Privacy policy

Who we are

Xtianlife ("we") is the controller of your personal data. Contact our privacy team through the contact details on this page for any request.

What we collect

Account: email address, sign-in method, adult (18+) confirmation date.

Game: your character, saves, settings, purchases of game items, elections, Blessings.

Community: player card, congregation membership, chat messages, reports, blocks, home invites, trades and transfers.

Payments: payment reference, amount, currency and status. Card and bank details are collected by Stripe and Paystack, never by us.

Wallet: your public Kross address and transactions. Your recovery phrase stays encrypted on your device and is never sent to us.

Technical: device storage needed to run the game and keep you signed in. We do not use advertising trackers or sell data.

Why we use it (legal bases)

To provide the game and your account — performance of contract.

To process and credit payments once, enforce spending limits and prevent fraud — contract, legal obligation and legitimate interest.

To moderate community spaces and keep adults-only play safe — legitimate interest and legal obligation.

Your choice of church tradition may reveal religious belief, a special category of data. We process it only because you choose to enter it in the game (explicit consent), and you can change or delete it at any time.

Sharing

Service providers who process data for us under contract: hosting and database, Stripe and Paystack (payments), email delivery.

Public blockchain: Kross transactions you sign are public by nature and cannot be erased.

Authorities, only where required by law. We never sell or share personal data for cross-context behavioural advertising.

International transfers

Data may be processed outside your country. Where required we rely on Standard Contractual Clauses, the UK Addendum or equivalent safeguards.

How long we keep it

Account and game data: until you delete your account.

Payment records: as long as tax, accounting and anti-money-laundering law requires (typically 6–10 years), then erased.

Moderation records: up to 12 months after the related report is closed.

Your rights

Access and portability — download your data from the Account page.

Erasure — delete your account instantly from the Account page.

Correction, restriction, objection and withdrawal of consent — contact us; we reply within one month (45 days in the US).

You will not be treated differently for exercising any right. You may complain to your data protection authority.

Region-specific rights

EU/EEA (GDPR) and UK (UK GDPR, Data Protection Act 2018): all rights above, plus complaint to your national supervisory authority or the ICO.

California and other US states (CCPA/CPRA and similar): right to know, delete, correct, and opt out of sale or sharing. We do not sell or share personal information, and do not use sensitive data beyond what's needed to provide the service.

Nigeria (NDPA 2023): rights of access, rectification, erasure, portability and objection; complaints to the Nigeria Data Protection Commission.

South Africa (POPIA): complaints to the Information Regulator. Kenya (DPA 2019): complaints to the ODPC.

Brazil (LGPD): rights listed in Art. 18, complaints to the ANPD. Canada (PIPEDA): complaints to the OPC.

Children

Xtianlife is for adults 18+. We do not knowingly collect data from anyone younger; if we learn of it, we delete the account.

Security

Encrypted connections, row-level access controls, server-side payment checks and least-privilege staff access. If a breach affects you we will notify you and regulators as the law requires.

Changes

We'll announce material changes on the What's new page and in the game before they apply.