ATREDIT PRIVACY POLICY
Last updated: 30 September 2026
Atredit is operated by WePlai LLC, a Georgia limited liability company in the United States. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use the Atredit iOS app, our website, and related support services (the Services).
It covers competitions, ratings, comments and creator replies, The Lab, polls and feedback charts, player cards, ATR Coins, cosmetics, coin gifts, and the editor resource showcase. It also explains your choices and how to contact us about your information.
This policy is a privacy notice, not a request for blanket consent. Using the Services or accepting our Terms of Service does not replace any separate consent required by law.
1 Who is responsible for your information
WePlai LLC, doing business as Atredit, is responsible for the personal information described in this policy and is the controller where that term applies. Send privacy questions, requests, and complaints to Support@atredit.com, or write to WePlai LLC, 3343 Peachtree Rd NE, Suite 145 PMB 423, Atlanta, GA 30326, USA. You can mark your message for the person responsible for privacy; no special subject line is required.
The Services are offered in the United States, United Kingdom, European Union and European Economic Area, including Iceland, Canada, and Australia. Your rights depend on the law applicable to you and the processing involved. Mandatory rights are not limited by this policy or our Terms.
2 Information you provide
Account and authentication information includes your username, email address and/or phone number used for authentication, self-reported age information, and the country or region and profile details you provide. Optional profile details can include an image, avatar, and bio. We use authentication and verification records to manage access and security.
Content includes uploaded videos and edits, captions, comments, creator replies, profile showcases, Lab submissions, poll questions and answers, resource listing thumbnails, stated prices, and external links. Content can contain information about you or other people. Only include information you have a lawful basis to share.
Activity records include contest entries, ratings, results, trophies, season standings, player-card statistics, saves, favorites, histories, library items, and display preferences. We also record the interactions needed to calculate coin rewards, Lab feedback, and poll results.
Purchase and virtual-item records include the transaction information supplied to us by Apple and records generated within Atredit: transaction references, products or coin packs, purchase dates and status, amounts and currency where supplied, refund or reversal information, coin credits and spending, balances, cosmetic entitlements, and gifts. Gift records link the amount and time of the gift with the participating Atredit accounts and the route used to send it. These records help us provide items, reconcile transactions, investigate errors and abuse, and handle refunds.
Apple processes payment for coin purchases. The information Atredit receives through that process is distinct from payment credentials you provide directly to Apple. Do not send us card credentials or your Apple account password in a support request.
Communications include support requests, reports, appeals, complaints, feedback, and related correspondence or attachments. We may request information reasonably necessary to investigate an issue or verify a privacy request.
You choose whether to provide optional content or profile details. Information needed to authenticate an account, process a transaction, or operate a requested feature is necessary for that function; without it, we may be unable to provide the function. We explain any additional information required for a particular request when asking for it.
3 Device information and other sources
We collect technical and usage information when you use the Services, including IP address, device type, operating system, app version, identifiers used to operate the Services, timestamps, logs, diagnostics, crashes, and performance data. Usage records can include screen and feature activity, video views, watch and rating activity, comments and replies, saves, contest participation, Lab interactions, and moderation or security events.
An IP address can indicate an approximate location, such as a country or region. We use this information for availability, security, fraud prevention, and service operation. This is different from precise GPS location. If you enable notifications, we process the device token and relevant preferences needed to deliver them.
We receive information from Apple about purchases and app distribution, from our technical providers about service operation and delivery, and from other users who interact with your content, send you gifts, or report an issue involving your account. These sources may supply information we did not obtain directly from you.
Device permissions control access to functions such as selecting media for upload and receiving notifications. If an available feature requests camera or microphone access, the request is connected to that feature. You can manage permissions in iOS settings. Selecting a video to upload does not authorize unrelated use of your entire media library.
4 Why we use information
We use the information described above to:
Create and authenticate accounts, apply eligibility rules, and maintain account security.
Upload, store, deliver, and display edits, profiles, comments, creator replies, and resource listings.
Operate free competitions, calculate results and tie-breaks, award trophies and coins, and maintain standings and histories.
Provide Lab ratings, comments, polls, and feedback charts to the submitting creator.
Verify coin purchases, maintain balances and cosmetic entitlements, process gifts, and handle refunds, reversals, and support.
Organize feeds and recommendations and rank resource listings using editors' season trophies.
Investigate reports, moderate content, prevent manipulation and fraud, enforce rules, and protect users and the Services.
Diagnose problems, assess performance and feature use, and improve the Services.
Communicate about your account, transactions, support requests, safety, and material service or policy changes.
Promote Atredit using advertising tools, subject to the practices and choices described in section 8.
Meet applicable legal obligations, respond to lawful requests, and establish, exercise, or defend legal claims.
We do not treat these purposes as permission to collect all available information. Processing must be appropriate to the purpose and subject to applicable law. If a new use requires additional notice or consent, the new use must be addressed before that processing takes place.
