This explains what IncomeRPG collects, why, and who else can see it. It is written to describe what the software actually does rather than to reserve every right we might one day want.
IncomeRPG is operated from Ontario, Canada. It is currently run as an unincorporated business by its founder; this page will name the registered company once incorporation completes. For any privacy question or request — including access, correction or deletion — write to contact@incomerpg.app, which is monitored by the operator.
| Data | Why | Where it lives |
|---|---|---|
| Email address | To create your account and sign you in | Supabase |
| Name and profile picture (Google sign-in only) | Google sends them with your sign-in, and our sign-in provider keeps them with your account. The app does not use or show them | Supabase |
| Password | Authentication only — we never store or see it; it is handled entirely by Supabase, or by Google if you sign in with Google | Supabase / Google |
| Subscription status and customer id | To know whether your account has Premium | Supabase, Stripe |
| Payment details | Taken and stored by Stripe. We never receive your card number. | Stripe |
| App Store purchases (the iPhone app) | Which subscription you bought through Apple and when it renews or ends — so your account knows it has Premium. Apple takes the payment; we never receive your Apple ID password or card details. RevenueCat knows your account only by its random id, never your name or email | Apple, RevenueCat, Supabase |
| Game progress — your kingdom, characters, settings, milestones, and the date you acknowledged that IncomeRPG is not financial advice | So your progress follows you between devices, and so the acknowledgement is asked once rather than on every device | Your browser, and Supabase if signed in |
| Brokerage holdings, balances and transaction history | To calculate and display your own portfolio figures | SnapTrade; and a copy in your saved kingdom on our database (Supabase), in that save's backups, and on your device. Disconnecting a brokerage stops new data; what was already synced stays in your kingdom until you delete it — deleting your account removes all of it |
| Brokerage connection key (never your brokerage password) | A key issued by SnapTrade that lets our server read (never write) the accounts you connected | Our server only — a restricted table no app or browser can read, on a database encrypted at rest |
| Error reports | If the app hits an error: a short technical report — what failed, the page, the app or browser version — so we can fix it. Our server's logs also record your IP address with each request. Never your portfolio, your messages or a password | Our server's logs (Hostinger) |
| Username | Your name in the app — shown on your hero card, and to other Premium members who search for you in Friends | Supabase |
| Profile photo (optional) | Shown in the ring on your hero card. Shrunk to a small 256-pixel picture on your device before it is sent, and shown only to your friends and to anyone you have sent a friend request to (so they can decide) — never in search results | Supabase |
| Social handles (optional) | The Instagram, TikTok, YouTube or Blossom handles you choose to add, shown on your hero card to your friends | Supabase |
| Your hero card | Your level, your hero and scene, the names of the brokerages you have connected, how many holdings you have and three of your ETF cards (the three you pick, or your three largest if you have not picked) — so your friends can see your card. Your friends can also open every one of your ETF cards, which shows each fund’s ticker, its class and stage, its yield and how often it pays, and its level and stage — which grow with the amount you hold — but never the dollar amount itself. Your portfolio value, your monthly income, your progress towards the next level and each card’s dollar figures are shown to all your friends by default — including the Founder (the person who runs IncomeRPG), whom every Premium member starts out friends with. You can change that at any time in Edit profile → Privacy: all your friends, only the friends you tick, or no one. Your friends can also see your recent trades (up to 40): the date, the fund, and whether you bought, sold or reinvested — and, under the same Privacy setting, how many units and for how much. Trades come from your own brokerage syncs; a friend looking at them never contacts your brokerage. Someone who is not your friend never sees your trades. Someone you have sent a friend request to can see your card while they decide, but never those figures or your holdings; someone who has sent you a request sees nothing of yours until you accept | Supabase |
| Friends, requests and blocks | Who you are connected with, who you have asked, and who you have blocked | Supabase |
| Messages | What you and a friend write to each other (up to 500 characters each), who sent it, when, and whether it has been read. Only the two of you see a conversation in the app, and we do not read them — the one exception is a message you report, a copy of which goes to the review. Messages are deleted when either of your accounts is deleted | Supabase |
