Kenopsy — Privacy Policy

Effective date: 22 October 2026 App: Kenopsy for iPhone (App Store) and Android (Google Play), app id ai.eigenthink.kenopsy. This policy also covers the iPhone app when it is installed on iPad. Website: kenopsy.com (see section 12)

1. Who we are

Kenopsy is made by EigenThink AI LLC (“we”, “us”).

• Email: privacy@kenopsy.com

We are the controller of the small amount of data described below: we decide what is collected and why.

2. The short version

• You do not make an account. We never ask for your name, email, phone number or location.
• Before you can play, the app asks your age. Under 13, it stops. It keeps your age group on your phone and never sends your date of birth.
• If you have not bought Unlock them all, you can start a hunt by watching short video ads from Google AdMob, offered to players aged 13 and over, only when you tap Watch an ad. Every ad is non-personalised: chosen from the game itself and your general area, not from what you do in other apps or websites. For players aged 13 to 17 we also tell Google they are under the age of consent and ask only for ads suitable for teenagers (section 3.7).
• On iPhone, the app never shows Apple’s tracking prompt, so it gets no advertising id. On Android, Google’s ad software can read Android’s advertising id (section 3.7). We do not track you across other companies’ apps or websites, and we do not sell or share your personal information (section 9.2).
• Your photos and films stay on your phone. They leave it only if you share them yourself.
• The camera picture is used on the phone, while you play, and is never sent to us.
• Players aged 18 and over are asked whether to share play stats, which go to Google Analytics for Firebase. Nothing is collected for stats unless you say yes, and you can switch it off at any time. Players under 18 are never asked, and the analytics software never starts for them.
• When you tap Start on the safety notice, the app sends us a short receipt of what you accepted, which we keep as our record (section 3.5).

3. What the app collects

3.1 Play stats (only if you say yes)

When stats are on, the app sends short events to Google Analytics for Firebase, which Google LLC runs for us. Each event the app sends carries only creature ids (for example maiden), counts, durations, yes/no values and reasons picked from a fixed list. No event contains anything you typed, a photo, a sound recording, a place name or anything from the camera.

The app also tells Firebase whether it is a test, beta or store build. Firebase records the app version itself.

What Firebase adds by itself. When stats are on, Firebase also:

• makes a random id for this install of the app (its “app instance id”), so it can count players instead of launches. It is not your store account, your name or an advertising id;
• keeps Google’s own session identifier for each visit (part of Google Analytics);
• records a few events of its own: the first time the app is opened, when a session starts, how long the app is in use, and when the app is updated;
• on Android only, records a purchase when one is made: which product, its price and the currency (Google provides no way to turn this off). On iPhone it does not record purchases;
• sends the device model, the system version, the app version and your phone’s language;
• works out a general region (such as your country or city) from your IP address. Google states that Google Analytics does not log or store IP addresses.

What it does not collect. Analytics never collects the advertising id (IDFA on iPhone, the advertising id on Android) or Apple’s id for apps from the same developer (IDFV). It does not report screens by itself, or purchases on iPhone. Google signals and ad personalisation are off, and the stats are not linked to AdMob, Google Ads or Google Play. Play stats never include data collected by Google’s ad software: kenopsy_ad_answer records only what the app saw happen.

When it is sent. Firebase collects events on the phone and sends them in batches, which can happen while you play.

We cannot tell from these events who you are, but because they carry an app instance id, the law in some places still treats them as personal data, so we handle them as personal data.

3.2 Crash reports

iPhone: if you have chosen in iOS to share analytics with app developers (Settings ▸ Privacy & Security ▸ Analytics & Improvements ▸ Share With App Developers), Apple gives the app crash and performance reports. The app keeps them on the phone and, if play stats are on, sends only a count of them. Apple separately makes crash data available to us under the same setting.

Android: the app does not send crash reports to us. If you have allowed it in Android, Google may collect crash data for apps on your phone and show us summaries in Google Play Console, under Google’s own policy.

