Effective 15 August 2026
Privacy Policy
This policy explains how Kiki Apps handles information in Tic Tac Toe Easy Go and through its support page. The game is free, contains no advertising, and can be played without creating an account.
In short
- No advertising or cross-app tracking.
- No sale of personal data.
- An account is optional.
- You can permanently delete your account and associated data inside the app.
Who controls the data
Kiki Apps is the data controller for the information described here. Questions and privacy requests can be sent through the support form.
Information we process
- Account information: name, email address, an internal user identifier, authentication records, and password-reset status. Passwords are handled by Supabase Auth and are not visible to Kiki Apps in readable form.
- Optional profile photo: the image you choose and the storage path linked to your profile.
- Basic app activity: the number of app openings and completed games associated with an account. We do not collect board positions, contacts, precise location, advertising identifiers, or browsing history.
- Support information: name, reply email, selected topic, message, approximate network/security data processed by Cloudflare, and correspondence needed to answer the request.
- Local device settings: language, theme, and local game state may be stored on the device and are not sent to Kiki Apps unless specifically mentioned above.
Why we process it
- To create and secure an optional account, sign you in, and restore access.
- To save and display an optional profile photo.
- To operate, maintain, troubleshoot, and understand basic use of the app.
- To respond to support, privacy, and account-deletion requests and prevent abusive form submissions.
Legal bases
We process account and profile data to provide the service you request (performance of a contract). We process limited security, reliability, and aggregate usage information for our legitimate interests in keeping the app safe and functional. Support-form information is processed to respond to your request; where consent is the appropriate basis, you may withdraw it by contacting us.
Service providers and international transfers
We use processors only to operate the service:
- Supabase provides authentication, database, and profile-photo storage.
- Brevo delivers account confirmation and password-reset emails.
- Cloudflare hosts these pages, protects the support form with Turnstile, and processes normal network/security logs.
- Apple distributes the app and processes App Store information under its own policies.
These providers may process data in countries outside your own. We rely on their contractual and legal safeguards for applicable international transfers. We do not give personal data to advertising networks or data brokers.
Retention and deletion
- Account, profile, and linked activity data are kept while the account exists.
- A profile photo is kept until it is replaced or the account is deleted.
- Support messages are normally retained for up to 12 months after the request is resolved, unless longer retention is necessary for security or a legal obligation.
- Operational backups and security logs may remain for a limited provider-controlled backup cycle before automatic deletion.
To delete an account, open Account → Delete account in the app and confirm. This deletes the Supabase account, profile, linked usage counters, and profile photos. Local app preferences may remain on the device until the app is removed or its data is cleared.
Your choices and rights
Depending on where you live, you may request access, correction, deletion, restriction, objection, or a portable copy of your personal data. You may also withdraw consent where processing relies on consent. Use the support form; we may need to verify that the account belongs to you.
You may complain to your local data-protection authority. In the UK this is the Information Commissioner's Office (ICO); in the EEA you can contact the authority where you live or work.
Children
The app is a general-audience board game and does not knowingly collect personal data from children below the age at which they may consent to online services in their country. The game does not require an account. A parent or guardian can contact us to request deletion.
Changes
We may update this policy when the app or its providers change. The effective date at the top will be updated, and material changes will be communicated where required.