| Home Base visits | When you visit a friend’s Home Base, or friends visit yours: a short-lived pass naming whose Home Base you are in (it expires after 15 minutes), and — only while you are there — where your hero stands, which way it faces and any emoji you send, passed live to the friends in the same Home Base and not stored. What you say there (up to 120 characters) is kept as a message to the friends it was said to, under the same rules as Messages. Whether your Home Base is locked to new visitors is kept with your friends settings | Supabase |
| Contact form | If you write to us from the app's Contact us form: the email address you give us, what kind of message it is, what you write, your account id and email, the page you were on and your browser — sent to our inbox so we can reply to you. It is not stored in the app | Google (Gmail) |
| Email for the blog (optional) | If you give your email to read the rest of a blog post: the address, which post, when, and the exact words you agreed to — so we can send you IncomeRPG emails about cash flow investing and the app. Every one has a way to unsubscribe, and you can ask us to delete your address at any time. It is not linked to an account, and it is never sold | Supabase |
| Reports | If you report a member, or are reported: who reported whom, the reason, any note written, and a copy of a reported photo or message — kept only until the report is decided | Supabase |
| Account bans | If an account is banned for breaking the community rules, a record of the ban is kept together with a one-way scrambled (hashed) form of its email address, so the same address cannot simply sign up again. The address itself is not kept in that record | Supabase |
| Usage data (Google Analytics) | Which pages and features are used: page views and taps, your device and browser type, the country and region worked out from your IP address, and a random identifier kept in a cookie so repeat visits can be counted. It is not linked to your account, your email or your portfolio, and it is set up so it is not used for advertising |
Apart from what Google sends with a Google sign-in, we do not collect your name — and we never collect your address, phone number, date of birth or government identifiers. We do not ask for them and the app has nowhere to put them.
We use a small number of providers to run the service. Each acts on our instructions:
youtube-nocookie) mode so nothing is set unless you press play.We set no advertising cookies. Google Analytics sets two first-party cookies (_ga and
_ga_…) holding a random identifier so it can count repeat visits; they are not linked to your account,
and you can block or delete them in your browser settings without changing how the app works. The app uses your browser's local storage to keep your
game save and your preferences on your own device, and Supabase sets a cookie or token so you stay
signed in. Clearing your browser storage signs you out and removes the local copy of your save; a
cloud save, if you made one, remains until you delete your account.
Your account data and cloud save are kept while your account exists. Delete your account and they are removed, along with your brokerage connection, your photo and your hero card, and you are taken out of every other member's friend and request lists. A report is kept after it is decided, as a record of the decision — without the photo. A ban record, and its hashed email address, is kept after the account is deleted, for as long as the ban stands. Stripe retains payment records for as long as tax and accounting law requires, independently of us; Apple and RevenueCat keep App Store purchase records the same way.
Wherever you live, you may ask us to show you the data we hold about you, correct it, or delete it. You can delete your account and its data yourself from ⚙️ Game Settings → Account in the app, at any time, without asking us. What we must keep is listed in section 6: billing records held by Stripe and Apple, a ban record while a ban stands, emails you sent us, and short-lived server logs.
Our lawful bases are: contract — to provide the service you subscribed to; and legitimate interests — to keep the service secure and working, and to understand how it is used so we can improve it (Google Analytics). You have the rights of access, rectification, erasure, restriction, portability and objection, and you may complain to your data protection authority. Our providers may process data outside your country; those transfers rely on the providers' own standard contractual clauses.
We do not sell or share personal information as those terms are defined, and we have not in the preceding twelve months. You may request access or deletion, and we will not discriminate against you for asking.
You may access and correct your personal information, and may complain to the Office of the Privacy Commissioner of Canada.
IncomeRPG is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has created an account, write to us and we will remove it.
Traffic is encrypted in transit, and our database is encrypted at rest. Brokerage connection keys are held in a restricted store, separate from your game data, that only our server can read. No system is perfectly secure, and we will tell affected users promptly if a breach ever puts their data at risk.
If we change this policy materially we will say so in the app. The date at the top always reflects the current version.