3.3 Purchases

Purchases are handled by Apple on iPhone and by Google Play on Android. We never see your payment details, your name or your account’s email address. The app asks the store whether your account owns “Unlock them all” and keeps a small note on the phone so the game stays open without a connection. When you start a hunt from the purchase card, the app notes the time on the phone so a hunt you started is still yours if the app closes; after 24 hours the note no longer counts and is deleted the next time the app opens. It also counts, on the phone, the ads you have watched toward a hunt and today, so the card can show where you are. None of these notes leaves the phone.

3.4 Your age and the safety notice

Before you can play, the app asks your age. On iPhone, on iOS 26 and later it first asks Apple, through Apple’s Declared Age Range sheet, which shares only an age range (under 13, 13 to 17, or 18 and over), and only if you or your parent allow it; otherwise it asks your date of birth on a date wheel. On Android it asks your date of birth on a date wheel. The app uses the answer once to work out your age group and keeps that group on the phone. If you used the date wheel and are under 18, it also keeps the day the group next changes (your 13th or 18th birthday), so your date of birth is not stored but could be worked out from that day. The age group decides, on the phone, whether you can play and which ads are offered (section 3.7). It is never sent to Google, but the ad requests for a player aged 13 to 17 carry Google’s “under the age of consent” setting.

When you accept the safety notice, the app keeps a record of it on your phone: the notice’s version, the date and time, the app version, your age group and where it came from, whether a player under 18 ticked the parent or guardian box, whether you opened the Terms of Use and the Privacy Policy, your flashing setting, your phone’s language and region setting (for example en_GB) and the receipt code. We do not receive this record; we receive the shorter receipt in 3.5. On iPhone, the record is backed up with your phone like other app data. On Android, the age group, the record, your purchase note and the play-stats id and events are left out of Android’s backups and phone-to-phone transfers, so they never move to another phone. Deleting the app deletes the record, but not the receipt we hold.

3.5 The acceptance receipt

When you tap Start, the app sends a receipt to our server. The notice tells you this before you tap. The receipt holds:

• a random receipt code, made by the app;
• the safety notice’s version and a fingerprint (hash) of its text, the Terms of Use version and date, and the Privacy Policy’s date and a fingerprint of its text;
• the time you accepted and the time the app sent it, by your phone’s clock, and the time our server received it;
• the app’s version, build and edition, and whether it is the iPhone or the Android app;
• your age group (13 to 17, or 18 and over, never your date of birth) and where it came from, and, if Apple answered, whether Apple says it was declared by you or a parent;
• whether a player under 18 ticked the parent or guardian box, and whether you opened the Terms of Use and the Privacy Policy;
• your phone’s language and region setting;
• on iPhone only: Apple’s id for the Apple Account that downloaded the app (Apple calls it appTransactionID) and whether the app came from the App Store or TestFlight. The id belongs to the Apple Account that downloaded the app: if a teenager plays on a parent’s account, it is the parent’s. Apple may be able to link it to an Apple Account. On Android, the receipt carries no store or account id.

It does not hold your name, email, date of birth or play stats. Sending it shows your IP address, as any internet request does; our server uses it only for a moment to limit abuse and does not store it with the receipt. Cloudflare may keep short-lived request logs to deliver and protect the service. If you are offline, the receipt waits on your phone and is sent later; it never stops you playing. Settings ▸ Safety & legal shows your receipt code so you can quote it to us. Nothing is sent for a player who does not reach Start, and players under 13 never do. The receipt is never given to Google.

Why we keep it. It is our evidence of what was accepted, when, and in which version of the app, so that we can establish or defend legal claims, for example if someone later says the safety notice or the Terms of Use were never shown.

Where and for how long. Our receipt server runs on Cloudflare at receipts.kenopsy.com, and the receipts are stored in the EU. We keep each receipt for 7 years from the day we receive it; then it is deleted automatically, and backup copies clear within 30 days after that. If a legal claim about a receipt has been made or is expected, we keep that receipt until the claim is over.

