Short version: Your cases and chats are stored on your device, but cloud AI is not local processing. When you use a Gemini feature, your question and relevant game context—including conversation history—are sent through our Google Cloud service to Google Gemini. We also keep server records for credits, purchases and security. The app does not currently include Google Analytics or Firebase Analytics for app-usage tracking.
This policy covers CrimeChat, also presented as Crime Story. The server-managed credit and update-check features described below apply to version 1.4.1 and later. Earlier versions may use older AI connections and local/iCloud credit accounting.
1. Who provides the app
CrimeChat is provided by Dario Caric / DCApps, the controller of personal data processed through our app services. Contact dario.caric@gmail.com for privacy, support or deletion requests.
2. Data stored on your device and in iCloud
The app stores game information using local Apple app storage, including Core Data and UserDefaults. This can include generated cases, characters, your questions and character replies, investigation notes, extracted facts, progress, accusations, judgments, case locations and app settings.
When enabled under your Apple settings, device backups may include local app data. Some app settings and legacy credit information use Apple's iCloud key-value storage or private CloudKit storage. This does not mean all chat history is automatically synced between devices.
In the current version, the authoritative credit balance is held by our server. Old iCloud/CloudKit credit values may be submitted as claims for review when migrating to the server system; they do not automatically become spendable credits. Deleting or reinstalling the app does not reset or delete the server wallet.
3. Cloud AI and on-device AI
Current cloud gameplay uses Google Gemini through a DCApps-operated gateway hosted on Google Cloud. Cloud requests support case generation, spelling and grammar correction, character responses, fact extraction, investigation progress and evaluation of your accusation.
Depending on the feature, we send your submitted text, case details, characters, selected case locations or coordinates, investigation facts and relevant conversation history. A character-response request can include the full conversation history for that character, rather than just your latest message. One action may cause several AI requests for different gameplay tasks.
The gateway temporarily stores prompts and responses to process queued work. Closing the app does not necessarily cancel a request already accepted. Token counts, including thinking tokens where applicable, are used to calculate credit consumption.
Google's paid Gemini API terms state that prompts and responses are not used to improve Google's products. Google can still retain and review content for safety, abuse prevention and legal compliance; its published abuse-monitoring policy describes a 55-day retention period. Google's retention is separate from the shorter temporary storage on our gateway. See the Gemini API terms and abuse-monitoring policy.
Where an Apple Foundation Models feature is used on a supported device, that model processes the request on the device. This does not change how separate Gemini requests are processed. AI output is generated entertainment content and can be inaccurate.
Please keep gameplay fictional. Do not enter passwords, payment-card details, sensitive personal information or private information about real people into game conversations. To avoid new cloud AI submissions, do not submit requests to cloud-powered features.
4. Credits, Apple purchases and refunds
Apple StoreKit processes in-app purchases. We receive and verify Apple's signed app and purchase information to identify the wallet, deliver purchased credits, prevent duplicate claims and process refund notifications. This can include app-download and transaction identifiers, product, quantity, purchase dates, app version, verification data, environment and refund/revocation status. We do not receive your Apple Account password or full payment-card details.
The wallet uses a derived identifier associated with Apple's app-download transaction. This identifier is pseudonymous, not anonymous: it lets the service recognize the same wallet across installations and devices using the same App Store account. The credit reference displayed in Settings identifies this wallet for support.
Firestore records include available and reserved credits, spending totals, purchase-delivery records, request identifiers and hashes, usage costs, timestamps, errors/status, migration-review claims and app-version information. Signed Apple refund events may remove refunded credits or place a wallet under review. These accounting records do not contain the raw AI conversation text.
Purchases are finished only after the server confirms credit delivery, allowing interrupted deliveries to be retried. Queued jobs settle actual usage or return unused reservations; abandoned reservations are recovered automatically.
5. Security, diagnostics and supported versions
We use Firebase App Check with Apple App Attest, verified Apple transaction information and server-side credit checks to reduce unauthorized use and protect purchases. Attestation tokens and associated app/device-verification information are processed by our service, Firebase and Apple for these purposes.
Our services and hosting providers may process technical information such as IP addresses, request times, app version/build, response codes and operational errors for security, troubleshooting and reliability. The gateway does not intentionally put raw AI prompts or responses into accounting records or application logs. Development builds can print game content locally for debugging; content you voluntarily include in a support report is handled as support correspondence.
The app periodically checks a minimum supported version maintained by DCApps. Older versions that include this check may display a mandatory-update screen and have service requests rejected until updated. Version metadata may be associated with the wallet. A version check is separate from advertising or usage analytics.
The current app has no Google Analytics or Firebase Analytics SDK for general app-usage measurement and does not use an advertising SDK. Necessary service/security logging and Apple's own platform diagnostics are separate from analytics.
6. Game Center and maps
CrimeChat uses Apple Game Center for player authentication and leaderboards. When you participate while signed in, scores and your Game Center profile are handled by Apple; your nickname, avatar and scores may be visible to other players under Apple's settings. See Game Center & Privacy.
Apple MapKit displays case locations and related coordinates. These are game locations; the current map flow does not continuously track your device's GPS location. Apple processes map-service requests under its applicable privacy policies.
7. Service providers and sharing
| Provider | Purpose and information |
|---|---|
| Google Cloud, Firebase and Google Gemini | Cloud AI processing; temporary prompts/results; wallet and purchase accounting; app attestation; operational and security information described above. |
| Apple | App distribution, purchases/refunds, signed app identity, App Attest, iCloud, device backups, Game Center, maps and supported on-device AI features. |
| DCApps support | