Last Updated: August 10, 2026

Kingalis Privacy Policy

Introduction Kingalis ("We", "App") respects your privacy. This policy explains the minimum data we collect to provide our core gamified features. We do not use any third-party ad-tracking tools and strictly do not request or collect your real name or phone number.

1. Data We Collect and Store

To create an account and operate the App, we securely collect and store the following data on our servers (Google Firebase):

• Authentication and Security: Your email address, password (only if registered via standard email/password), authentication tokens (if logged in via Google), and IP address used during registration (strictly for account security and fraud prevention). When using Google Sign-In, we never receive or store your Google account password.

• Profile Data: A chosen Username and an uploaded Profile Picture. (Real names or phone numbers are never requested or stored).

• In-Game and Social Data: Your XP, level, King Coin balance, selected interests, completed quests, league/room status, streaks, follower/following lists, and blocked users list.

2. Public Visibility (League and Social System)

To provide a competitive and social experience; your chosen Username, Profile Picture, current Level/XP, VIP status (Crown), and follower count are visible to other users within the in-game League, leaderboards, and social interaction screens.

3. Device Permissions

The App requires the following permissions to function:

• Camera and Photo Gallery: Required to upload a profile picture and submit quest proofs.

• Push Notifications: Used to send you quest reminders, league updates, re-engagement alerts (e.g., if you have been inactive for a few days), and urgent or special announcements related to the App.

4. Automated Moderation and User Reports

To ensure a secure environment and prevent harmful content:

• Uploaded profile pictures are scanned in real-time using Google Cloud Vision API against inappropriate content. Usernames undergo automated checks for compliance with system rules and community guidelines.

• When a user reports another user or content for violating community guidelines, we collect the data submitted through our in-app reporting system.

5. Quest Proofs and Artificial Intelligence (AI)

Photos and texts you capture/upload to complete daily quests are NOT permanently saved or stored on our servers. This data is transmitted directly and temporarily to the Google Gemini API solely for real-time validation and evaluation. The data is destroyed immediately after AI evaluation and is never used to train external AI models.

6. App Performance and Analytics

To improve app stability and understand user engagement, we collect non-personally identifiable basic app usage data and crash reports via Google Analytics and Firebase Crashlytics. This helps us fix bugs and optimize the user experience.

7. Email Communication

Your email address is strictly used for account security (e.g., password resets), critical technical support, and legal notifications. We do not send marketing or promotional emails.

8. Financial Data

In-app purchases (integrated via RevenueCat) are handled entirely by Google Play or Apple App Store. No financial data or credit card information reaches our servers.

9. Data Retention and Permanent Deletion

• User-Initiated Deletion: Users can delete their accounts at any time through the app settings. When you initiate the "Delete Account" process or contact us at kingalisappsupport@gmail.com; your profile picture, social connections, and all in-game progress will be permanently deleted from our database within a maximum of 7 business days.

• Legally Required Data and Email: Due to account security, system audit logs, and legal retention obligations; your email address and technical processing logs will be securely retained for 1 year following the account deletion request in accordance with legal regulations, after which they are automatically and completely deleted.

• Inactive Accounts: To comply with data minimization principles, we reserve the right to automatically delete accounts and all associated data that remain completely inactive for a continuous period of 24 months.

10. Children's Privacy

Our App is not directed at children under the age of 13, and we do not knowingly collect personal data from them. If it is discovered that a child under 13 has provided personal data without verified parental consent, such information will be promptly and permanently deleted from our servers.

11. Third-Party Services and Data Sharing

To provide in-app services, your data is shared securely and in an encrypted format with trusted third-party service providers: Google Firebase (including Database and Google Sign-In), RevenueCat (Subscriptions), and Google Cloud/Gemini (AI and Moderation). Your data is never sold or shared for advertising, marketing, or commercial purposes.

12. Dispute Resolution and Governing Law

Any legal disputes arising from this privacy policy and the use of the App shall be governed by the laws of the Republic of Turkey, and the Courts and Enforcement Offices of the Republic of Turkey shall have exclusive jurisdiction.