Privacy Policy

Scope of this policy

This policy covers the AlibA.I. mobile application (available on the Apple App Store and Google Play) and supplements the First_Studio website Privacy Policy, which governs our website at first-studio.games. Together they describe everything First_Studio LLC collects and how we handle it.

If you only browse our website and never download the game, the website policy is the only one that applies to you.

What we collect

a) Your anonymous account

When you first open AlibA.I., the app automatically creates an anonymous account using Firebase Authentication. This gives you a randomly generated user ID (a Firebase UID) so your progress and conversation history can be saved to your account. No email address, real name, or password is required or collected at this step.

b) Gaming-platform account info

If you sign in with Google Play Games (Android) or Apple Game Center (iOS) to enable features such as achievements, leaderboards, or cross-device save sync, we receive the pseudonymous player ID and the public gaming display name and avatar you have set in that platform. We do not receive your Google or Apple email address, your real name, or any payment information from these platforms.

c) Interrogation conversations

The most significant data the game collects is the text you type when interrogating a suspect. Every question you type and every AI response is stored in our database. See Section 04 for the full technical explanation of where this text goes and how it is protected.

Exception: the in-game Tutorial and any offline Scenario modes use on-device keyword matching only. No text from those modes is ever sent to our servers or to OpenAI.

d) Gameplay data

We store gameplay state needed to run the game: which cases you have started or solved, suspect accusation history, in-game progress flags, and app settings. This data is tied to your anonymous Firebase UID and synced to our database so your progress is preserved if you reinstall or switch devices.

e) Usage analytics

The app uses Firebase Analytics (a Google service) to collect anonymous usage data — such as which screens are visited, feature engagement, and session information. This data does not include your interrogation text or any personally identifying information. We use it to understand how the game is played and to prioritise improvements.

f) Crash reports and diagnostics

The app uses Firebase Crashlytics (a Google service) to automatically collect crash reports when the app encounters an error. A crash report includes the device model, operating system version, app version, and a technical stack trace describing what went wrong. Crashlytics transmits these reports to Google's servers on our behalf. We use them only to find and fix bugs.

g) What we do not collect

• No email address is required or requested by the app itself.
• No advertising ID or device ID is collected or used for advertising.
• No payment information — all purchases are handled entirely by the App Store or Google Play.
• No microphone, camera, location, or contact-list access is requested.
• We do not knowingly collect personal information from children under 13.

How we use your information

We use the information described above only to:

• Generate AI detective responses to your in-game interrogation questions.
• Save your conversation history so the AI character remembers your exchanges if you return to a case.
• Save and sync your gameplay progress across devices.
• Enable gaming-platform features: achievements, leaderboards, and cross-device save (if you opt in).
• Diagnose and fix crashes and technical problems via Crashlytics reports.
• Protect against abuse and enforce our Terms of Service.
• Comply with legal obligations.

We do not use your interrogation transcripts to train AI models, to profile you for advertising, or for any purpose other than running the game.

Your AI conversations — a closer look

Because the AI interrogation mechanic is central to the game, we want to be specific about exactly what happens when you type a question.

The flow, step by step

• Your device to our server — your typed question is sent over an encrypted HTTPS connection to a First_Studio backend service running on Google Cloud (Firebase Cloud Functions, hosted in the United States).
• Our server to OpenAI — our backend assembles a prompt containing the case context, the AI character's role, and a recent window of your conversation, then calls the OpenAI API to generate the character's reply. The OpenAI API key lives only on our server; it is never sent to your device.
• Storage — both your question and the AI's reply are written to Google Firestore (our database), stored under your anonymous Firebase UID alongside your case data. The complete conversation history is retained — not just the recent context window sent to OpenAI — so the AI character stays consistent across sessions.
• Reply returned — the AI character's response is sent back to your device over the same encrypted connection and displayed in the game.

OpenAI's role

OpenAI processes your interrogation text as a service provider acting on our behalf. Under our agreement with OpenAI, inputs sent via the API are not used to train OpenAI's models by default. OpenAI is a data processor, not an independent data controller, for the content you send through the game.

What not to type

The interrogation mechanic is fiction — you are talking to an AI character, not a human. Please do not type real sensitive personal information (such as passwords, financial details, medical information, or information about real people) into the interrogation input. The game has no need for that information, and our Terms of Service prohibit submitting it.

Tutorial and offline modes

The in-game Tutorial and all offline Scenario modes answer with on-device keyword matching. No text from those modes is transmitted to our servers or to OpenAI.

