Privacy Policy

The short version

This summary is here to be read. The sections below are the binding detail.

• There is no account. We never ask for your name, your email or your date of birth. Your device makes up a random Account ID, and that is who you are to us.
• Your champion name goes on a public leaderboard next to your score, if you post one. Everyone can see it. Don’t put personal information in it.
• Champion names are screened by an AI model run by another company before they can reach a board.
• We measure how the game is played and bought — runs started, runs ended, shop visits, purchases — to balance and improve it.
• The game shows no ads. We do measure which of our ads brought players in. iOS asks your permission first, and you can say no.
• Your saves and gems live on your device, not on our servers. Deleting the game deletes them, permanently.
• You can ask us to delete your data. Email hello@aiapps.games with your Account ID.

1. Who we are

AI Apps Yazılım Hizmetleri ve Reklam Faaliyetleri Anonim Şirketi (“AI Apps & Games”, “we”, “us”), a company registered in Türkiye, is the data controller for the personal data described here. This policy covers the mobile game Killing Blow (the “Game”). It does not cover our other apps, or any third-party service you reach from the Game.

Contact us about privacy at hello@aiapps.games.

2. There is no account, and what that means

The Game has no sign-up and no login. The first time you play, your device generates a random identifier — your Account ID — and stores it locally. It is not derived from your name, your email, your phone number or your Apple Account, and it tells us nothing about who you are.

We use it to keep one player’s leaderboard entries and analytics together. Because it is persistent and tied to you, we treat it as personal data and give it the protections described here.

You can see and copy your Account ID at Settings → Account ID in the Game. You will need it to make a data request — it is the only way we can find your records. The ID lives in the Game’s local storage: deleting the Game destroys it, and a fresh install generates a new one that we cannot link to the old.

3. What we collect

We collect the following, and nothing else. We do not collect your name, email address (unless you put it in a support message), postal address, phone number, date of birth, precise location, contacts, photos other than ones you deliberately attach to a support message, health data, or payment card details.

a. Data you give us

• Champion name — the name you type for your character. Published on leaderboards if you post a score.
• Support messages — if you use Settings → Contact us: what you write, your Account ID, and diagnostic details about your device and app version. If you choose to attach them, a screenshot or image and a voice note. The Game asks for photo library and microphone permission only at the moment you attach something, and never touches either otherwise. Anything you volunteer in the text — including your email address — we also receive.

b. Data the Game generates as you play

• Identifiers — your Account ID; device identifiers provided by iOS (the vendor identifier, and the advertising identifier only if you allow tracking, see section 6).
• Gameplay and progress — the class you played, run outcomes, floors climbed, ascension level, score, victories, time played, what killed you, your deck and gear at the end of a run, gem balance.
• Product interaction — a deliberately small set of events, recorded at run and transaction level rather than per action: app opened, run started, run ended, run abandoned, shop viewed, revive purchased, revive declined, purchase, class unlock purchased, card unlock purchased.
• Purchase history — which in-app products you bought and whether a purchase succeeded, was cancelled or failed. Apple processes the payment; we see the outcome, never your card.
• Device and diagnostics — device model, operating system version, app version, language and region, plus crash reports, performance data and error logs.

4. Why we use it, and our legal basis

For players in the EEA, the UK and Türkiye, the table below states the legal basis we rely on under the GDPR and, in Türkiye, the KVKK.

Where we rely on legitimate interests, we have weighed them against your rights and concluded they do not override them — largely because the data is tied to a random ID rather than to your identity. You can object at any time (section 10).

We do not use your data to make decisions about you with legal or similarly significant effects, and we do not build advertising profiles about you. The one automated decision the Game makes is whether a champion name is allowed on a public board (section 5).

5. Leaderboards and champion name screening

What becomes public

If you post a score or a victory, these become publicly readable by anyone: your champion name, your score or ascension level, the class you played, the result, and the time you posted. Your Account ID accompanies the entry in our database. Do not use a champion name that identifies you, or that you would not want published.

