Legal
Privacy Policy
Last updated: 24 October 2026
Agora Intelligence Ltd ("Agora", "we", "our", "us") operates agoragame.com and the Agora mobile application (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, what choices you have, and where your data goes.
Agora is a game about political and geopolitical stories. Some of the information we process — your self-declared political leaning, the stances you take on political stories, the reasoning you write or speak about them, and analyses we compute from that activity — is special-category data under Article 9 of the UK/EU GDPR (data revealing political opinions). We process this data with your explicit consent, which is our lawful basis under Article 9(2)(a). You can review and change your consents at signup, or later in Settings → Data & Consent.
A note on the rollout of granular consent. As of the "Last updated" date above, we record every consent you give or withdraw. Product-analytics consent is enforced: signed-in analytics are not sent to PostHog unless you opt in. Enforcement of some other per-purpose choices — where turning off "send my reasoning to Google Gemini", for example, actually stops the request — is still being rolled out. Until that rollout is complete, those feature-specific flows may still occur regardless of your per-purpose choice; you can block them by not using the associated feature (voice input, written reasoning, debate, or coaching), or by asking us to delete your account.
1. Information We Collect
Account information. When you sign up with email, we collect your email address, chosen username, and password (stored as a secure hash — we never see your plaintext password).
Sign in with Google. If you sign up or log in with Google, we receive your Google account's email address and display name from Google's authentication service. We do not receive access to your Gmail, contacts, calendar, or any other Google data.
Political leaning (special-category data). If you tell us your political leaning (Republican, Democrat, or Independent), we store it on your profile and use it to power in-game comparisons on the results page. Storing your political leaning requires your explicit consent (Article 9(2)(a) GDPR); you can decline this consent, change your leaning, or delete it at any time.
Gameplay data, including political stances (special-category data). We record your answers, confidence levels, response timing, wagers, and scores for each question you play. Where the question is about a political story, the stance you take (for example, "hold" vs. "collapse" on an opening prediction) reveals a political opinion and is treated as special-category data. This data is used to compute your Reasoning Score, run matches, and generate Insights.
Reasoning text (may contain political opinions). When you type reasoning in response to a question, we store your text against your account. Free-text reasoning about a political story may contain political opinions and is treated as special-category data. Where you consent to AI features, Google Gemini may receive the story or question, your reasoning, debate messages, and relevant gameplay or profile context needed to score your reasoning, respond in a debate or coaching feature, or generate a game result. The response may be stored against your account. See §3 (Data Sharing) for details.
Voice recordings (may contain political opinions). If you use the voice-input feature, your audio is sent to ElevenLabs (United States) for transcription. We do not save a copy of the audio in Agora's databaseafter transcription completes. The resulting transcript is stored against your account as part of the game session. The transcript may also be sent to Google Gemini to compute a Voice Reasoning Score or provide another AI feature you use. Per-purpose consent for these processors is recorded at signup and in Settings and will govern whether these flows occur once per-purpose enforcement is live (see the rollout note above).
Insights (profiling based on special-category data). Once you have played enough rounds, and where you have consented to insights generation, we analyze your gameplay patterns — including stances taken on political stories, timing, confidence, and the framing and lean of your written arguments (which are tagged by our LLM pipeline) — to generate a personalized weekly set of "Insights" cards describing your reasoning strengths, weaknesses, and blind spots. Because the underlying data is special-category, Insights themselves are treated as special-category. Cards are visible only to you inside the app unless you choose to share one. You can turn Insights off at any time in Settings.
Interaction telemetry. To power Insights and calibration metrics, we record how long you dwell on each argument and how often you change your answer before submitting. On political questions this counts as inferred special-category data. It is processed under the same insights consent.
Push notifications. If you enable push notifications, your device push token is stored and used to deliver notifications (e.g. daily story alerts, friend activity) via Apple's Push Notification service (APNs) on iOS, or Google's Firebase Cloud Messaging (FCM) on Android. Apple or Google receives the notification payload including the alert text; we do not send your email address or account credentials to either. Friend activity notifications may include a friend's display name in the notification alert text. Story alerts may reference the topic of the day's story.
Usage and device data. We send usage events to PostHog (European Union): pages visited, session duration, in-app events, and — as super-properties — the story you are currently reading and the game stage. Analytics events are linked to your account ID, and the associated PostHog person profile includes your email address and username, so we can understand usage and improve the Service. PostHog's session-replay feature is disabled. For signed-in users, we send these events only after you consent to product analytics. Before signup, limited anonymous gameplay events may be sent under a short-lived per-session identifier that is not linked to your later account.
Visitor counting. To count how many people use Agora, each time you open the site or app our server records one anonymous visit. Nothing is stored on your device for this. The server combines your IP address and browser type with a random key that changes every week, turns them into a one-way code, and keeps only that code, the day, the platform and the link you arrived from. Each week's key is deleted after the week ends, so the code cannot be turned back into your IP address or linked across weeks. If you are signed in, the visit is also linked to your account. We do this under our legitimate interest in measuring our audience. PostHog receives only that week's one-way code for each visit (for signed-in visits, a code made from your account the same way), never your IP address, account or a profile.
Purchases. If you subscribe to Agora+ in the iOS app, Apple processes the payment; we never receive your card or payment details. We receive and store your subscription status (active or not, product, store, renewal and expiry dates) linked to your account ID, so we can unlock Agora+ on every device you sign in on. Purchases are linked to your account ID through RevenueCat (see §3).
