Privacy Policy

Last updated 12 November 2026

This policy explains what personal data the 1in8 app ("1in8", "we", "us") collects, why, who it is shared with, how long it is kept and what choices you have. 1in8 is a life simulator: you live one simulated human life, decision by decision. The lives are simulations and are not about you.

1. Who we are

1in8 is provided by Nautiluse Limited, a company registered in England and Wales (company number 14904815), registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom ("Nautiluse"), which is the data controller for the data described here. Contact: info@nautiluse.com.

2. Data we collect

Account

An account ID, the sign-in provider (Apple or Google) and the email address it shares with us. With Sign in with Apple you can hide your email; we then receive an Apple relay address, and we do not ask Apple for your name. Google also shares your name and profile picture address with our sign-in service; the app does not show or use them.

Source: You, via Apple or Google

Settings

App language.

Source: You

Lives

The simulated lives you live: your choices, focus and purchases inside each life, what the simulation answers (the life's events, figures and how it ends), your lives count and refill times. The engine's token for a life in progress is kept on our server only.

Source: Your use of the app

Invites

The invite codes you create (each one is for one friend and works for 7 days), which account invited you, and the lives invites earned.

Source: Your use of the app

Social

Your username, the lives you choose to post (the record, the line and the two numbers you pick), your likes, whether your profile is private, the accounts you block and the reports you send (a reason and the post or account). Your username, your posted lives, their like counts and your board places are public: other users see them in the app, people can find you by your username, and each posted life has its own web page at 1in8.app/l/…. If your profile is private, only you see your posted lives. We don't show who liked a post, and we don't tell anyone who reported them.

Source: You

Purchases

Whether you have Pro, the plan, purchase and renewal dates and the store. Payments are handled by Apple or Google; we never see your card details.

Source: Apple, Google, RevenueCat

Ads

For users without Pro: ad requests, ad impressions and clicks, rewarded-ad completions and a one-time code per rewarded ad so our server can give the life. Google AdMob also receives your IP address (from which it estimates an approximate location) and, only where you allow it, the device advertising identifier (IDFA on iOS after the tracking prompt; the Android advertising ID). In the EEA, the UK and Switzerland, your consent choice for ads.

Source: Google AdMob

Usage and diagnostics

App events (for example "life started"), the screens and options used, app version, device model, operating system and language, crash reports and performance measurements. Google Analytics for Firebase does not collect the advertising identifier in 1in8. In the EEA, the UK and Switzerland, analytics and performance measurements are collected only if you agree to them in the consent form; crash reports are always sent, to keep the app working.

Source: Google Analytics for Firebase, Amplitude, Firebase Crashlytics, Firebase Performance Monitoring

App integrity

A token from Apple App Attest or Google Play Integrity that shows a request comes from the real app.

Source: Firebase App Check

Age range

Where the law makes app stores share it (for example in some US states and in Brazil), your age range and, for a supervised account, whether a parent approved 1in8. It is used on your device only, to apply the age rules: 1in8 doesn't open for people under 13 or for a supervised account a parent hasn't approved. Only the resulting age group is kept, on your device; it is never sent to us, to analytics or to advertisers. If your app store reports you as under 18, the app sends us one identifier of this installation with your account (on iPhone the App Store's app transaction identifier, on Android Google Play's install identifier for a supervised account), so that if a parent or guardian withdraws consent we can switch the account off; it is used for nothing else.

Source: Apple (Declared Age Range) or Google Play (Age Signals)

Support

What you write to us and your email address.

Source: You

Some things stay on your device only: the home-screen widget and Live Activity showing your lives, the small score the app keeps to decide when to ask for a store rating, and the age group from your app store.

We do not collect your precise location, contacts, photos, microphone, camera or health data.

3. Why we use it

• To provide the service (performing our contract with you): sign-in, simulating and saving your lives, lives and refills, invites and their rewards, Pro, and the social features you use (posting, likes, the feed, the boards, profiles and blocking).
• To keep it fair and safe (legitimate interests): app-integrity checks, limits that stop invite and reward abuse, the username filter, reviewing reports and acting on them, protecting the service from attacks.
• To show ads to users without Pro (contract and, for personalised ads, your consent): ads pay for the free lives. Ads are personalised only where you have allowed it; otherwise they are non-personalised. A rewarded ad gives a life only after Google confirms it was watched.
• To improve the app: analytics and performance measurements (in the EEA, the UK and Switzerland your consent, given or refused in the consent form; elsewhere legitimate interests), and crash diagnosis (legitimate interests: keeping the app working).
• To apply age rules where the law requires them (legal obligation): the age range your app store shares, used on your device only, and for people under 18 the installation identifier that lets us act when a parent or guardian withdraws consent. When that happens, the account is switched off and deleted as described in section 6.
• To answer you when you contact us.

