Privacy Policy | Pavel Istomin / Pika Group

Last updated: October 31, 2026

This Privacy Policy explains how personal data is collected, used, stored, shared, and otherwise processed in connection with the Taverna Level Up website at taverna.quest (the “Website”), its associated application (the “Application”), and the Taverna Level Up interactive experience (collectively, the “Service”).
The Service is operated by DOO Pika Group, Montenegro (the “Operator”, “we”, “us”), in connection with the creative activities of Tatiana Istomina.
For privacy-related questions or requests, please contact gt4nko@gmail.com.

1. Data Controller
DOO Pika Group, Montenegro, acts as the data controller for personal data processed in connection with the operation of Taverna Level Up.
Tatiana Istomina is the creator of the project and the primary contact for privacy-related inquiries.
External service providers may act as data processors or independent data controllers, depending on their respective roles and contractual arrangements.

2. Personal Data We Collect
Depending on how you interact with the Service, we may process the following categories of personal data.
Website and technical information
When you visit the Website or use the Application, technical information may be processed, including:

IP address and approximate location derived from connection data;
browser type, operating system, and device information;
pages and features accessed;
access times, session information, and technical logs;
information necessary for authentication, security, and technical operation.

Participant identification and account information
When you apply for or participate in a journey, we may process:

your name or preferred name;
email address;
booking and participation information;
account identifiers and authentication information;
communication preferences and administrative records.

Character and journey information
The Application may store information associated with your participation, including:

your assigned character and character-related information;
the journey or group in which you participate;
story events, assignments, and fictional interactions;
your reports, responses, choices, and creative contributions;
identified artifacts and their descriptions;
journey progress and participation history;
information necessary to maintain access to previous journeys.

Communications
If you communicate with the Operator, your Guardian, or other authorized representatives, we may process your contact information, messages, inquiries, and information voluntarily provided during those communications.
Booking and payment information
Where participation involves payment, we may process booking details, payment status, transaction references, amounts, and records necessary for administration, accounting, and legal compliance.
Payment card information, where applicable, is generally processed by the relevant payment provider rather than directly by the Operator.

3. Purposes of Processing
Personal data may be processed for the following purposes:

operating, maintaining, and securing the Website and Application;
creating and managing participant access;
assigning and maintaining fictional characters;
organizing and delivering interactive journeys;
recording participant reports, responses, choices, and progress;
supporting AI-assisted storytelling and narrative development;
generating narrative responses, assignments, artifacts, and subsequent story events;
maintaining continuity throughout a participant's journey;
enabling participants to revisit their characters and historical materials;
organizing communications with Guardians;
responding to personal support requests and inquiries;
processing bookings, payments, cancellations, and refunds;
preventing unauthorized access, misuse, and technical abuse;
complying with applicable legal, accounting, and regulatory obligations;
protecting legitimate rights and interests where permitted by law.

We do not sell participants' personal data.

4. Legal Bases for Processing
Depending on the circumstances and applicable data protection law, personal data may be processed on one or more of the following grounds:
Contractual necessity: to arrange participation, provide access to the Application, deliver the agreed journey, and maintain access to the participant's character and journey history.
Pre-contractual steps: to respond to applications, inquiries, and booking requests.
Legal obligations: to maintain required financial, accounting, tax, or other legally mandated records.
Legitimate interests: to maintain the security and reliability of the Service, respond to necessary communications, prevent misuse, and manage legitimate business activities, where those interests are not overridden by applicable individual rights.
Consent: where required for optional processing activities, marketing communications, particular uses of personal information, or processing that requires consent under applicable law.
Where processing relies on consent, participants may withdraw that consent in accordance with applicable law.
Processing of special-category personal data is subject to additional requirements, as described in Section 5.

5. Personal Reflections and Sensitive Information
Taverna Level Up includes creative activities and opportunities for personal reflection.
Participants may voluntarily include information about their emotions, experiences, relationships, health, personal circumstances, or other private matters in their reports and communications.
Some information voluntarily disclosed may qualify as special-category personal data under applicable law.
Participants are encouraged to share only information they are comfortable providing through the Service.
Where special-category personal data is processed, the Operator will identify and rely on an appropriate legal basis and any additional conditions required by applicable law, including explicit consent where necessary.
Such information will not be used for unrelated advertising or commercial profiling.