5 What other people can see
Public content and profiles
Videos and comments submitted to the public parts of Atredit, including The Lab, are visible to other users. Creator replies appear with the relevant conversation and may identify the creator. Usernames, profile images, published profile details, showcased edits, trophies, standings, and displayed player-card information can also be visible through the relevant features. Resource listings display their thumbnail, stated price, external link, and associated editor information.
Public content can be copied, recorded, or shared by people who see it. Avoid posting information you want to keep private. Privacy requests concerning our copies do not necessarily remove independent copies held by others.
Ratings and Lab feedback
Ratings and anonymous viewer comments are not publicly attributed to the submitting viewer where the feature provides anonymity. We can associate this activity with an account internally for service operation, rewards, moderation, safety, and integrity checks.
Lab videos and comments are public. Lab poll questions, poll results, and charts are not published as public profile information; poll questions must nevertheless be shown to people invited to answer them. Feedback results and charts are provided to the submitting creator. The creator cannot identify individual raters or see which identified user selected a poll answer through these feedback features. Atredit retains the underlying information needed to operate and protect the feature. Feedback based on a small number of responses may still allow someone to infer a response from context.
Gifts and balances
Coin gifts are not published to other users as a public transaction history. Information about a gift is available to its participants through the relevant feature, subject to the anonymity rules below. Atredit also processes the underlying records. Coin balances and purchase records are not public profile information.
When a gift is sent through a competition video in the feed, the sender's identity is hidden from the recipient through that gift. When sent through the recipient's player card, the sender is identified to the recipient. Anonymous display does not mean anonymity to Atredit. Information can also be disclosed where lawfully required as described in section 7.
6 External resource listings and Payhip
The resource showcase lets editors publish thumbnails, prices, and links to editing packs, sound effects, courses, and other resources offered through Payhip. Its ordering uses season trophy totals. Listing activity and the associated editor account are processed to display, rank, maintain, and moderate the showcase.
Tapping a listing takes you to an external store or page. No resource purchase is completed inside Atredit, and Atredit receives no commission, listing fee, or other payment for the listing. Atredit does not operate the external checkout.
When you visit Payhip or another external destination, that service may receive information such as your IP address, browser or device details, and referral information as part of the visit. Information you then provide to a seller, Payhip, or a payment provider is governed by that party's privacy practices. Review those practices before purchasing. Atredit remains responsible for its own handling of information in the showcase.
7 Recipients of information
We use Amazon Web Services for technical infrastructure. Services identified in our current infrastructure include DynamoDB, S3, CloudFront, MediaPackage, CloudWatch, EventBridge, AWS End User Messaging, and Cognito. They support functions such as data and media storage, content delivery, operational monitoring, event processing, authentication, and communications. The information a service processes depends on its function and configuration.
We use Apple's App Store services, including App Store Connect, for app distribution and related purchase administration. Apple also processes information for its own purposes under its privacy policy. Apple and AWS do not have identical roles for every activity; a provider may act on our instructions for one function and independently for another.
Other relevant recipient categories include providers supporting diagnostics, communications, support, security, and advertising as described in this policy. Access to information must be limited to the relevant purpose and governed by applicable obligations. Public or participant visibility is explained in section 5; external seller services are explained in section 6.
We may disclose information to competent authorities, professional advisers, or other appropriate recipients when reasonably necessary and lawful to comply with an obligation or valid legal process, investigate fraud or security incidents, respond to rights-related reports, protect people, or handle legal claims. A request alone does not remove applicable restrictions on disclosure.
Information may be disclosed in connection with a proposed or completed business transfer, financing, restructuring, or sale, subject to appropriate confidentiality and applicable law. We may also disclose information at your direction or with valid consent. These provisions do not authorize an unrelated use that would require further notice or consent.
8 Advertising and tracking choices
We use advertising tools to promote Atredit. We do not sell personal information or use personal information for targeted advertising or cross-context behavioral advertising. This statement concerns our processing of personal information; it does not mean that no advertising tools are used or that an advertising platform has no separate relationship with you.
Advertising services may process your interaction with an Atredit advertisement under their own notices. The data available to us depends on the tool and campaign, and may include campaign reporting. This policy does not authorize unrestricted sharing of account activity or purchase records with advertising companies.
Where a cookie, identifier, software tool, or other technology requires consent, the necessary information and choice must be provided before its use. Acceptance of this policy is not that consent. You can manage available browser controls and iOS privacy and tracking settings and contact Support@atredit.com about marketing or data-use choices. Device controls do not necessarily erase records already held or stop processing needed to deliver a requested service.
If you receive promotional communications from us, you can ask us to stop them using the available unsubscribe method or by contacting support. Necessary account, transaction, security, and legal communications may still be sent.