3.6 Creature downloads

New creatures may arrive by download from Unity Cloud Content Delivery. The download contains only game art, sound and data. To send you the files, Unity’s servers see your IP address and normal request details, as any web server does. We do not send Unity anything about you. Downloads happen only after you accept the safety notice.

3.7 Ads (Google AdMob)

When an ad can appear. Only on the purchase card, before a hunt, and only after you tap Watch an ad. Never during a hunt, never when the app opens and never without that tap. For a player aged 18 or over, when a hunt takes three ads, the second and third may start by themselves after a 5-second countdown with a Stop button (Google calls these “rewarded interstitial” ads). If you have not bought Unlock them all, a hunt starts after you buy it or watch the ads the card asks for; if no ad can be shown, the hunt does not start (Terms of Use, section 8). Google’s ad software never starts before the age step, and it does not start until you first tap Watch an ad or open Settings ▸ About ▸ Ads. Once you have watched one ad toward a hunt that needs several, the app may load the next one in advance. No ad is offered:

• to anyone under 13 (the app stops at the age step) or whose age is not known;
• to a player aged 13 to 17 while Reduce flashing is on. A player aged 18 or over with Reduce flashing on is warned that ads can flash, and ads play only if they choose to watch anyway (that answer is kept for 24 hours);
• in public beta builds;
• once you have bought Unlock them all.

Non-personalised, for everyone. Every ad request asks Google for non-personalised ads and turns on Google’s restricted data processing. Google then chooses the ad from the game itself and a general area worked out from your IP address (such as your city), not from your behaviour in other apps or websites. We ask only for ads suitable for teenagers and older (Google’s “T” rating). For a player aged 13 to 17, each request also tells Google that the player is a teenager under the age of consent, so Google applies its rules for teens to the request, and Google’s consent software is told the same.

Advertising ids. On iPhone, the app never asks for permission to track you, so iOS gives no advertising id (IDFA) to the app or to Google. On Android, Google’s ad software can read Android’s advertising id, unless you have deleted it in your phone’s settings, and can use Android’s own ad features where your phone has them. On both, it may also use an id limited to this app or to apps from the same developer. Google uses these ids for the purposes in the table below, such as stopping the same ad playing again and again, counting ads and preventing fraud. Because we ask for non-personalised ads, they are not used to choose ads from what you do in other apps. If you tap an ad that leads to another app, the phone’s own system (Apple’s SKAdNetwork, or Android’s ad features) may tell the advertiser that an ad led to an install, without telling them who you are.

What Google’s ad software collects (from Google’s own privacy declarations for its software):

Consent in the European Economic Area, the UK and Switzerland. Where the law requires consent before an app stores or reads information on your phone for ads, Google’s consent form appears the first time you tap Watch an ad, never when the app opens. If you say no, Google may show a “limited” ad that uses no stored information, or no ad at all. Your answer is kept on your phone by Google’s software. Change it at any time in Settings ▸ About ▸ Ads ▸ Ad choices. If you say no and no ad can be shown, the hunt does not start; you can change your answer, or buy Unlock them all. Google’s consent software also uses your general location and your answer, only to know whether to show the form and to keep your choice. This form is only about ads; the play-stats question is separate.

Google’s role. Google decides for itself how it uses the data its software collects, under its own privacy policy (Google Privacy Policy; how Google uses information from apps that use its services). In the European Economic Area, the UK and Switzerland, Google acts as an independent controller for this data. Where restricted data processing applies, Google’s terms say it processes that data as our service provider.

What we receive. AdMob gives us only totals: how many ads were requested and shown, and what they earned, by day and by country. Nothing in it identifies you.

Report an ad. Settings ▸ About ▸ Ads ▸ Report an ad opens an email to us with a short prompt and the code Google gave the last ad shown (its “response id”), and nothing else, and copies our address and that code so you can paste them. We use it only to have Google block that ad.