6. AI-Assisted Storytelling and Processing of Participant Data
Artificial intelligence (“AI”) is an integral part of the Taverna Level Up experience and supports the creation and development of each participant's individual journey.
Human-directed creative process
Each journey is directed by a human Guardian.
The Guardian reads and interprets participant reports, determines the direction of the narrative, provides instructions to AI tools, and guides the development of the experience.
AI tools assist the Guardian in drafting narrative responses, developing fictional events, describing and identifying artifacts, creating assignments, and maintaining continuity throughout the journey.
The creative direction and organization of the experience remain under human control.
How participant information is processed
During a journey, participants submit reports, responses, choices, and creative contributions through the Application.
The Guardian reviews these materials and may submit them to external AI services together with relevant information about the character, previous events, earlier participant responses, and the overall narrative context.
AI systems may therefore process:

participant reports and written reflections;
responses to assignments and narrative choices;
character descriptions and fictional background information;
previous story events and accumulated journey history;
previously identified artifacts and their descriptions;
instructions, interpretations, and creative directions provided by the Guardian;
other contextual information necessary to develop subsequent events.

AI processing may involve the participant's complete narrative history, including information submitted during previous days of the experience.
The information may be used to generate narrative responses, propose new assignments, develop artifacts, and adapt subsequent story events to the participant's individual journey.
Human direction and responsibility
The Guardian determines the creative direction of the journey and uses AI-generated materials as part of a human-directed process.
AI does not independently determine eligibility for participation, impose contractual penalties, or make other decisions producing legal or similarly significant effects.
The Operator remains responsible for the delivery of the Service and compliance with applicable data protection requirements.
Personal and sensitive information
Participant reports may contain personal experiences, emotional reflections, relationship information, or other private details.
Such information may be included in materials submitted to AI services when relevant to the participant's journey.
Where special-category personal data is involved, processing will take place only where an appropriate legal basis and any additional conditions required by applicable law are satisfied.
Participants will be informed about the use of AI before submitting their reports.
The Operator will take reasonable steps to limit unnecessary personal identifiers and protect information processed through external AI services.
External AI providers
AI processing may be performed using external AI service providers.
Depending on the provider and its contractual arrangements, submitted information may be processed or stored on infrastructure outside Montenegro.
The Operator will assess the applicable provider arrangements, data protection safeguards, and international transfer requirements.
Participant reports and journey histories will not be intentionally made publicly available through AI services.
Any use of participant information by external AI providers for their own model training must be assessed separately and supported by appropriate contractual arrangements and any legally required permissions.

7. Personal Support and External Messaging
In addition to the fictional journey conducted through the Application, participants may communicate directly with their designated Guardian through external messaging services, including Telegram or WhatsApp.
These communications may involve organizational questions, personal reflections, emotional experiences, or requests for support related to the journey.
Information voluntarily shared through these channels may be processed by the Guardian to respond to the participant, provide agreed support, and maintain necessary communications.
Such conversations are separate from the fictional narrative experience within the Application.
Personal communications are not automatically incorporated into the participant's fictional storyline or submitted to AI systems solely because they were shared with the Guardian.
Where information from a personal conversation is proposed for use in AI-assisted storytelling or another separate purpose, an appropriate legal basis will be established and any required permission obtained.
Telegram, WhatsApp, and other external messaging platforms process information according to their own privacy policies and technical arrangements.
Personal support offered by the Guardian is part of the creative and reflective experience. It does not constitute emergency psychological assistance, psychotherapy, psychiatric treatment, or medical care unless expressly agreed and provided by an appropriately qualified professional.

8. Access to Participant Information and Confidentiality
Access to personal information is limited according to the functions necessary to operate the Service.
Authorized Guardians may access relevant participant information to administer the experience, respond to participants, develop the narrative, and provide agreed support.
Technical administrators and service providers may access information where necessary for maintenance, security, troubleshooting, or infrastructure operation.
Participants are not automatically granted access to other participants' private account information or individual responses.
Where participants voluntarily share information in group interactions, that information may be visible to the intended group members.
Personal messages, identifiable experiences, and private reflections will not be published as testimonials, promotional materials, or public stories without appropriate authorization.
Personal communications are not used for unrelated advertising or commercial profiling.

9. Ongoing Access and Storage of Journey History
Taverna Level Up is designed to allow participants to return to their characters and previous journey histories after completing a journey.
Character information, story events, participant responses, artifacts, and related journey records may remain associated with a participant's account on an ongoing basis.
This supports the continuing access described in the Terms of Use.
There is no predefined expiration date for access to a participant's stored character history.
Participants may return to the Application using their registered email address, subject to the applicable authentication process.
Ongoing access does not depend on participation in future journeys.
Participants may request deletion of their personal data in accordance with applicable data protection law.
Where deletion of account information or journey records is requested and legally required, this may affect or permanently remove the participant's ability to access the associated history.
Ongoing access does not override applicable data protection rights, legal retention requirements, or security obligations.

