We show no advertising, we run no third-party trackers, we do not profile you, and we do not sell or share your data with data brokers. The apps contain no advertising SDKs.
1. Playing on your own device
Local play against the AI opponents needs no account and no connection. Your nickname and avatar, settings, the templates and variants you create, your progression, achievements, statistics and saved games are stored on your device.
The AI opponents run on Apple's on-device model. Your conversations with them, and any prompt text you write into a custom AI player, stay on your device and are not sent to us. If you turn on the optional Private Cloud Compute model for stronger AI, that request is processed by Apple's Private Cloud Compute under Apple's privacy guarantees; we never receive it.
If you use voice input, speech is processed by Apple's on-device speech recognition. We do not record, store or transmit audio, and the microphone is used only while you are actively using a voice feature.
If you choose background music, the app plays it through Apple Music with MusicKit. We store only a reference to your chosen item — its identifier and title — so it can be played again. We never receive your music library, your listening history or your Apple Music account details.
2. Syncing across your own devices
When you are signed in to iCloud, your profile, preferences, templates, variants, progression and saved games can sync between your devices through Apple's CloudKit, in a private container tied to your Apple Account. That data goes to Apple, not to us — we cannot read your private container. Disabling iCloud for the app in system settings stops it.
3. Game Center
Game Center is used for online play, leaderboards and achievements. When you use those features Apple provides us with your Game Center player identifier and display name, so we can match you with opponents and record results. Game Center is Apple's service and is governed by Apple's privacy policy. Local play never requires it.
4. What our server stores
Our server is the authoritative record for Game Coins and for competitive results. Nothing reaches it until you sign in to Game Center; a player who never does has no account with us at all. For those purposes it holds:
- an account record: an internal identifier and your Game Center player identifier — one opaque value shared across our games. We never ask for and never store a name, an email address or a password, and the apps contain no way to enter one. The account also carries a username and email field, because our database requires them, and both hold an opaque tag computed from the Game Center identifier; the address uses the reserved
.invalidsuffix, so it can never reach a mailbox; - your Game Coins balance and transaction history — entries, rewards, refunds and adjustments — which must stay accurate and auditable. Each entry also records the IP address and device fingerprint of the request that made it, because the ledger holds value and has to be defensible;
- purchase validation records: the App Store transaction identifier, the product, price and currency, and the coins granted, used to validate the purchase with Apple, prevent duplicate grants and handle refunds;
- competitive results, Elo ratings for each variant you play online and the titles you earn there, together with the Game Center display name you appear under in a match, which is shown on public rosters and leaderboards. Game Center gives us the name it shows others — for someone on your friends list that can be a real name rather than an alias;
- a device fingerprint, computed from your IP address and your app’s user agent, and a timestamped security record of each sign-in and of every operation that moves coins — carrying the IP address, the user agent and whether it succeeded — used to protect the coin ledger against fraud;
- an encrypted push-notification token and your notification preferences when you enable notifications, together with a record of the notifications we sent you. A device registered for notifications leaves a record even if it never signs in;
- your daily-challenge results — one per game per day: the outcome, the score and your own time. This is the one solo, offline game whose result is published, so that the day’s figures can be compared;
- whether your download came from an Apple Ads campaign. Once per install, shortly after the first launch, the app asks Apple’s own AdServices framework for an attribution token and hands it to our server, which asks Apple whether the download was attributed to one of our campaigns. We keep one yes-or-no answer per account, the campaign it names and the app concerned, nothing else; the token is never stored. This is Apple’s first-party attribution: it involves no advertising identifier, no tracking across other companies’ apps or websites, and no tracking permission is asked because none is needed. We use the answer for one purpose — to know whether players who found a game through an advertisement go on to play online — and never to profile or target you.
How long. IP addresses and user agents in security and transaction records are erased after 90 days. Ordinary security events are deleted after a year; administrative actions are kept, because an audit trail that expires is not one. Per-request diagnostic detail is kept 7 days.
What the server does not hold: the nickname and avatar you choose, your templates and variants, your local statistics and progression, your saved games, and every word you exchange with an AI opponent. Those stay on your device, and sync only through your own private iCloud if you have it switched on — which we cannot read.
None of it is used for advertising or profiling. A client can never mint or alter server-confirmed Game Coins by itself.
5. Usage counts and usage events — anonymous, and about the game rather than about you
To know which parts of our games are worth keeping and which need work, each app sends us two kinds of information about how it is used. Neither says who you are.
The daily tally. Once a day each app sends one anonymous tally. There is no switch for this, because there is nothing here to consent to: what arrives cannot be connected to you, to your account, or to your device — not by us, and not by anyone who obtained the data.
What that tally contains, and nothing else: how many games were started, finished and left unfinished; which variant was played, at which difficulty, and whether the player won; roughly how long games lasted, as a bracket such as “2–8 minutes”, never a time; whether the guided first game was finished, left early, or broke; how many of the last 28 days the app was opened, as a bracket; how many times each screen or feature was opened, counted by name; and which app version it came from, with the kinds of error it saw.