Ads are other companies’ content. Tapping an ad opens the advertiser’s page or store page, and what happens there is governed by their privacy policy, not ours.

3.8 Google Play Services for AR (Android)

On Android, Kenopsy runs on Google Play Services for AR (ARCore), which is provided by Google and governed by the Google Privacy Policy. We receive nothing from it.

4. What the app never collects

• Your name, email, phone number, contacts or account details (there is no account)
• Your date of birth (only the age group is kept)
• Your precise location. The app never asks for it. When you watch an ad, Google estimates a general area from your IP address (section 3.7); we never receive it.
• The camera picture, your face or any face data
• Your photos and films, unless you share them yourself
• Microphone audio. The app never asks for microphone access. Films carry only the game’s own sound.
• Anything you type
• Your iPhone’s advertising id (IDFA) (section 3.7)

The app uses these permissions on the phone:

Photos are saved when you ask, or every time if you choose Always save photos (Settings ▸ Hunt settings ▸ Save photos). Films: when you choose to film a hunt (asked before the hunt, or set in Settings ▸ Hunt settings ▸ Filming), the film is saved to your phone at the end if the creature appeared, and deleted if it did not.

5. Who processes data for us

These companies handle data for us, on our instructions, under contracts that require them to protect it.

Apart from play stats, where Google acts for us, Apple and Google act as independent companies under their own privacy policies: Apple and Google Play sell the app and the purchase, Apple provides crash reports on iPhone, and Google provides ARCore on Android (3.8). For ads, Google decides for itself how it uses what its software collects in the European Economic Area, the UK and Switzerland; elsewhere its role depends on whether restricted data processing applies (3.7).

We do not sell personal information and do not share it with data brokers. The only advertising company the app works with is Google, for non-personalised ads.

Transfers. Acceptance receipts are stored in the EU. Play stats are stored by Google in the United States. Unity, Cloudflare and Google are based in the United States and may handle your IP address and request details there or wherever their servers are. Where the law requires it, transfers to our processors are protected by the EU-US Data Privacy Framework (and its UK extension) or by the European Commission’s Standard Contractual Clauses (with the UK addendum). You can ask us for more detail at privacy@kenopsy.com.

6. How long we keep it

7. Children and teenagers

Kenopsy is a horror game made for people aged 13 and over. It is made for a general audience and is not directed to children. We do not knowingly collect personal information from children under 13. The app asks every player’s age before they can play: under 13, it stops. Nothing is sent to us, and neither Google’s ad software nor its analytics software starts; as for every player, the app only asks Apple or Google Play whether the account owns the unlock.

Players aged 13 to 17 play with a parent or guardian’s permission (they tick a parent or guardian box). For them:

• Ads are non-personalised, like everyone’s, and each ad request also tells Google they are under the age of consent and asks only for ads suitable for teenagers. Google’s ad software receives what is listed in 3.7 when they tap Watch an ad. While Reduce flashing is on, they are offered no ads.
• Play stats are never asked for and stay off. Google Analytics for Firebase never starts for them.
• The acceptance receipt (3.5) is sent as for any player. It holds their age group, never a birth date, and whether they ticked the parent or guardian box. If they play on a parent’s Apple Account, it carries that account’s id.

If we learn that an acceptance receipt came from a child under 13, for example because a parent gives us its code from Settings ▸ Safety & legal, we delete it. If you believe a child under 13 has used the app, contact us and we will help.

8. Your choices

• Play stats: Settings ▸ About ▸ Share play stats ▸ Off. Collection stops and the app instance id on your phone is reset. Stats already sent are not deleted at once; Google deletes them after 2 months (section 6). You can also write to privacy@kenopsy.com.
• Ad choices: Settings ▸ About ▸ Ads ▸ Ad choices reopens Google’s consent form where the law requires one.
• No ads at all: ads appear only if you tap Watch an ad. Buying Unlock them all ends them.
• Report an ad: Settings ▸ About ▸ Ads ▸ Report an ad.
• Crash reports: controlled by your phone’s settings (3.2).
• Photos and films: Settings ▸ Hunt settings ▸ Save photos and Filming. On iPhone you can also remove the app’s Photos access in iOS Settings.
• Delete the app: removes everything the app stored on your phone. Restore purchases brings the purchase back.
• Do Not Track: we do not track you across other companies’ apps or websites, so a browser’s “Do Not Track” signal changes nothing on kenopsy.com or in the app.