9 Retention and account deletion
We retain personal information while needed to operate your account and the features you use. The relevant period depends on the purpose, the type of record, whether you have requested deletion, and any applicable legal requirement. Continued account operation does not justify retaining unrelated information indefinitely.
After account deletion, account-related records may remain for up to 24 months. These may include submitted content, comments and replies, ratings, poll responses, listings, transaction records, and records associated with safety, integrity, or disputes. This period is an outer operational retention period, not a requirement to retain every record for the full period. Applicable erasure rights and shorter periods required by law take precedence. Where a particular record must be retained longer to meet a legal obligation or preserve evidence for an existing legal claim, retention is limited to that reason and the period needed.
Deleting an account is not a guarantee that every associated record or contribution disappears immediately. Historical interactions and contributions can require separate removal or de-identification. If information remains visible after deletion, contact Support@atredit.com identifying the content so we can assess its removal and your rights. Retention for a necessary internal purpose does not itself justify continued public display.
Backups support continuity and recovery and are subject to a five-day clearing cycle. Backup rotation is separate from deletion in the main systems: data still held in a live system may appear in subsequent backups. The backup cycle should not be understood as a promise that all account information is erased five days after a deletion request. Statutory deletion obligations remain applicable to backup copies.
We may retain information that has been effectively anonymized so it no longer identifies, or can reasonably be linked to, an individual. Removing a username alone does not necessarily anonymize information. Coin balances, cosmetics, and other account entitlements on deletion are addressed in the Terms of Service; loss of access to them does not mean all transaction records are immediately erased.
10 Security
We use safeguards appropriate to the information and processing, including access controls, encryption in transit, and operational monitoring. Access by personnel and providers should be limited to what is needed for their responsibilities. No storage or transmission system can be guaranteed completely secure.
Keep your account credentials secure and contact support if you suspect unauthorized access. Do not send passwords or payment-card credentials with a report. If a personal-data breach requires notification to affected people or an authority, the applicable notification duties apply.
11 Children and teenagers
Atredit's general minimum age is 13, subject to higher age or eligibility requirements that apply in a location or to a feature. App Store availability does not override those requirements. We collect age information reported by users; that information is not equivalent to independent age verification.
We do not knowingly seek information from children below the applicable minimum age. If you believe such a child has an account or has supplied information, contact Support@atredit.com. We will assess the report and take the action required by applicable law, which may include restricting access and deleting information.
The ability to enter a contract, authorize a purchase, or consent to personal-data processing can involve different rules. Where a particular use of a child's information requires verified parental authorization, a statement in this policy or the child's acceptance of the Terms does not provide that authorization. Processing that requires such authorization must not proceed without it.
The public-visibility and anonymity explanations in section 5 also matter for teenagers. We do not sell their personal information or use it for targeted advertising. A parent or guardian may contact us about a child's privacy rights, subject to identity, authority, and the child's own rights under applicable law.
12 International processing
WePlai LLC is based in the United States. Information may be accessed or processed in the United States and in countries where our service providers operate. Using AWS does not mean all information is stored or accessed in one country. Storage, content delivery, and support access can involve different locations, and foreign authorities may have lawful access under the laws that apply to them.
Where a transfer is restricted by applicable law, it requires a valid transfer basis and any necessary safeguards. Depending on the transfer, applicable mechanisms can include an adequacy decision, approved contractual clauses, or another legally permitted mechanism. This policy is not consent to an otherwise unlawful transfer and does not assert that WePlai LLC is certified under a particular transfer framework.
Contact Support@atredit.com to request information about the countries, recipients, and safeguards relevant to your information, including a copy or explanation of applicable transfer safeguards, subject to lawful redactions.
13 Privacy requests and choices
Contact Support@atredit.com or use the postal address in section 1 to request access, correction, deletion, a copy of information, or another applicable privacy right. You can request account deletion through the App. You do not need to cite a law or use a particular subject line.
We may request proportionate information to verify your identity or an agent's authority. We will respond within the applicable legal period and explain a lawful refusal, limitation, or extension. Rights can be subject to exceptions, such as another person's privacy or required recordkeeping. We will not impose an unlawful charge or discriminate against you for exercising a protected right.
Where processing relies on consent, you can withdraw it through an available control or by contacting us. Withdrawal does not invalidate processing lawfully completed before withdrawal. We will explain if a requested restriction prevents us from supplying a feature. Withdrawing optional consent does not itself require closing your account.
You can also ask about or challenge our privacy practices and request review of a decision. These procedures do not replace your right to contact a regulator or seek another available remedy.
14 United Kingdom and European privacy rights
This section applies where UK, EU, or EEA data-protection law governs the processing, including applicable law in Iceland.
Lawful grounds
Contract necessity supports processing needed to provide the service you request, such as authenticating your account, hosting submissions, recording ratings, producing Lab results, administering competitions, and fulfilling purchases or gifts. It does not automatically cover every useful business activity or every processing operation involving a minor.