A posted entry is permanent by design.Our leaderboards are insert-only: an entry cannot be edited or deleted from inside the Game, by you or anyone else. This is deliberate — it is what stops one player overwriting another’s score in a game with no logins. It does not defeat your right to erasure: we can, and on a valid request will, delete your rows on the server (section 10).

How name screening works

Public boards attract abuse, and the Game’s subject matter makes a simple word blocklist useless — “Skullcrusher” is the point, a slur is not. So when you enter a champion name, the name alone — no Account ID, no score, nothing else about you — is sent to our server and passed to a third-party AI model to judge whether it belongs on a public board.

• The model is Google Gemini 2.5 Flash Lite, reached through OpenRouter, a service that routes requests to model providers.
• We do not store the names we screen. Our screening endpoint keeps no log and no database of them; it reads the name, returns a verdict, and forgets it. OpenRouter and Google handle the name under their own terms and retention rules, which we do not control.
• The verdict is cached on your device so the same name is not re-checked.
• Screening needs a network connection. If you are offline, your name is not screened and play continues.
• If a name is refused, you are asked to pick another. That is the whole consequence — nothing is recorded against you, and you can try as many names as you like. If you think a name was refused wrongly, email us and a human will look.

6. Tracking, advertising and the iOS prompt

The Game contains no advertising. We show you no ads and we sell no ad space. But we do advertise the Game elsewhere, and we measure whether those ads work — otherwise we cannot tell where to spend, and the Game is free.

For that measurement, iOS shows you the App Tracking Transparency prompt. Your answer is entirely up to you and the Game plays identically either way:

• If you allow it, the Game may access your device advertising identifier (IDFA) and share it, with install and purchase events, with our attribution and analytics providers, so that a purchase can be linked to the ad or keyword that brought you in.
• If you decline, the advertising identifier is not accessed and no cross-app tracking takes place. We still receive privacy-preserving install reports from Apple’s SKAdNetwork, which are aggregated by Apple and do not identify you or your device.

You can change your mind at any time in iOS Settings → Privacy & Security → Tracking, which withdraws or grants that consent for the Game. Turning off Allow Apps to Request to Track declines it for every app.

The Game contacts the tracking domains app-measurement.com (Google) and api.mixpanel.com (Mixpanel), as declared in its App Store privacy manifest.

7. Who we share it with

We do not sell your personal data, and we do not share it with anyone to advertise their own products to you. We use the following providers to run the Game. Each gets only what it needs and is bound to use it only for us.

We may also disclose personal data:

• where we are legally required to, or to respond to a valid request from a public authority — we check that requests are lawful and proportionate before complying;
• to establish, exercise or defend legal claims, or to enforce our Terms of Use;
• to protect the rights, safety or property of players, the public or us — for example when investigating cheating or abuse;
• to a buyer or successor if we are involved in a merger, acquisition, financing or sale of assets, subject to this policy continuing to apply.

8. International transfers

We are based in Türkiye and our providers operate internationally, including in the United States. Using the Game therefore involves transferring your data outside your own country, including outside the EEA, the UK and Türkiye, to countries whose data protection laws may differ from your own.

Where we transfer data out of the EEA or the UK, we rely on appropriate safeguards — normally the European Commission’s Standard Contractual Clauses (with the UK Addendum where relevant), or an adequacy decision where one applies. For transfers from Türkiye we rely on the mechanisms permitted by the KVKK, including your explicit consent or an approved undertaking where required. Write to hello@aiapps.games for details of the safeguards that apply to a particular transfer.

9. How long we keep it

10. Your rights, and how to use them

Depending on where you live, you have some or all of these rights: access a copy of your data; rectify it if it is wrong; erase it; restrict or object to how we use it, including profiling and direct marketing; portability; withdraw consent at any time without affecting what we did before; and complain to a regulator.