What the tally never contains: your name, your account, your device, an advertising identifier, an IP address, any text you wrote, anything an AI opponent said to you, your scores, your Game Coins, or any time of day. The date is the finest measure of time in it, and every number is added into a per-game total shared with everyone else who played that day. We keep the totals; we do not keep — and never receive — the rows they were made from.
Usage events. If you have signed in to Game Center (section 4), the app also sends a short record of what happens as you use it, a few events at a time: a game started or finished, a feature used, an error seen, how quickly an AI opponent made its move. An event can carry facts about the game it describes — which game and variant, a score, a placing, a rating or a number of Game Coins — but never whose they are.
Our server uses your sign-in only to check that the events come from a real player of our games, and then keeps them without it. What it stores for each event is what happened, in which game, and the date: no account, no device identifier, no IP address, no identifier of you or of anyone else (any player, transaction or tournament identifier the app attaches is removed on arrival), and no time finer than the date. The stored events expire after seven days; a copy we take to study them holds exactly the same anonymous records. The app does not send its own user or device identifiers with them.
Usage events are on unless you turn them off: Settings → Usage counts → “Share usage events”. Turn it off and the app sends none of them.
What usage events never contain: your name, your account, your device, an advertising identifier, an IP address, any text you wrote, anything you or an AI opponent said, your saved games, or any time of day.
Because the tally identifies nobody, it is not personal data, and none of the rights in section 10 apply to it; section 10 also explains how the usage events are handled. Neither the tally nor the events is sold, used for advertising, or used to profile anyone. We use them only to decide what to build and fix next.
6. Purchases
Purchases are processed by Apple. We never see your payment details. From Apple we receive the transaction identifier, the product, the price paid and the currency, and use them to validate the purchase and credit your Game Coins. Game Coins are an in-game reward, used to enter competitive play and won back from it. They can also be bought through the App Store. They are not money: they have no cash value, cannot be exchanged for money and cannot be withdrawn.
7. This website
The site sets no advertising cookies, embeds no ad networks and installs no third-party analytics tag. Ordinary web infrastructure processes standard connection data such as IP address and browser user agent for delivery, rate limiting and security logs. The community page requests a read-only public feed showing aggregate counts and open public tournament facts — never player names, internal identifiers, balances, IP addresses or private events. Clicking an App Store link takes you to Apple, whose terms then apply.
8. Children
Most of our games are suitable for any age, and children are welcome to play them. Three card games that deal hands with stakes — Blackjack, Texas Hold’em and Poker all’italiana — carry a higher age rating on the App Store; check the rating on the listing.
That said, none of our apps is directed at children, and we do not knowingly collect personal data from a child. We do not build profiles, we show no advertising and we run no third-party trackers, in any of our apps. If you believe a child has provided us with personal data, write to privacy@aiorion.it and we will delete it.
9. Retention
We keep account data for as long as the account exists. Some transaction, security and audit records are kept longer where we must — to protect ledger integrity, investigate abuse, or meet accounting and legal obligations. A deletion request removes or anonymises eligible account data while preserving records that must remain for those purposes.
10. Your rights
Under the GDPR you may request access to your data, correction, deletion, a portable copy, or restriction of processing, and you may object to processing. Write to privacy@aiorion.it; we reply within the legal time limit, normally one month, and may need to verify your identity before acting on an account request. You may also complain to your data-protection authority — in Italy, the Garante per la protezione dei dati personali.
The personal data those rights cover is what section 4 lists: your Apple sign-in identifier, your Game Coins ledger, your online results and ratings, your device fingerprint and sign-in time, a push token if you enabled notifications, and the IP address in a security record. The anonymous daily tally in section 5 is not personal data, so no lawful basis is needed for it and none of the rights above apply to it. The usage events in section 5 reach us with your sign-in, which we use only to check that they come from a real player and then discard; we rely on our legitimate interest in improving the games, and you can object at any time by turning “Share usage events” off, which stops them at the source. Because what we keep cannot be traced back to you, we cannot find your events to show, correct or delete them. Where processing is needed to provide something you asked for, such as an online match or a coin purchase, we rely on performance of our agreement with you. The security and anti-fraud records rest on our legitimate interest in protecting the service and the people using it.
11. Sharing
We do not sell your data and we do not share it for advertising. We share only with Apple, as an inherent part of the App Store, StoreKit, iCloud, Game Center and MusicKit services described above; with providers who host our server on our instructions; and where the law requires it.
12. Security and changes
Traffic between the apps and our server is encrypted in transit with TLS, using a publicly trusted certificate that is renewed automatically. Player accounts have no password at all — sign-in is Game Center only, so there is no credential of yours for us to lose. Value-changing operations are authenticated, validated on the server and written to an audit trail. No system is risk-free; suspected security issues should be reported to security@aiorion.it.
If we change this policy we will update the date at the top and, for a significant change, say so in the app.