Privacy Policy

The short version

This summary is here to be read. The sections below are the binding detail.

• There is nothing to sign up for. We never ask for your name, your email or your date of birth. Your device makes up a random Account ID, and that is who you are to us. The Game does sign itself in to our server anonymously, in the background, so that nobody else can post as you.
• Your champion name goes on a public leaderboard next to your score, if you post one, along with your Account IDand what your champion was last seen wearing. Everyone can see it. Don’t put personal information in a champion name.
• Champion names are screened by an AI model run by another company before they can reach a board.
• We measure how the game is played and bought — runs started, runs ended, shop visits, purchases — to balance and improve it.
• The game shows no ads. We do measure which of our ads brought players in. iOS asks your permission first, and you can say no.
• Your progress is built to survive deleting the Game — it is mirrored into your device keychain and your own iCloud so a reinstall gets your levels, gems and purchases back, which also means deleting the Game does not erase it and the same Account ID comes back with it. Section 2 explains how to have it removed.
• You can ask us to delete your data. Email hello@aiapps.games with your Account ID.

1. Who we are

AI Apps Yazılım Hizmetleri ve Reklam Faaliyetleri Anonim Şirketi (“AI Apps & Games”, “we”, “us”), a company registered in Türkiye, is the data controller for the personal data described here. This policy covers the mobile game Killing Blow (the “Game”). It does not cover our other apps, or any third-party service you reach from the Game.

Contact us about privacy at hello@aiapps.games.

2. Identity, storage, and what deleting the Game does

Your Account ID

The Game has no sign-up form, no password and no login screen. The first time you play, your device generates a random identifier — your Account ID — and stores it. It is not derived from your name, your email, your phone number or your Apple Account, and it tells us nothing about who you are.

The Game also signs itself in anonymously. In the background, without asking you for anything, it creates an anonymous account on our serverand holds the resulting access token on your device. Its only purpose is to tie each entry to the account that made it, so that nobody can post under somebody else’s Account ID. That anonymous account carries no credentials, no email and no name — it is a second random identifier, and we treat it as personal data on the same footing as your Account ID.

We use it to keep one player’s leaderboard entries and analytics together. Because it is persistent and tied to you, we treat it as personal data and give it the protections described here.

You can see and copy your Account ID at Settings → Account ID in the Game. You will need it to make a data request — it is the only way we can find your records.

Where your progress is kept

Your runs, levels, gems, unlocks, purchases and champion names are stored on your device. We do not hold a copy of your save on our servers, and the Game plays with no connection at all.

But the Game deliberately keeps that progress in three places, not one: its own files, the iOS keychain, and iCloud key-value storage under your own Apple Account, so that levels, gems and paid unlocks survive deleting and reinstalling the Game, or moving to a new phone. Your Account ID and the anonymous session token are part of that mirrored snapshot.

So deleting the Game does not delete your data, and reinstalling restores the same Account ID. The iCloud copy sits in your own iCloud account, syncs to your other devices signed in to the same Apple Account, and is not something we can see or read — it is storage between you and Apple.

To have it removed, email hello@aiapps.games with your Account ID: we will delete what we hold on our side (section 10) and tell you what to clear on yours.

3. What we collect

The categories below are everything the Game collects. We do not collect your name, email address (unless you put it in a support message), postal address, phone number, date of birth, precise location, contacts, photos other than ones you deliberately attach to a support message, health data, or payment card details.

a. Data you give us

• Champion name — the name you type for your character. Published on leaderboards if you post a score.
• Support messages — if you use Settings → Contact us: what you write, your Account ID, and diagnostic details about your device and app version. If you choose to attach them, a screenshot or image and a voice note. The Game asks for photo library and microphone permission only at the moment you attach something, and never touches either otherwise. Anything you volunteer in the text — including your email address — we also receive.

b. Data the Game generates as you play

• Identifiers — your Account ID; the anonymous server account the Game creates for you (section 2); device identifiers provided by iOS (the vendor identifier, and the advertising identifier only if you allow tracking, see section 6).
• Gameplay and progress — the champion you played and the name you gave it, run outcomes, the act and floor you reached, ascension level, score, victories, time played, what killed you, the seed and blessing of the run, your deck, gear and gold at the end of it, revives used, and per-battle detail (enemies killed, damage dealt, turns taken, health left).
• Product interaction — a deliberately small set of events, recorded at run and transaction level rather than per action. They currently are: app opened, onboarding step, run started, run ended, run abandoned, oath chosen, shop viewed, revive purchased, revive declined, purchase, and the unlock purchases — champion, card, all cards, oath and skin.
• Purchase history — which in-app products you bought (gem packs, unlocks, and the auto-renewing battle pass membership, including renewals, cancellations and any trial), and whether a purchase succeeded, was cancelled or failed. Apple processes the payment; we see the outcome, never your card.
• Device and diagnostics — device model, operating system version, app version, language and region, plus crash reports, performance data and error logs.

c. Reminders, which collect nothing

The Game can remind you about your daily gems and a run you left unfinished. If you agree to the iOS notification prompt, those reminders are scheduled on your device by your device from what it already knows. There is no push service, no device token, and nothing about your notifications reaches us or anyone else. Turn them off in iOS Settings → Notifications at any time.

