchmaking, feed ranking, and anti-abuse limits are automated too. These decisions only affect what happens inside the game: you can retry a rejected photo within your attempt limit, and we make no automated decisions about you with legal or similarly significant effects in the sense of GDPR Article 22. Moderation decisions such as removing content or suspending an account are made by people, and you can always ask us to review one.

Deletion and retention

You can delete individual posts or your entire account in the app (Settings). Deleted data is hidden immediately and permanently erased after 30 days, a window we keep for safety and legal compliance; signing back in within that window restores the account. The erasure includes, among other things, your posts, images, comments, likes, follows, chat messages, profile, and sign-in identity.

A few categories follow their own rules:

  • Usage records are deleted after 90 days regardless of account status.
  • Moderation reports are retained for safety and evidence purposes and are not part of ordinary account deletion.
  • Duel results are retained in de-identified form, because your opponents keep their own game history; after erasure they no longer link to your profile or content.

Sharing

We share personal data with trusted service providers who process it on our behalf under confidentiality, including: Convex (database and file storage), Clerk (authentication), Expo (push delivery), and Anthropic (challenge photos are sent to Anthropic's API for automated judging; API data is not used to train their models). If in-app purchases are offered, RevenueCat processes purchase state; payment details stay with Apple or Google. We may also disclose information where the law requires it.

Photos and related game data covered by the AI purpose above may also be shared with or licensed to partners for developing AI systems, among other purposes. When we do this, we remove direct account identifiers such as your username and email address. Deleting a photo or your account removes it from what we share going forward.

Your rights

Under the GDPR and Icelandic data protection law you can request access to, correction of, or erasure of your personal data, object to processing, and lodge a complaint with your supervisory authority (in Iceland: Persónuvernd). The fastest route for erasure is deleting your account in the app; for anything else, email us.

Contact

Vestra AI ehf. · vestra@vestra.is

PixDart · Vestra AI ehf. · Reykjavík, Iceland · vestra@vestra.is