Privacy Policy — Creature Cards
Effective date: July 30, 2026
Creature Cards ("the App") is made by Practice and Process ("we," "us"). This policy explains what information the App collects and how it's used. The App is designed for a general audience and is not directed specifically at children.
No accounts
Creature Cards doesn't have accounts, logins, or passwords. There's nothing to sign up for. Instead, the App generates a random identifier on your device ("device ID") the first time you open it, and uses that to keep track of your card collection and your free-tier usage. This identifier isn't tied to your name, email, or any other personal identity.
What we collect
Drawings, photos, and descriptions you submit. When you create a card, the sketch, photo, or text description you provide is sent to our backend to generate the card's artwork and text. As part of that process:
Your sketch/photo and description are sent to Anthropic's Claude API (for content moderation and to write the card's text and art direction).
Your sketch/photo is sent to Replicate, which runs the Black Forest Labs Flux image models, to generate or edit the card's artwork.
The submitted sketch and the finished artwork are stored in our Supabase backend, associated only with your anonymous device ID — not with your identity.
Usage analytics. We use PostHog to collect anonymous usage events (e.g., app opened, card created, card saved, paywall viewed) tied to your device ID, so we can understand how the App is used and fix problems. These events don't include your drawings, photos, or card content.
Feedback you choose to send. If you submit feedback through Settings, we receive the text you write. Please don't include personal information in feedback — we don't ask for or need it.
Photo library / camera access. If you choose to photograph a drawing or pick one from your photo library, the App requests permission to do so. We only access the specific image you select or capture, and only to generate a card from it. Finished cards you choose to download are saved back to your photo library using the same permission.
What we don't do
We don't require or collect your name, email address, or any account credentials.
We don't show ads or use advertising trackers.
We don't sell your data.
We don't knowingly collect personal information from children. If you believe a child has submitted personal information through the App, contact us at the address below and we'll delete it.
Data retention and deletion
Because there's no account, we can't look up your data by name or email — it's tied only to your device's anonymous ID. Uninstalling the App removes your local collection. To request deletion of any card art or sketches stored on our servers, contact us at the email below; we may ask you to confirm your device ID (visible in Settings) so we can locate the right records.
Third-party services we use
Service and Purpose: Anthropic (Claude API): Content moderation, card text, art direction. Replicate (Black Forest Labs Flux models): Card artwork generation and editing. Supabase: Backend storage for card art and sketches. PostHog: Anonymous usage analytics.
Security
We take reasonable measures to protect the information the App handles, but no method of transmission or storage is 100% secure, and we can't guarantee absolute security.
Changes to this policy
If we make material changes to this policy, we'll update the effective date above. Continued use of the App after a change means you accept the updated policy.
Contact us
Questions about this policy or a data deletion request? Email amy@practiceandprocess.com.