Legitimate interests support necessary and proportionate activities such as securing the Services, preventing manipulation and fraud, handling complaints, maintaining reliability, and improving service operation, after balancing those interests against individuals' rights. Content organization and recommendations may involve these interests where not strictly necessary to a requested service. Children's interests require particular consideration.
Consent is the basis where legally required for optional processing, including applicable tracking technologies or marketing activities. Legal obligation is the basis where processing is necessary to meet a law binding on us, including applicable recordkeeping, privacy, and lawful disclosure duties. Handling legal claims may instead depend on legitimate interests and any additional condition required for sensitive information.
A device permission is not automatically consent for every later use of information. We do not request sensitive information as a condition of ordinary participation. If content or a report includes information revealing health, ethnicity, religion, political opinions, sexual orientation, or other specially protected information, processing requires any additional legal condition applicable to that information. Uploading it does not automatically remove those protections.
Your rights and objections
Subject to applicable conditions, you can request access, correction, erasure, restriction, and portability of personal data and withdraw consent.
You have the right to object, on grounds relating to your situation, to processing based on legitimate interests. You can object to direct marketing at any time, including related profiling, without having to give a reason. Send an objection to Support@atredit.com.
Automated processing
Atredit uses systems to calculate contest standings and tie-break results from eligible ratings, award coins and trophies, generate Lab statistics, organize content, and order resource listings by season trophies. Systems can also flag suspected abuse or invalid transactions. These processes can affect displayed results, visibility, rewards, and account activity.
Contact support to question a result or restriction, explain your circumstances, or request review. If a decision falls within a legal regime for solely automated decisions with legal or similarly significant effects, applicable information, lawful-basis, review, and contest rights must be respected. An ordinary ranking is not automatically such a decision, and this policy does not waive protections where they apply.
Complaints
You can complain to the UK Information Commissioner's Office at ico.org.uk, or to the relevant EU/EEA supervisory authority, including the authority where you live, work, or where an alleged infringement occurred. Iceland's authority is Persónuvernd at personuvernd.is. You do not have to complete our support process before exercising a right to complain to a regulator.
15 Canadian privacy rights
Depending on the applicable federal, provincial, or territorial law, you may request access to your personal information, correction, information about its use and disclosure, withdrawal of consent subject to lawful limits, and other available remedies. We will explain material consequences before acting on a withdrawal where needed. Required consent must be meaningful and appropriate to the sensitivity of the information and the context; this notice does not substitute for it.
For Quebec residents, additional rights may include portability of qualifying computerized information and, in circumstances provided by law, cessation of dissemination or de-indexing or re-indexing of personal information. Applicable rules on information processed outside Quebec and decisions based exclusively on automated processing remain in force. Requests concerning such decisions may include asking about the information used, correcting it, and making observations to a person able to review the decision.
Address privacy inquiries to WePlai LLC through Support@atredit.com. You may also complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca or the applicable provincial authority, including Quebec's Commission d'accès à l'information at cai.gouv.qc.ca, British Columbia's commissioner at oipc.bc.ca, or Alberta's commissioner at oipc.ab.ca.
16 Australian privacy rights
Where the Australian Privacy Act and Australian Privacy Principles apply, you may request access to and correction of personal information and complain about its handling. Applicable rules on collection, use, disclosure, security, overseas recipients, and retention remain in effect.
Send a complaint to Support@atredit.com with enough detail for us to investigate. We will consider it and respond under the applicable requirements. If the matter is not resolved, you may be able to complain to the Office of the Australian Information Commissioner at oaic.gov.au. This policy does not limit any other rights available under Australian law.
17 United States privacy rights
Where applicable state privacy law gives you rights, these may include access, correction, deletion, portability, information about recipients, and opting out of sale, targeted advertising, or specified profiling. These rights depend on the law's scope and relevant exceptions. We do not sell personal information or share it for cross-context behavioral advertising as described in section 8.
The categories of information, sources, purposes, and recipient categories are described in sections 2 through 8. We do not condition a protected privacy right on a purchase. Authorized agents may submit requests where permitted, subject to verification of their authority. If a request is denied, you may appeal by contacting Support@atredit.com and asking for review, where an appeal right applies. Applicable rights to complain to a state regulator or attorney general remain available.
18 Changes to this policy
We may update this policy as our Services or legal obligations change. The date above identifies the latest revision. We will provide notice of material changes through appropriate means, such as the App, website, or email, and obtain fresh consent where the law requires it. Continued use alone is not consent to a new purpose that requires separate consent.
19 Contact
WePlai LLC doing business as Atredit
Privacy inquiries: Support@atredit.com
3343 Peachtree Rd NE, Suite 145 PMB 423, Atlanta, GA 30326, USA