How to make a request

Email hello@aiapps.games and include your Account ID (Settings → Account ID, tap to copy). We will respond within the time the law allows — one month under the GDPR, thirty days under the KVKK — and we may extend that where a request is complex, telling you why.

An honest limitation. Because the Game has no login, an Account ID is the only key we hold, and anyone who has it could quote it. We can only act on a request made from a device that still holds that ID or where we can otherwise reasonably satisfy ourselves it is yours. If you have already deleted the Game and did not keep your ID, we have no way to find your records or connect them to you — which is also the reason they are not readily identifiable to us in the first place. Copy your Account ID before you delete the Game if you may want to make a request later.

Deleting your data

• On your device: delete the Game. Your saves, gems, unlocks, cached verdicts and Account ID go with it. This cannot be undone, and it does not remove leaderboard entries you already posted.
• On our servers: email us with your Account ID and we will delete your leaderboard entries and analytics records, and instruct our providers to do the same. We will keep what the law requires us to keep — transaction records for tax, for example — and may keep a minimal record that you asked, so that the request is honoured.

Complaints

Please raise it with us first — hello@aiapps.games — and we will try to fix it. You can also complain to your supervisory authority: in Türkiye, the Personal Data Protection Authority (KVKK, kvkk.gov.tr); in the EEA, the data protection authority where you live, work, or where the issue arose; in the UK, the Information Commissioner’s Office (ICO).

11. If you live in California or another US state

Over the past twelve months we have collected the categories of personal information described in section 3: identifiers (Account ID, device and advertising identifiers), commercial information (in-app purchases), internet or other electronic network activity (gameplay and product interaction events, diagnostics), and audio, electronic or visual information (only if you attach a voice note or image to a support message). We collect it from you and from your device, for the purposes in section 4, and disclose it to the providers in section 7.

We do not sell personal information for money, and we do not knowingly sell or share the personal information of anyone under 16. Sharing your advertising identifier with our attribution providers so we can measure our own campaigns may count as “sharing” for cross-context behavioural advertising under California law. Declining the iOS tracking prompt opts you out of that entirely — that is the opt-out mechanism, and it is offered to every player up front. You can also change it later in iOS Settings → Privacy & Security → Tracking.

You have the right to know, delete, and correct your personal information, to opt out of sharing, and not to be discriminated against for exercising those rights — the Game plays exactly the same either way. Exercise them via hello@aiapps.games with your Account ID. An authorised agent may act for you with written proof.

12. Children

The Game is a dark fantasy game with stylised violence. It is not directed to children, and we do not knowingly collect personal data from anyone under 13 — or under the higher digital age of consent that applies where you live, up to 16 in parts of the EEA.

We do not ask for age or identity, so we cannot detect a child by their data alone. If you are a parent or guardian and believe your child has provided us with personal data, email hello@aiapps.games with the Account ID (Settings → Account ID on their device) and we will delete it promptly.

13. Security

We take reasonable technical and organisational measures to protect your data: transport encryption to our servers and providers, database access rules that make leaderboard entries impossible to overwrite or delete from a client, restricted access to production systems, and reputable providers with their own security programmes.

Two things we would rather tell you than have you assume. First, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Second, leaderboard entries are submitted by players’ own devices and unverified, so a determined person can post a false score or name; we treat the boards as cosmetic for exactly that reason, and nothing of value hangs on them.

If a breach occurs that is likely to result in a risk to your rights, we will notify the relevant authority and affected players as the law requires.

14. Changes to this policy

We will update this policy when the Game or the law changes. The current version always lives at this address, dated at the top. If a change is material — a new purpose, a new category of data, a new recipient — we will take reasonable steps to tell you before it takes effect, and will ask for your consent where the law requires it.

15. Contact

AI Apps Yazılım Hizmetleri ve Reklam Faaliyetleri Anonim Şirketi
Privacy enquiries: hello@aiapps.games
In-game: Settings → Contact us

Please include your Account ID with any request about your data.