Legal bases for processing (EU / UK)

If you are in the European Economic Area or the United Kingdom, we process your personal information under the following GDPR legal bases:

• Performance of a contract — processing your interrogation inputs, storing your progress, and enabling gameplay features are necessary to provide the game you purchased.
• Legitimate interests — crash reporting and security monitoring, to keep the game stable and protect against abuse.
• Consent — linking your gaming-platform account (Google Play Games or Apple Game Center) for achievements and leaderboards, which you can choose not to do.
• Legal obligation — where we must retain or disclose information to comply with applicable law.

Service providers

We share your information only with the following service providers, and only to the extent each needs it to perform its service for us. Each is bound by contract to protect your information and may not use it for its own purposes.

• Google (Firebase) — provides our server-side infrastructure: Cloud Functions (runs our backend logic), Firestore (stores accounts, conversations, and gameplay data), Firebase Authentication (manages anonymous accounts), and Crashlytics (crash reporting). All Firebase services used are hosted in the United States. Google's privacy practices are described at policies.google.com/privacy.
• OpenAI — processes interrogation prompts to generate AI character responses. Inputs are not used for model training by default. OpenAI's privacy practices are described at openai.com/policies/privacy-policy.
• Apple App Store / Google Play — distribute the game and process all in-app purchases. We do not receive your payment information from these platforms. Their privacy practices govern that data.
• Google Play Games Services / Apple Game Center — provide optional achievements, leaderboard, and cross-device sync features when you choose to link your gaming account.

We may also disclose information if required by law, to protect our legal rights, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you of any change in ownership).

Data retention

We retain your account, gameplay data, and conversation history for as long as your anonymous account exists. You can delete your account at any time in the app via Settings → Account → Delete Account. Confirming deletion permanently removes all server-side data associated with your UID — your player record, active cases, interrogation transcripts, and purchase records — and clears local on-device saves. You will be signed into a fresh anonymous session.

Note: data held by Google Play Games Services or Apple Game Center (achievements, leaderboards, your gaming display name) is not ours to delete — that stays under your Google or Apple account settings.

If you prefer to request deletion by email, write to owner@first-studio.dev with the subject "Delete my account" and we will process it within 30 days.

Crash reports are retained by Crashlytics for a limited period as defined by Google's standard retention policies, after which they are automatically deleted or anonymized.

Your rights & choices

Depending on where you live, you may have some or all of the following rights:

• Access — ask what information we hold about your account.
• Correction — ask us to fix inaccurate information.
• Deletion — delete your account and all associated data in the app via Settings → Account → Delete Account, or by emailing owner@first-studio.dev with subject "Delete my account."
• Transcript deletion — if you want only your interrogation transcripts deleted without deleting your account, email us and we will delete those records.
• Portability — receive a copy of the information you provided.
• Opt out of gaming-platform sync — you can unlink your Google Play Games or Game Center account at any time in the app's settings.

California residents: we do not sell or "share" your personal information as those terms are defined under the CCPA/CPRA. To exercise any right, email owner@first-studio.dev and we will respond within the timeframe required by applicable law.

Data held by platforms: information held by Apple or Google (including Game Center or Play Games data) is subject to their privacy policies and must be managed through your Apple or Google account settings.

Children's privacy

AlibA.I. is rated for users 13 years of age and older (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account or submitted information through the game, please contact us and we will delete the associated data promptly.

Security

All communication between the game and our servers uses TLS encryption. Access to our Firebase project is restricted by role-based permissions. We rely on Google's infrastructure security for Firestore, Cloud Functions, and Crashlytics — services with industry-standard certifications. No method of transmission or storage is perfectly secure, but because we collect only what is necessary to run the game, there is relatively little to expose.

International users

First_Studio operates from the United States. Our Firebase backend and the OpenAI API are hosted in the United States. If you play AlibA.I. from outside the U.S., your interrogation text and gameplay data will be transferred to and processed in the United States, where data-protection laws may differ from those in your country.

For users in the European Economic Area or United Kingdom, we rely on Standard Contractual Clauses and our service providers' own transfer mechanisms for cross-border transfers.

Changes to this policy

As AlibA.I. evolves — new platforms, new features, new service providers — we may update this policy. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will provide notice within the app or via our mailing list (if you are subscribed). Continued use of the game after a change takes effect constitutes acceptance of the revised policy.