Privacy Policy

The short version. When you chat in RUB, we record the messages. We scrub them for personal information, score them for emotional and topical quality, and may package them into datasets that we sell to AI research organizations for model training. This is the entire business model — and we try to make that obvious before you start playing rather than burying it down here.

What we collect

• Account data: display name, avatar seed, and your OAuth identifier from the provider you sign in with (e.g. Google sub). We do not store your OAuth password.
• Profile demographics (optional): age bracket, gender, country, and native language. These are used to make datasets more representative and may be included in dataset metadata in aggregate form.
• Chat content: every message you send in a 1-on-1 chat or friend DM, along with timing data (when you started typing, when you sent it).
• Gameplay data: guesses, credits, friend relationships, leaderboard rank, daily bounty participation.
• Operational data: IP address (for rate limiting and abuse detection), browser type, and crash reports if you opt into error monitoring.

How we use chat data

Every conversation passes through a multi-stage pipeline before it is eligible to be sold:

1. PII scrubbing. Regular-expression filters redact emails, phone numbers, credit-card numbers, IP addresses, and URLs. An LLM verifier (Claude Haiku) reviews for residual semantic PII (full names, street addresses, identifying personal stories).
2. Enrichment. A separate LLM call scores the conversation on quality, emotion, and topic. These scores live alongside the conversation and are used to filter the datasets we offer.
3. Trust scoring. Anti-fraud heuristics flag accounts that paste or automate, so paste-spam and bot-farm activity is excluded from sellable data.
4. Packaging. Filtered, scrubbed conversations are exported as a dataset and sold under a contract that prohibits buyers from attempting to re-identify participants.

What we do NOT do

• We do not sell your name, email, or OAuth identifier.
• We do not advertise on RUB.
• We do not let bots use your private friend chats for dataset purposes — those messages are stored for the chat feature but excluded from the packaged datasets.
• We do not share your data with third parties other than the infrastructure providers required to operate the service (database hosting, error monitoring) and the dataset buyers described above.

Your rights

You can request a copy of your data or deletion of your account and associated chats by emailing privacy@bear.ai. Datasets that have already been sold cannot be recalled, but future datasets will exclude your conversations once the deletion request is processed.

Region-specific notes

RUB is operated from the United States. If you are in the EEA, UK, or California, you have additional rights under GDPR / UK GDPR / CCPA respectively, including the right to opt out of the sale of personal information. To exercise these rights, use the email above. We do not currently sell datasets that include EEA/UK conversations.

Children

RUB is 18+ for this MVP. If we learn that we have collected data from someone under 18, we will delete the account and exclude that user's data from future datasets.

Cookies and similar technologies

We use a small set of strictly-necessary cookies to keep you signed in. We may use optional first-party analytics (PostHog) and error monitoring (Sentry) when the relevant environment keys are configured; you will be able to opt out from a settings page once that is available.

Changes

If we change this policy in a material way, we will notify signed-in users in-app before the change takes effect.