4. Why we use it, and our legal basis

For players in the EEA, the UK and Türkiye, the table below states the legal basis we rely on under the GDPR and, in Türkiye, the KVKK.

Where we rely on legitimate interests, we have weighed them against your rights and concluded they do not override them — largely because the data is tied to a random ID rather than to your identity. You can object at any time (section 10).

We do not use your data to make decisions about you with legal or similarly significant effects, and we do not build advertising profiles about you. The one automated decision the Game makes is whether a champion name is allowed on a public board (section 5).

5. Leaderboards and champion name screening

What becomes public

When you play with a connection, the Game posts your results to our boards. The following is then readable by anyone — not just displayed in the Game, but readable from our database by anyone who asks it:

• your champion name, the champion you played and the gender you gave it;
• your score, kills, ascension level, victories and the result;
• per-battle detail — the act, floor and encounter, what you killed, damage dealt, turns taken and health left;
• your champion’s profile: the gear it was last seen carrying, and the title, backdrop and skin it is wearing. Any player can open another player’s champion from a board and look at this;
• the timestamps of all of it;
• and your Account ID, which is carried on every row as the key that ties them together.

Your Account ID is public, not private. It is a random identifier that says nothing about who you are, and it is the key the boards are built on — but it is not a secret, and you should not treat it as a password. It is also what we ask for to find your records (section 10).

Do not use a champion name that identifies you, or that you would not want published.

What is not public. The detailed end-of-run report we use for balancing cannot be read back out of the database by anyone. Support messages, purchase records and analytics are not public either.

A posted entry is permanent by design.Our leaderboards are insert-only: an entry cannot be edited or deleted from inside the Game, by you or anyone else. This is deliberate — it is what stops one player overwriting another’s score in a game with no logins. It does not defeat your right to erasure: we can, and on a valid request will, delete your rows on the server (section 10).

How name screening works

Public boards attract abuse, and a simple word blocklist cannot tell a dark-fantasy name from a slur. So when you enter a champion name, the name alone — no Account ID, no score, nothing else about you — is sent to our server and passed to a third-party AI model to judge whether it belongs on a public board.

• The model is run by Google and reached through OpenRouter, a service that routes requests to model providers.
• We do not store the names we screen. The screening endpoint reads the name, returns a verdict, and does not keep it. OpenRouter and Google handle the name under their own terms and retention rules, which we do not control.
• The verdict is cached on your device so the same name is not re-checked.
• Screening needs a network connection, and play continues without one.
• If a name is refused, you are asked to pick another. That is the whole consequence — nothing is recorded against you, and you can try as many names as you like. If you think a name was refused wrongly, email us and a human will look.

6. Tracking, advertising and the iOS prompt

The Game contains no advertising. We show you no ads and we sell no ad space. But we do advertise the Game elsewhere, and we measure whether those ads work — otherwise we cannot tell where to spend, and the Game is free.

For that measurement, iOS shows you the App Tracking Transparency prompt. Your answer is entirely up to you and the Game plays identically either way:

• If you allow it, the Game may access your device advertising identifier (IDFA) and share it, with install and purchase events, with our attribution and analytics providers, so that a purchase can be linked to the ad or keyword that brought you in.
• If you decline, the advertising identifier is not accessed and no cross-app tracking takes place. We still receive privacy-preserving install reports from Apple’s SKAdNetwork, which are aggregated by Apple and do not identify you or your device.

You can change your mind at any time in iOS Settings → Privacy & Security → Tracking, which withdraws or grants that consent for the Game. Turning off Allow Apps to Request to Track declines it for every app.

The Game contacts the tracking domains app-measurement.com (Google) and api.mixpanel.com (Mixpanel), as declared in its App Store privacy manifest.

7. Who we share it with

We do not sell your personal data, and we do not share it with anyone to advertise their own products to you. We use the following providers to run the Game. Each gets only what it needs and is bound to use it only for us.

We may also disclose personal data:

• where we are legally required to, or to respond to a valid request from a public authority — we check that requests are lawful and proportionate before complying;
• to establish, exercise or defend legal claims, or to enforce our Terms of Use;
• to protect the rights, safety or property of players, the public or us — for example when investigating cheating or abuse;
• to a buyer or successor if we are involved in a merger, acquisition, financing or sale of assets, subject to this policy continuing to apply.

8. International transfers

We are based in Türkiye and our providers operate internationally, including in the United States. Using the Game therefore involves transferring your data outside your own country, including outside the EEA, the UK and Türkiye, to countries whose data protection laws may differ from your own.

