Privacy Policy
“Gra w Kółko Krzyżyk” app · last updated: 9 October 2026
1. Controller
Sebastian Przybylski — UnitedAI
Cartagineses 7, 03186 Torrevieja, España
Tax ID / VAT: Y6573839Q
email: office@unitedai.app
2. In short
- No sign-up with email or password. We never ask for your name, email, phone number, age or location.
- No ads, no analytics, no tracking; we do not sell or share data with advertisers.
- Games against the computer run on your phone — nothing from them is sent to our server.
- You can delete your account and all related data in the app: Profile → Delete account.
3. What we process (online play only)
| Data | Purpose |
|---|---|
| Random device identifier — the app creates a random secret kept in the phone’s secure storage; the server stores only its SHA-256 hash | recognising your account without a password |
| Internal account number and creation date | running your account |
| Nickname you choose | shown to other players, nickname search, invitations |
| Time of last activity | showing others whether you are “online” (active within 10 minutes) |
| Game data: opponent, number of rounds (1, 3, 5 or 10), the “just for fun” stake from a fixed list, the drawn symbols, moves on the board, preset reactions (e.g. “Nice move”), round and game results | gameplay |
| Statistics: games played, won, lost and drawn, rounds won/lost/drawn, win streaks, record against each rival | profile and rivals list |
| Push notification token (Apple) and notification language — only if you allow notifications | “Your move”, invitations, new round, game over |
| Your blocks and reports about other players (who, whom, reason from a list: nickname / behaviour / other) | safety, manual review of reports |
| IP address — processed in real time by the server (rate limits against abuse) and kept in short-lived technical web server logs | security and operation of the service |
There is no free-text chat — only preset reactions — so we store no text messages.
4. Purchases
The full version is sold exclusively by Apple (App Store). We never receive your payment details or Apple ID.
5. Legal basis (GDPR)
Art. 6(1)(b) GDPR — providing the online game you request; Art. 6(1)(f) — our legitimate interest in security, abuse prevention and handling reports. Push notifications are sent only with your iOS permission, which you can withdraw at any time in the phone’s Settings.
6. Recipients and storage location
- Server hosted by Hetzner Online GmbH (European Union), acting only on our instructions.
- Apple (Apple Push Notification service) — only the device token and the notification text (rival’s nickname, round number and event type).
- Other players see your nickname, “online” status, number of wins and the course of your shared games.
We do not share data with anyone else unless required by law.
7. Retention
We keep data while you have an account. When you delete the account we immediately erase your nickname, device identifier, push token, statistics, blocks and reports you made or that concern you. In finished games your opponent will see “Deleted player” instead of you; ongoing games end as resigned. Database backups rotate — deleted data disappears from them within 30 days at the latest.
Note: the account is tied to the app installation. If you remove the app without deleting the account you may lose access to it — email us and we will delete it manually.
8. Your rights
You have the right to access, rectify (e.g. change your nickname in the app), erase, restrict, port and object to processing. Write to office@unitedai.app. You may also lodge a complaint with a supervisory authority — in Poland the President of the Personal Data Protection Office (UODO), or the authority in your country.
9. Children
The game collects no data identifying a person. A nickname can be any pseudonym — please do not use your real name. Offensive nicknames are blocked and every player can be blocked and reported.
10. Changes
We will announce material changes in the app. The current version is always available at this address.