Consent records. We record each consent you give (including granular consents from the "Customize consent options" page) and any subsequent changes or withdrawals in a consent log, so we can demonstrate compliance under Article 7(1) GDPR.
2. How We Use Your Information
- To provide and operate the Service (necessary for the contract with you)
- To calculate and store your Reasoning Score
- To generate your personalised weekly Insights, where you have consented
- To store and display your political leaning, where you have consented
- To send your reasoning or voice for LLM scoring / transcription (per-purpose consent enforcement is being rolled out — see the rollout note in §1)
- To provide Agora+ to subscribers and keep subscription status up to date (necessary for the contract with you)
- To send you account-related emails (e.g. password reset)
- To produce aggregated, anonymised research data; we do not sell your individual data, and processor access is limited to the uses described in §3
- To improve gameplay and content quality
3. Data Sharing and International Transfers
We do not sell your personal information. We share data with the processors listed below. Where a processor is outside the UK/EU, we rely first on the UK–US and EU–US Data Privacy Framework (which currently covers Google LLC and ElevenLabs, both active DPF participants), backed by Standard Contractual Clauses in the processor's terms of service, and — for the Article 9 special-category data (political opinions, reasoning, voice) that some transfers include — on your explicit consent under Article 49(1)(a) GDPR captured at signup and revocable in Settings.
- Supabase — our database and authentication provider; hosts the primary data store (supabase.com).
- Google (Sign-In) — only if you choose to sign in with Google; we receive your email and display name from Google to create or link your Agora account (google.com).
- Google (Gemini API, primarily United States, may be processed in any Google-operated region) — receives story or question text, reasoning you type or say, debate messages, and relevant gameplay or profile context when you use AI scoring, debate, coaching, or game-generation features. It does not receive your Agora password. Transfers to Google in the US rely on Google LLC's certification under the EU–US and UK–US Data Privacy Framework, and on your explicit consent for LLM reasoning scoring (Art. 49(1)(a) GDPR). Governed by your LLM reasoning-scoring consent once per-purpose enforcement is live; see the "rollout" note above (ai.google.dev).
- ElevenLabs (United States) — receives audio you record via the voice-input feature for transcription. Agora does not save a copy of the audio in its own database after transcription. ElevenLabs handles the audio under its own processor terms. Transfers to ElevenLabs in the US rely on ElevenLabs' certification under the EU–US and UK–US Data Privacy Framework, and on your explicit consent for voice transcription (Art. 49(1)(a) GDPR). Governed by your voice-transcription consent once per-purpose enforcement is live; see the "rollout" note above (elevenlabs.io).
- PostHog (European Union) — product analytics and usage measurement. Signed-in analytics are governed by your product-analytics consent (posthog.com).
- Apple (APNs, United States) — delivers push notifications to iOS devices. Apple receives the notification alert text and your device token, but not your email address or account credentials. Friend activity notifications may include a friend's display name (apple.com).
- Apple (App Store, United States) — processes Agora+ subscription payments, renewals, cancellations and refunds under Apple's own privacy policy. Apple tells us whether a subscription is active; it does not share your payment details with us (apple.com).
- RevenueCat (United States) — manages Agora+ subscriptions for us. It receives your Agora account ID and App Store purchase receipts (product, price, dates, country) to confirm and track your subscription, and tells our servers when it changes. It does not receive your email address, gameplay, or reasoning. Transfers to RevenueCat in the US rely on Standard Contractual Clauses in RevenueCat's data processing terms (revenuecat.com).
- Lovable AI Gateway (United States) — routes requests to AI models, including OpenAI and Google models. Depending on the feature, it may receive story content, images, gameplay decisions, opinions, stances, written or transcribed reasoning, and other match context needed to generate illustrations, game copy, or a post-match reflection. We do not include your Agora password or authentication token in those prompts (lovable.dev).
- Google (Firebase Cloud Messaging, United States) — delivers push notifications to Android devices. Google receives the notification alert text and your device token, but not your email address or account credentials (firebase.google.com).
- Service providers who assist with hosting, analytics, and security, under appropriate confidentiality agreements.
- Law enforcement or regulators when required by law.
4. Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, contact us at the address below and we will delete the account.
5. Data Retention
We retain your account and gameplay data for as long as your account is active. You may delete your account in the app or request deletion of your account and associated data at any time by emailing us. The in-app deletion control removes account-linked data from Supabase and, for users who consented to product analytics, requests deletion of the linked PostHog person profile, historical events, and recordings. PostHog processes that deletion asynchronously. We may retain aggregated or de-identified statistics that can no longer be linked to you, and limited records where retention is required by law or needed to prevent fraud or resolve a security or legal dispute. See our public account-deletion instructions for the current process and scope.
6. Security
We use industry-standard measures including encrypted connections (HTTPS), hashed passwords, and row-level security on our database. No system is perfectly secure; if you discover a vulnerability please contact us responsibly.
7. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or receive a portable copy of your personal data, to object to certain processing, and to lodge a complaint with your local supervisory authority. If we rely on your consent (for example, storing your political leaning or generating Insights), you can withdraw that consent at any time; withdrawal does not affect the lawfulness of processing before the withdrawal. To exercise these rights, contact us at the email below or use the deletion option in the app.
8. Changes to This Policy
We may update this policy from time to time. We will notify registered users of material changes by email. The date at the top of this page always reflects the most recent revision.
9. Contact
Questions? Email us at hello@agoragame.com.