Privacy Policy
Last updated 6 August 2026
This policy explains what personal data the Rulecraft iOS app collects, why we use it, who helps us process it, and how you can exercise your rights over it.
- Rulecraft works without an account. Your first launch creates an anonymous account, and you can use the app without ever giving us a name or an email address.
- We store the questions you ask and the answers we return for 90 days, then delete them.
- We use no product analytics SDK. Crash reports are the only diagnostics we collect.
- Rewarded ads are optional and you choose to watch them. In the EEA and the UK we ask for consent before the first one, and iOS asks separately before any cross-app tracking.
- We do not sell personal data.
Who we are
Rulecraft is operated by Antonio David García Alhambra, NIF 21801680A, Av. País Valencià 4, 12590 Almenara, Castellón, Spain. We are the data controller for the processing described here. For privacy questions, support, and rights requests, write to support@rulecraft.app.
No data protection officer has been appointed at this stage.
Data we collect
Your account
Every account starts anonymous: Firebase Authentication issues an account identifier for your installation, and that identifier is all that ties your questions and your game collection together. An anonymous account has no name and no email address.
If you sign in with Apple to make the account permanent, Apple releases your name and email address to us on the first authorisation, and Firebase Authentication stores them on the account record. If you chose Hide My Email, the address we hold is Apple's private relay address and we never see your real one. Rulecraft keeps no separate profile document, so these two fields are the whole of what we know about you as a person.
What you do in the app
- Rule questions and answers. The question you write, the game and expansions it applies to, the rules and response languages, the answer we return, the short title generated from your question, and the processing status and timestamps.
- Your game collection. The BoardGameGeek identifier of each game you add, plus a small copy of its public display information (name, thumbnail, year) so the list can be shown and searched without a round trip, and the times you added it.
- Your free allowance. Counters for the weekly free-question allowance: the limit, any bonus, how many you have used, and the period boundaries.
- Your subscription state. Whether the Rulecraft Pro entitlement is active, mirrored from RevenueCat.
Keeping the service working
- Rate-limit counters, keyed by a one-way hash of your account identifier rather than the identifier itself. They expire on their own within about a day.
- App attestation. Firebase App Check and Apple's App Attest let the backend confirm a request came from a genuine, unmodified copy of Rulecraft before it answers. This attests the app, not you.
- Server logs recording opaque identifiers, status, duration, which retrieval path was used, cache use, model, token counts, and error codes. They deliberately exclude the text of your questions, the generated titles, source URLs, and document contents.
Diagnostics
Firebase Crashlytics collects crash and non-fatal error reports: the stack trace, device model, operating system version, app version, and a Crashlytics installation identifier. Rulecraft does not include Firebase Analytics or any other product-analytics SDK, so we do not have screen-by-screen usage data about you.
Advertising
Rulecraft shows rewarded ads through Google AdMob. They are never forced: you choose to watch one to unlock a game's background music, and subscribers do not see them at all.
- Where local law requires it — the EEA, the UK, and other covered regions — Google's User Messaging Platform presents a consent form before the first ad request. You can reopen it at any time from Settings → Ad privacy to change your choices.
- iOS shows Apple's App Tracking Transparency prompt separately. If you decline, ads are still available but not personalised, and your advertising identifier is not shared.
- Apple's SKAdNetwork may report install attribution to advertisers in aggregate. It is designed not to identify you.
- Google's own handling of ad data is described in its privacy and terms for partners.
Why we use it, and on what legal basis
For users in the EEA, the UK, and Switzerland, each purpose below rests on the legal basis named beside it.
| Purpose | Legal basis |
|---|---|
| Answering your rule questions, keeping your game collection, and showing your question history | Performance of a contract |
| Creating and maintaining your account, and linking or merging it when you sign in with Apple | Performance of a contract |
| Metering the weekly free allowance and honouring a Rulecraft Pro subscription | Performance of a contract |
| Preventing abuse, enforcing rate limits, attesting the app, and protecting the service | Legitimate interests |
| Diagnosing crashes and fixing defects | Legitimate interests |
| Showing personalised ads and any related tracking | Consent, which you can withdraw at any time |
| Meeting accounting, tax, and other legal duties | Legal obligation |
Where we rely on legitimate interests, we have weighed them against your rights and use the least identifying option that still works — which is why rate limiting stores a hash rather than your account identifier, and why logs omit your questions.
