§ 01Who we are
Epic Fury (shown inside the app as “War Command”; bundle id com.mbar1s.strategygame) is developed and operated by Mustafa Barış İmdat, an independent developer (“we”, “us”). We are the data controller for the personal data described here. You can reach us at urerpg@gmail.com.
This policy covers the Epic Fury mobile app for iOS and Android and this website. It does not cover Apple’s or Google’s own app stores, which have their own privacy terms.
§ 02The short version
- There is no account to create. Your install gets an anonymous id; that is your identity.
- What you write in the game is sent to our servers and to AI model providers to generate the next turn. That is how the game works.
- We use Firebase Analytics and Crashlytics to see how the app performs. On iOS we ask before using the advertising identifier for that.
- Purchases go through Apple, Google and RevenueCat. We never see your card.
- We do not sell your data and no data broker receives any of it.
- You can delete everything from inside the app: Settings → Delete all data.
§ 03What we collect
| Category | What, specifically | Linked to you? |
|---|---|---|
| Identifiers | An anonymous install id issued when the app first runs (used as your bearer token); a RevenueCat app user id; an Expo push token if you enable notifications; the Apple advertising identifier (IDFA) only if you allow tracking when asked, or the Android advertising id. | Yes, to the install |
| User content | Operations you forge (briefs, doctrines, factions, staff), the orders you give and the game state that results, photos you attach to command-staff members, voice recordings you make for narration, and pictures you hand to the style distiller. | Yes, to the install |
| Purchases | Subscription state, credit-pack purchases and credit balance, product ids, and store transaction ids as reported by Apple, Google and RevenueCat. | Yes, to the install |
| Usage data | Which screens are opened, which features are used, turn counts, session length, rough device model and OS version, app version, coarse region derived from IP. | Pseudonymous |
| Diagnostics | Crash reports and performance traces, including device state at the time of a crash. | Pseudonymous |
| Preferences | Reading and rendering preferences (theme, narration voice, art style, text size), consent choices, and notification settings. Most of this stays on the device; the parts needed to render a turn travel with the request. | Yes, to the install |
| Support | Anything you send us by email, including the diagnostics you choose to paste. | Yes |
We do not collect your name, email address (unless you write to us), precise location, contacts, or health data. The app does not read your clipboard, calendar or messages.
§ 04Why we use it and on what basis
| Purpose | Data used | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Running the game: generating turns, art, narration; saving your operations | Install id, user content, preferences | Performance of a contract (the Terms) |
| Selling and honouring subscriptions and credits; preventing fraud and abuse of the credit system | Install id, purchases | Contract; legitimate interest in preventing abuse |
| Understanding how the app is used and fixing crashes | Usage data, diagnostics | Legitimate interest; consent where local law requires it |
| Measuring installs and campaigns using the advertising identifier | IDFA / Android advertising id | Consent (App Tracking Transparency on iOS) |
| Sending notifications you turned on | Push token | Consent |
| Answering support requests | What you send us | Legitimate interest; contract |
| Complying with law, enforcing the Terms, defending claims | Whatever is relevant | Legal obligation; legitimate interest |
§ 05Who processes it for us
We use the following services. Each receives only what it needs for its job and is bound by its own terms and data-processing agreement.
| Service | Job | Data |
|---|---|---|
| Google Cloud (Cloud Run, Firestore, Cloud Storage) | Hosting our backend and storing your operations, images and audio | Install id, user content, purchases, preferences |
| Firebase Analytics (Google Analytics for Firebase) and Firebase Crashlytics | Usage measurement and crash reporting | Usage data, diagnostics, advertising id when permitted |
| Google Gemini API | Writing narrative turns; generating some images | Your orders and operation state; image prompts |
| OpenAI API | Generating some images | Image prompts derived from your operation |
| fal.ai | Image and media generation | Prompts and any reference images you provide |
| Fish Audio | Text-to-speech narration and voice cloning | Turn text to be read aloud; voice recordings you make for cloning |
| RevenueCat | Subscription and purchase management | App user id, purchase receipts |
| Apple App Store / Google Play | Payment processing, receipts, refunds | Handled under Apple’s and Google’s own privacy policies |
| Expo (EAS) | Push notification delivery and app updates | Push token, app version |
| Vercel | Hosting this website | Standard server logs (IP, user agent) |
We may replace a provider with an equivalent one. If a change materially alters what happens to your data, we will update this policy.
§ 06Generated content and model providers
Every turn, scene, portrait and line of dialogue in Epic Fury is generated on request by a third-party AI model. To do that, the text of your orders, the operation’s current state and the relevant preferences are sent from our servers to the provider listed above. Providers process this to answer the request. Under the API terms we use, Google, OpenAI, fal.ai and Fish Audio do not use API inputs to train their models, but may retain them for a limited period for abuse monitoring under their own policies.
Do not put into an operation anything you would not want a machine to read: real people’s private details, passwords, financial information, or anything else confidential. Treat what you type as if it will be processed by a computer you do not control, because it will be.
Generated output is fiction. Nothing the game writes is a record of anything real, and we do not use it to draw conclusions about you.
§ 07Voice recordings and photos
Microphone
The app asks for microphone access only when you choose to record a narrator voice or dictate a brief. Voice enrolment recordings are sent to Fish Audio to build a voice model that reads your turns back to you, and are stored with your install so the voice keeps working. You may only enrol your own voice, or a voice you have explicit permission to use. Delete a voice from Settings, or delete all data to remove every recording and the model built from it.
Photos and camera
The app asks for photo-library or camera access only when you choose a portrait for a command-staff member. The chosen image is uploaded and stored with that operation. Pictures you hand to the style distiller are read for their look to derive an art style and are not stored after that.
§ 08The War Room (public content)
Nothing you make is public unless you publish it. If you choose to publish an operation to the War Room, its brief, cover, factions and any name you attach to it become visible to other players and may be copied, played and shared by them. Publishing is a deliberate action with its own confirmation. You can unpublish from the app; copies other players have already started are theirs to finish. Do not publish content containing personal data of others.
§ 09Purchases
Subscriptions and credit packs are sold through the App Store and Google Play. Apple or Google processes the payment and holds your billing details; we receive a receipt and an anonymised transaction id via RevenueCat so we can grant what you bought and restore it on a new device. Refunds are handled by the store you bought from. We never see or store card numbers.
§ 10Analytics, crash reports and tracking
We use Firebase Analytics to learn which parts of the game are used and where people get stuck, and Crashlytics to find crashes. Both are pseudonymous. On iOS, the app shows the system App Tracking Transparency prompt before using the advertising identifier; if you decline, analytics still runs but without that identifier and without ad-attribution signals. On Android, you can reset or delete your advertising id in system settings. We do not show ads in the app and we do not share data with ad networks for advertising.
This website may use Vercel’s privacy-friendly analytics, which set no cookies and store no personal identifiers.
§ 11Notifications
Notifications are off by default. If you turn on operation reminders, supply-line alerts, War Room activity or offers, we store a push token for your device and send only the categories you enabled. Turn any of them off in Settings or in your system settings and the token is no longer used for that category.
§ 12How long we keep it
- Operations, staff photos, generated art and audio: for as long as your install exists, or until you delete them or delete all data.
- Voice models: until you delete the voice or delete all data.
- Purchase records: for the life of the subscription and thereafter as required for accounting and dispute resolution (typically up to 10 years under applicable tax law).
- Analytics and crash data: retained by Firebase for up to 14 months for user-level data; aggregated data may be kept longer.
- Support emails: up to 3 years after the last message.
- Server logs: up to 90 days.
- Backups: purged data may persist in encrypted backups for up to 30 days before being overwritten.
§ 13Deleting your data
Open Settings → Delete all data. This asks you to confirm twice, then sends a purge request to our servers and wipes the device. The server purge removes your operations, images, audio, voice models, preferences and install identity. Purchase receipts held by Apple, Google and RevenueCat are retained by them under their own policies; your entitlements will still restore if you reinstall and use “Restore purchases”. If the purge cannot reach our servers, the device is wiped anyway and the server purge completes the next time the app connects, or you can email us and we will do it by hand.
You can also email urerpg@gmail.com with the install id from Settings → Support & legal → Copy diagnostics, and we will delete everything tied to it within 30 days.
§ 14Your rights
Depending on where you live (including the EU/EEA, UK, Switzerland, Türkiye under KVKK, Brazil under LGPD, and US states such as California under CCPA/CPRA), you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to its processing, receive a portable copy, withdraw consent at any time, and not be discriminated against for exercising these rights. Because we identify you only by an install id, requests must include that id so we can find your data. We do not sell or share personal information for cross-context behavioural advertising as those terms are defined in the CCPA, and we honour Global Privacy Control signals on this website.
To exercise any right, email us. We will respond within 30 days (or the shorter period your local law requires). If you are unhappy with our response you may complain to your local data protection authority; in the EU that is the authority of the country where you live.
§ 15International transfers
Our servers and most of our providers are in the United States and the European Union. If you use the app from elsewhere, your data is transferred to those regions. Where the GDPR applies, transfers rely on the European Commission’s adequacy decisions (including the EU–US Data Privacy Framework where a provider is certified) or Standard Contractual Clauses.
§ 16Security
All traffic between the app, this website and our servers is encrypted in transit (TLS). Data at rest is encrypted by our cloud providers. Your install token is stored in the device’s secure storage. Access to production data is limited to the developer and protected by multi-factor authentication. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as the law requires, which for the app means an in-app notice, since we do not hold your email address.
§ 17Children
Epic Fury depicts armed conflict and is not directed at children. It is rated for older teens and adults on both stores. We do not knowingly collect personal data from anyone under 13 (or the higher age of digital consent where you live). If you believe a child has used the app and provided data, email us and we will delete it.
§ 18Changes to this policy
When we change this policy we will update the effective date at the top and, for material changes, show a notice in the app before the change takes effect. Continued use after the effective date means you accept the updated policy. Earlier versions are available on request.
§ 19Contact
Mustafa Barış İmdat
urerpg@gmail.com
See also the Terms of use.