We show no advertising, we run no third-party trackers, we do not profile you, and we do not sell or share your data with data brokers. The apps contain no advertising SDKs.
1. Playing on your own device
Local play against the AI opponents needs no account and no connection. Your nickname and avatar, settings, the templates and variants you create, your progression, achievements, statistics and saved games are stored on your device.
The AI opponents run on Apple's on-device model. Your conversations with them, and any prompt text you write into a custom AI player, stay on your device and are not sent to us. If you turn on the optional Private Cloud Compute model for stronger AI, that request is processed by Apple's Private Cloud Compute under Apple's privacy guarantees; we never receive it.
If you use voice input, speech is processed by Apple's on-device speech recognition. We do not record, store or transmit audio, and the microphone is used only while you are actively using a voice feature.
If you choose background music, the app plays it through Apple Music with MusicKit. We store only a reference to your chosen item — its identifier and title — so it can be played again. We never receive your music library, your listening history or your Apple Music account details.
2. Syncing across your own devices
When you are signed in to iCloud, your profile, preferences, templates, variants, progression and saved games can sync between your devices through Apple's CloudKit, in a private container tied to your Apple Account. That data goes to Apple, not to us — we cannot read your private container. Disabling iCloud for the app in system settings stops it.
3. Game Center
Game Center is used for online play, leaderboards and achievements. When you use those features Apple provides us with your Game Center player identifier and display name, so we can match you with opponents and record results. Game Center is Apple's service and is governed by Apple's privacy policy. Local play never requires it.
4. What our server stores
Our server is the authoritative record for Game Coins and for competitive results. It is used only when you buy coins, play online, or sync your account. For those purposes it holds:
- an account record: an internal identifier, your username and email address where you provide one, an encrypted password where you set one, and your linked Apple Account identifier;
- your Game Coins balance and transaction history — entry fees, prizes, refunds and adjustments — which must stay accurate and auditable;
- purchase validation records: the App Store transaction identifier, the product, price and currency, and the coins granted, used to validate the purchase with Apple, prevent duplicate grants and handle refunds;
- competitive results and per-game ELO ratings for the games you play online;
- a device fingerprint and login timestamps, used to detect fraud against the coin ledger;
- push-notification tokens when you enable notifications;
- security and diagnostic records such as IP address, user agent and security events, used to protect the service.
None of it is used for advertising or profiling. A client can never mint or alter server-confirmed Game Coins by itself.
5. Analytics — off unless you turn it on
Analytics are opt-in. With your consent we collect gameplay events, such as a game starting or finishing, carrying a game identifier, a random user identifier, a random device identifier and a timestamp. We use it only to see which features are used and to make the games better. It holds no contact details and no message content, and it is never sold. You can withdraw consent at any time in the app's settings, and collection stops.
6. Purchases
Purchases are processed by Apple. We never see your payment details. From Apple we receive the transaction identifier, the product, the price paid and the currency, and use them to validate the purchase and credit your Game Coins. Game Coins are a virtual in-game currency at a fixed rate of 10 GC = 1 EUR; they have no cash value, cannot be exchanged for money and cannot be withdrawn.
7. This website
The site sets no advertising cookies, embeds no ad networks and installs no third-party analytics tag. Ordinary web infrastructure processes standard connection data such as IP address and browser user agent for delivery, rate limiting and security logs. The community page requests a read-only public feed showing aggregate counts and open public tournament facts — never player names, internal identifiers, balances, IP addresses or private events. Clicking an App Store link takes you to Apple, whose terms then apply.
8. Children
These apps are not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, write to privacy@aiorion.it and we will delete it.
9. Retention
We keep account data for as long as the account exists. Some transaction, security and audit records are kept longer where we must — to protect ledger integrity, investigate abuse, or meet accounting and legal obligations. A deletion request removes or anonymises eligible account data while preserving records that must remain for those purposes.
10. Your rights
Under the GDPR you may request access to your data, correction, deletion, a portable copy, or restriction of processing, and you may object to processing. Write to privacy@aiorion.it; we reply within the legal time limit, normally one month, and may need to verify your identity before acting on an account request. You may also complain to your data-protection authority — in Italy, the Garante per la protezione dei dati personali.
Where we rely on your consent, for analytics, you can withdraw it at any time without affecting what was lawfully processed before. Where processing is needed to provide something you asked for, such as an online match or a coin purchase, we rely on performance of our agreement with you. The security and anti-fraud records rest on our legitimate interest in protecting the service and the people using it.
11. Sharing
We do not sell your data and we do not share it for advertising. We share only with Apple, as an inherent part of the App Store, StoreKit, iCloud, Game Center and MusicKit services described above; with providers who host our server on our instructions; and where the law requires it.
12. Security and changes
Traffic between the apps and our server is encrypted in transit with TLS, and the apps pin the server's certificate. Passwords, where set, are stored hashed. Value-changing operations are authenticated, validated on the server and written to an audit trail. No system is risk-free; suspected security issues should be reported to security@aiorion.it.
If we change this policy we will update the date at the top and, for a significant change, say so in the app.