10. Third-Party Service Providers
We may use external providers to support the operation of the Service, including providers of:

website hosting and technical infrastructure;
application hosting, databases, and storage;
authentication and account access;
artificial intelligence and content generation;
email and communications;
payment processing;
website security and maintenance;
administration, accounting, and legal compliance.

These providers may process personal data to the extent necessary for their respective functions and subject to applicable legal requirements.
Where a provider acts as a data processor, appropriate contractual and organizational safeguards will be used as required by law.
Independent third-party services may process information under their own privacy policies.

11. External Platforms and Communications
The Website or Service may provide links to external platforms, including Telegram, WhatsApp, and payment services.
When participants use independent external platforms, those platforms may collect and process personal data according to their own privacy policies.
Communications conducted through external platforms may be subject to their technical and privacy arrangements.
Participants are encouraged to review the privacy information of any external service they use.

12. Cookies and Analytics
The Website and Application may use cookies or similar technologies necessary for authentication, session management, security, and essential functionality.
Hosting and infrastructure providers may also process technical information associated with visits and Application use.
Optional analytics, advertising, or tracking technologies will be assessed separately and, where required by applicable law, used only after obtaining the necessary consent.
If additional analytics, advertising pixels, or tracking technologies are introduced, this Privacy Policy and any relevant cookie notices or consent mechanisms will be updated accordingly.
Users may manage cookies through their browser settings, although disabling essential cookies may affect Service functionality.

13. Data Retention
Personal data is retained for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal requirements.
In particular:

Account information and journey history may be retained on an ongoing basis to provide continuing access to characters and previous journeys.
Technical and security logs may be retained for periods reasonably necessary for operational and security purposes.
General correspondence and personal support communications may be retained while an inquiry or support matter remains active and for a reasonable period afterward, where necessary and lawful.
Booking, payment, and financial records may be retained for periods required by applicable accounting, tax, contractual, or other legal obligations.
Information that is no longer necessary for a legitimate purpose will be deleted or anonymized where reasonably practicable and legally permitted.

Participants may request deletion of their personal data, subject to applicable legal exceptions and retention obligations.

14. International Data Transfers
Some technical, AI, communication, or payment service providers may process information outside Montenegro or outside a participant's country of residence.
Where international transfers are subject to applicable data protection requirements, appropriate legal grounds and safeguards will be used as required.
The specific processing locations and safeguards depend on the providers and services involved.
15. Your Privacy Rights
Depending on applicable law and the circumstances of processing, you may have the right to:

request access to your personal data;
request correction of inaccurate or incomplete information;
request deletion of personal data;
request restriction of processing;
object to certain processing activities;
withdraw consent where processing is based on consent;
request data portability where applicable;
lodge a complaint with a competent data protection authority.

To exercise your rights or ask a question about personal data processing, please contact gt4nko@gmail.com.
We may request reasonable information to verify your identity before responding to certain requests.

16. Data Security
We take reasonable technical and organizational measures to protect personal data against unauthorized access, accidental loss, misuse, alteration, or disclosure.
These measures may include access controls, authentication mechanisms, technical security safeguards, and restrictions on administrative access.
Access to participant information is limited to authorized persons and service providers according to their operational responsibilities.
However, no internet transmission, communication platform, or electronic storage system can be guaranteed to be completely secure.

17. Children's Privacy
Taverna Level Up is intended exclusively for adults aged 18 or older.
The Service is not designed for participation by children or minors.
We do not knowingly solicit personal data from individuals under the age of 18 for participation in the Service.
If we become aware that an individual under 18 has registered or provided personal information for participation without an appropriate lawful basis, we will take reasonable steps to address the situation, including deletion where required.

18. Changes to This Privacy Policy
This Privacy Policy may be updated to reflect changes in Website or Application functionality, data processing practices, service providers, or applicable legal requirements.
The latest version will be published on the Website with an updated revision date.
Where required by law, participants will be informed of material changes or asked to provide consent for new processing activities.

19. Contact
For questions, requests, or concerns regarding personal data and this Privacy Policy, please contact:
Tatiana Istomina
DOO Pika Group, Montenegro
Email: gt4nko@gmail.com