We do not sell personal data, and we do not use it for automated decisions with legal or similarly significant effects.

4. Who we share data with

These service providers process data for us under contract:

• Google: Firebase Authentication, Cloud Firestore, Cloud Functions, Firebase Hosting, App Check, Google Analytics for Firebase, Crashlytics, Performance Monitoring and Google Sign-In.
• Apple: Sign in with Apple, App Store purchases and App Attest.
• RevenueCat: subscription status and receipts, and ad events (format, ad unit, revenue) so we can see what the app earns.
• Amplitude: product analytics.
• 1in8b Engine (1in8b.life), which simulates the lives. It receives only your choices and the language, never your name, email or account ID.

Google AdMob serves the ads. For personalised ads Google acts as an independent controller and uses the data under its own policies; see how Google uses information from apps that use its services.

We may also disclose data if the law requires it, to protect users or the service, or as part of a merger or acquisition, in which case this policy continues to apply.

5. Where data is stored

Your account data, lives and invites are stored on Google Cloud in Belgium (europe-west1), where our server code also runs. Sign-in records, analytics and crash data are processed by Google, and analytics by Amplitude and subscription data by RevenueCat, including in the United States. Transfers outside the UK and the EEA are made under appropriate safeguards such as the European Commission's standard contractual clauses and the UK addendum to them.

6. How long we keep it

• While your account is active, we keep your account, settings, lives, invites and social data. You can delete a posted life at any time; it then leaves the feed, the boards and its web page.
• The engine's token for a life expires after 90 days. Invite codes are deleted 30 days after they expire. The one-time code for a rewarded ad works for an hour and is deleted within hours; the record that a reward was paid is kept for 90 days to stop it being paid twice.
• When you delete your account, or a parent or guardian withdraws consent for your use of 1in8 through your app store, it is switched off at once and can be restored for 14 days by signing in again; while it is switched off, your posts are hidden. After 14 days your account, lives, invite codes, installation identifiers, username, profile, posted lives, likes, blocks and board places, your RevenueCat customer record and your sign-in record are permanently deleted. Reports you sent are kept as moderation records, also after your account is deleted: until they are reviewed, then for one year after the review, to deal with repeated abuse.
• Analytics and crash data are kept according to the providers' retention settings (at most 14 months for Google Analytics). Purchase records are kept by Apple, Google and RevenueCat as tax and accounting law requires.

7. Your rights and choices

Depending on where you live, you can ask to access, correct, export or delete your data, restrict or object to its processing, and withdraw consent at any time. You can also:

• change the app's language and appearance in Settings;
• change your ads and analytics choices: in the EEA, the UK and Switzerland, Settings › Privacy choices in the app; tracking on iOS: Settings › Privacy & Security › Tracking; on Android: Settings › Privacy › Ads;
• delete your account (below).

Deleting your account

In the app: Settings (the gear on the Live tab) › Delete account, then confirm with Apple or Google. On iPhone this also disconnects 1in8 from your Apple ID.

Without the app (for example if you uninstalled it): email info@nautiluse.com with the subject "Delete my 1in8 account" from the email address of the Apple or Google account you sign in with (if you use Hide My Email, from your Apple ID's email, and say so). We confirm the account is yours and delete it as described in section 6. The steps are also on 1in8.app/delete-account. Deleting the account does not cancel a Pro subscription; cancel it in your App Store or Google Play settings.

For anything else, email info@nautiluse.com. We answer within 30 days, or sooner where your law requires. You can also complain to your data protection authority, or to the UK Information Commissioner's Office (ico.org.uk), which supervises us as a UK company.

8. Children

1in8 is not directed at children. You must be at least 13 to use it, and where the law of your country requires a parent's or guardian's consent at your age, you need that consent. Where your app store shares an age range (see section 2), 1in8 doesn't open for people under 13 or for a supervised account a parent hasn't approved. Some life events deal with difficult subjects such as illness, poverty, drinking and violence at home, written plainly and never in detail; the most sensitive ones (drug dependence, sexual violence, assisted dying and suicide) never appear. If we learn that we hold data of a child without the required consent, we delete it.

9. Security

Data is encrypted in transit and at rest. Requests to our server must come from the real app (App Check) and a signed-in account. Access to production data is limited to authorised staff. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

10. Changes

We will post any change to this policy on this page and update the date above. For significant changes we will also tell you in the app before they take effect.