Privacy Policy

This Privacy Policy explains how Pöhinä Group Oy (“we”, “us”, “our”) collects and uses personal data when you use Mine Yapping at mine-yapper.com, related APIs, and the Fabric client mod (the “Service”).

Controller: Pöhinä Group Oy. Contact: joni@pohina.group.

1. Data we collect

• Account data: name, email address, password hash (if you sign up with email), role/ban state, and profile fields you provide.
• Authentication data: session tokens, IP address, user agent, and OAuth tokens if you sign in with Twitch.
• API keys: Minecraft API keys you create for the mod, and optional encrypted OpenAI / ElevenLabs keys if you bring your own.
• Conversation inputs: microphone audio and/or text you send while talking to a mob, plus limited game context (for example mob type/name, player name, dimension, health).
• Usage metrics: whether a request succeeded, billing mode, input type, token/character/audio duration counters, and latency. We do not store conversation audio or transcript content in our database.
• Content you create: mob personalities and prompts.
• Donation data: Polar customer/order identifiers, amount, currency, and optional public nickname preference.

2. How conversation audio and text are processed

When you hold the talk key or otherwise send a conversation request, the mod sends audio or text to our servers. We process that input in memory to:

1. transcribe speech with OpenAI (speech-to-text);
2. generate a reply with OpenAI (language model), using your transcript, game context, and a short ephemeral conversation memory held only in the running server process;
3. synthesize speech with ElevenLabs (text-to-speech) and stream audio back to the mod.

We do not write microphone audio or conversation transcripts to our database. Ephemeral in-memory conversation history is discarded when the process restarts and is limited in size. Server logs are intended to exclude audio, transcripts, and secrets.

OpenAI and ElevenLabs act as subprocessors. If you use bring-your-own keys, your audio and text are sent to those providers using your keys instead of ours.

3. Why we process data

• to provide accounts, authentication, and the Minecraft mod API;
• to run speech and dialogue features through AI providers;
• to enforce monthly allowances and estimate shared API cost;
• to process optional donations via Polar;
• to secure the Service, prevent abuse, and provide support;
• to meet legal obligations where applicable.

Where GDPR applies, we rely on performance of a contract (providing the Service you request), legitimate interests (security, abuse prevention, service improvement), and consent or contract where you choose optional features such as Twitch sign-in, public donor nicknames, or bring-your-own keys.

4. Subprocessors and international transfers

We use third parties that may process personal data outside your country, including outside the EEA/UK. Those providers apply their own safeguards (such as standard contractual clauses) as described in their policies:

• OpenAI — speech-to-text and language model processing of conversation audio/text;
• ElevenLabs — text-to-speech and voice metadata;
• Polar — donation checkout, receipts, and customer records (a Polar customer may be created when you sign up);
• Twitch — if you choose Twitch sign-in;
• UpCloud — application hosting and managed PostgreSQL (including backups).

We do not sell personal data. Audio and text leave our systems only as needed to operate the AI and payment features above.

5. Retention

• Account, session, API key, personality, and usage metric data are kept while your account is active. We do not currently run automated purge jobs for older usage metrics; monthly quotas use current-month rows, but historical metric rows may remain until deleted with the account or by an operational cleanup.
• Conversation audio and transcripts are not retained in our database; ephemeral memory lasts only for the life of the server process (and is capped).
• Donation records (order identifiers, amounts, optional nicknames) may be retained for accounting and public donor listing even if an account is later removed, and corresponding records also exist at Polar.
• Database backups follow our host’s backup retention and may temporarily contain deleted data until those backups expire.

6. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data, to object to certain processing, and to data portability. You can:

• update your name in the account dashboard;
• revoke Minecraft API keys and delete stored bring-your-own keys;
• sign out to end the current session;
• email joni@pohina.group to request account deletion or other privacy requests.

Self-service account deletion is not yet available in the product UI. When you request deletion, we will delete or anonymize account data we control as described above, except where we must retain records (for example donation accounting) or where data lives with a processor you also have a relationship with (Polar, Twitch, or your own AI provider accounts).

You may lodge a complaint with your local data protection authority. In Finland that is the Office of the Data Protection Ombudsman (tietosuoja.fi).

7. Children

Minecraft is played by many minors. The Service is not directed at children under 13 (or the higher age required in your country without parental consent). Parents or guardians who allow a minor to use the Service are responsible for supervising that use and may contact us to request deletion of the minor’s account data.

8. Security

We use industry-standard measures such as TLS in transit, hashed passwords, hashed API keys, and encryption for stored bring-your-own provider keys. No method of transmission or storage is completely secure.

9. Changes

We may update this Privacy Policy by posting a revised version on this page. For material changes affecting how we process conversation audio or text, we will update this notice before enabling those flows in a materially different way.

10. Contact

Privacy and support: joni@pohina.group · Pöhinä Group Oy.