Where we transfer data out of the EEA or the UK, we rely on appropriate safeguards — normally the European Commission’s Standard Contractual Clauses (with the UK Addendum where relevant), or an adequacy decision where one applies. For transfers from Türkiye we rely on the mechanisms permitted by the KVKK, including your explicit consent or an approved undertaking where required. Write to hello@aiapps.games for details of the safeguards that apply to a particular transfer.

9. How long we keep it

10. Your rights, and how to use them

Depending on where you live, you have some or all of these rights: access a copy of your data; rectify it if it is wrong; erase it; restrict or object to how we use it, including profiling and direct marketing; portability; withdraw consent at any time without affecting what we did before; and complain to a regulator.

How to make a request

Email hello@aiapps.games and include your Account ID (Settings → Account ID, tap to copy). We will respond within the time the law allows — one month under the GDPR, thirty days under the KVKK — and we may extend that where a request is complex, telling you why.

Verifying a request. Because the Game has no login, an Account ID is the only key we hold, and it is not by itself proof that an account is yours. We can therefore only act on a request made from a device that still holds that ID, or where we can otherwise reasonably satisfy ourselves it is yours; we may ask you something only the account holder would know before we delete anything. If you never had the ID and the Game is gone from all your devices, we have no way to find your records or connect them to you — which is also the reason they are not readily identifiable to us in the first place.

Deleting your data

• On your device: deleting the Game is not a deletion of your data. It removes the Game’s own files, but your levels, gems, unlocks, purchases and Account ID are mirrored in the iOS keychain and your own iCloud so that a reinstall restores them (section 2). To have that copy removed as well, write to us and we will tell you how — it is the one part we cannot reach for you.
• On our servers: email us with your Account ID and we will delete your leaderboard entries and analytics records, and instruct our providers to do the same. We will keep what the law requires us to keep — transaction records for tax, for example — and may keep a minimal record that you asked, so that the request is honoured.

Complaints

Please raise it with us first — hello@aiapps.games — and we will try to fix it. You can also complain to your supervisory authority: in Türkiye, the Personal Data Protection Authority (KVKK, kvkk.gov.tr); in the EEA, the data protection authority where you live, work, or where the issue arose; in the UK, the Information Commissioner’s Office (ICO).

11. If you live in California or another US state

Over the past twelve months we have collected the categories of personal information described in section 3: identifiers (Account ID, the anonymous server account, device and advertising identifiers), commercial information (in-app purchases and membership renewals), internet or other electronic network activity (gameplay and product interaction events, diagnostics), and audio, electronic or visual information (only if you attach a voice note or image to a support message). We collect it from you and from your device, for the purposes in section 4, and disclose it to the providers in section 7.

We do not sell personal information for money, and we do not knowingly sell or share the personal information of anyone under 16. Sharing your advertising identifier with our attribution providers so we can measure our own campaigns may count as “sharing” for cross-context behavioural advertising under California law. Declining the iOS tracking prompt opts you out of that entirely — that is the opt-out mechanism, and it is offered to every player up front. You can also change it later in iOS Settings → Privacy & Security → Tracking.

You have the right to know, delete, and correct your personal information, to opt out of sharing, and not to be discriminated against for exercising those rights — the Game plays exactly the same either way. Exercise them via hello@aiapps.games with your Account ID. An authorised agent may act for you with written proof.

12. Children

The Game is a dark fantasy game with stylised violence. It is not directed to children, and we do not knowingly collect personal data from anyone under 13 — or under the higher digital age of consent that applies where you live, up to 16 in parts of the EEA.

We do not ask for age or identity, so we cannot detect a child by their data alone. If you are a parent or guardian and believe your child has provided us with personal data, email hello@aiapps.games with the Account ID (Settings → Account ID on their device) and we will delete it promptly.

13. Security

We take reasonable technical and organisational measures to protect your data: encryption in transit, authentication that ties each entry to the account that made it, access rules that stop one player altering another’s records, restricted access to production systems, and reputable providers with their own security programmes.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Leaderboard entries are reported by players’ own devices and are not independently verified, so we treat the boards as a cosmetic feature and nothing of value depends on them — see section 9 of our Terms of Use.

If a breach occurs that is likely to result in a risk to your rights, we will notify the relevant authority and affected players as the law requires.

14. Changes to this policy

We will update this policy when the Game or the law changes. The current version always lives at this address, dated at the top. If a change is material — a new purpose, a new category of data, a new recipient — we will take reasonable steps to tell you before it takes effect, and will ask for your consent where the law requires it.

15. Contact

AI Apps Yazılım Hizmetleri ve Reklam Faaliyetleri Anonim Şirketi
Privacy enquiries: hello@aiapps.games
In-game: Settings → Contact us

Please include your Account ID with any request about your data.