9. Your rights

9.1 In the EU, the UK and similar places

If data protection law such as the GDPR or UK GDPR applies to you, you have the right to ask for access to, correction of or deletion of your personal data, to restrict its use, to object to it, and to receive a copy of data you gave us in a common format.

Our legal bases are:

• Play stats: your consent, which you can withdraw at any time by switching Share play stats off. Withdrawing does not affect stats sent before.
• Ads: where the law requires consent to store or read information on your phone, the consent you give in Google’s form, which you can withdraw in Ad choices. Asking Google for a non-personalised ad when you tap Watch an ad is based on our legitimate interest in paying for the game through ads you choose to watch. Google is responsible for its own legal basis as an independent controller.
• The acceptance receipt: our legitimate interest in keeping evidence of what was accepted, so that we can establish or defend legal claims (GDPR Article 6(1)(f)). You can object to it (Article 21), and we will consider your objection. If you ask us to delete it, we keep it but restrict its use to legal claims (Articles 17(3)(e) and 18). Quote your receipt code when you write.
• Downloads, the website and your emails: our legitimate interest in delivering what you asked for, keeping the service secure and answering you.

We do not make decisions based solely on automated processing that have legal or similarly significant effects on you, and we do not build profiles of you. The age step decides, on your phone, whether you can play and which ads are offered.

You must answer the age step and accept the safety notice to play, and the receipt is sent for everyone who taps Start. Play stats and ads are optional, though without the purchase a hunt needs an ad.

We never learn your name, so we usually cannot find “your” play stats. We can find your acceptance receipt from its code. We answer requests within one month.

9.2 In California and other US states

We do not sell your personal information, and we do not share it for cross-context behavioural advertising (ads chosen from what you do in other companies’ apps or websites): every ad is non-personalised and every ad request asks Google to use restricted data processing. If you would rather send Google nothing, do not tap Watch an ad and do not open Settings ▸ About ▸ Ads. We do not use or disclose sensitive personal information. You can ask what we hold about you, ask us to correct it or ask us to delete it by writing to privacy@kenopsy.com, and we will not treat you differently for asking. Nothing in our Terms of Use limits your right to make these requests.

9.3 How to complain

Please write to us first at privacy@kenopsy.com and we will try to put it right. You can also complain to the data protection authority where you live or work, or where you think the problem happened. In the UK, that is the Information Commissioner’s Office. In the EU, you can find your authority on the European Data Protection Board’s list.

10. Contact

EigenThink AI LLC, the maker of Kenopsy Email: privacy@kenopsy.com

11. Changes

If we change what the app collects, we will update this page and its date before the app version with the change is released. A change that adds new kinds of data will also be shown in the app.

12. This website

kenopsy.com is a plain website. It sets no cookies and stores nothing on your device, so there is no cookie banner. It has no accounts and no forms, and loads nothing from other companies except as described here.

• Hosting: Cloudflare serves the site. Like any web server, it sees your IP address and normal request details (the page asked for, your browser type) to deliver the page and protect the site from attacks.
• Visitor counts: the site runs no counting script today. If we turn on Cloudflare Web Analytics, it counts page visits without cookies and does not identify you or follow you across sites, and we will say so here.
• Email: if you write to us, we see your email address and message and use them only to answer you.
• app-ads.txt: the site publishes a small public file, kenopsy.com/app-ads.txt, that tells advertisers which ad seller is allowed to sell ads in the app (Google). It contains nothing about you.

Last updated: 22 October 2026