Who processes it with us
-
Google, as Firebase. Authentication, Firestore, Cloud
Functions, Cloud Storage, App Check, and Crashlytics. Your account
data, questions, answers, and collection are stored in Firestore and
processed by functions running in
europe-west1(Belgium). - Google, as the Gemini API. Producing an answer sends the game configuration and your question text to Gemini, along with the rulebook passages or verified web sources the answer must be built from. Your account identifier, name, and email are not sent.
- Google, as AdMob and the User Messaging Platform, for rewarded ads and the consent form described above.
- The YouTube Data API, for background-music playlists. A request carries a game identifier and, for subscribers, one value describing the mood of the playlist. It carries no user information, and the playlist for a game is identical for everyone who asks.
- BoardGameGeek, for the game catalogue. When a search or a game is not already cached on our side, the search term or the game identifier is sent to BoardGameGeek's API to fetch public catalogue data. No account information accompanies it.
- RevenueCat, for subscription management. It receives an app user identifier and the purchase data Apple returns.
- Apple, for Sign in with Apple, App Store purchases, App Attest, and App Tracking Transparency.
- Authorities, courts, and professional advisers, where we must disclose information to comply with the law or to establish or defend legal claims.
We do not sell personal data, and we do not share it with data brokers.
What never leaves your device
When you translate an answer, the translation runs on your iPhone through Apple's on-device translation framework. The text is not sent to us or to any translation service. Cached screens and images the app keeps between launches also stay on the device, and are removed when you delete the app.
International transfers
Your account data, questions, answers, and collection are stored and processed in the European Union. Some of the providers listed above are established outside the EEA or may process data outside it. Where that happens we rely on the transfer safeguards those providers offer, such as the European Commission's standard contractual clauses, an adequacy decision, or an equivalent mechanism.
How long we keep it
| Data | Retention |
|---|---|
| Questions, answers, and their titles | 90 days from the request, then deleted automatically |
| Your game collection | Until you remove the game, or delete your account |
| Account record, name, and email | Until you delete your account |
| Free-allowance counters | For the life of the account |
| Rate-limit counters (hashed) | About a day, then they expire on their own |
| Crash reports | According to Firebase Crashlytics' own retention period |
| Shared caches, rulebooks, and the game catalogue | Not attributed to any account, so not tied to yours |
Deleting your account
You can delete your account from inside the app, in Settings. Deletion is immediate and irreversible: everything stored under your account — questions, answers, collection, allowance, subscription mirror — is erased, and the authentication record is deleted with it, taking your name and email address along.
If you signed in with Apple, the app revokes that credential on your device just before the deletion call. That step has to happen on the device because revoking requires a key held only by Apple and in the Firebase console.
Two things survive deletion, and neither identifies you:
- The hashed rate-limit counters, which expire within about a day. Clearing them would let anyone reset every limit by deleting and recreating an account.
- Shared caches, ingested rulebooks, and the game catalogue, which were never attributed to an account in the first place.
Provider backups, security records, and infrastructure logs may retain traces for limited periods according to those providers' own cycles.
Your rights
Under the GDPR and equivalent laws you may:
- Ask what personal data we hold about you, and get a copy.
- Have inaccurate or incomplete data corrected.
- Have your data erased — the in-app deletion flow does this immediately, and you can also ask us.
- Restrict or object to processing based on legitimate interests.
- Receive data you gave us in a portable form.
- Withdraw consent where processing rests on it, including your ad consent, without affecting what was done before you withdrew it.
- Complain to a supervisory authority. In Spain that is the Agencia Española de Protección de Datos.
Write to support@rulecraft.app to exercise any of these. We may need to verify that the request comes from the account holder before acting on it.
Children
Rulecraft is not intended for children under 13. If you are 13 or older but below the age at which your country lets you consent to online services on your own, use Rulecraft only with permission from a parent or guardian.
If you believe a child under 13 has given us personal data, write to support@rulecraft.app and we will review and delete it.
Changes to this policy
We will update this page when Rulecraft, our providers, or the law change what we do. The new version is posted here with a new date at the top. If a change materially affects your rights, we will make it visible in the app rather than relying on you to revisit this page.
Contact
Antonio David García Alhambra, NIF 21801680A
Av. País Valencià 4, 12590 Almenara, Castellón, Spain
support@rulecraft.app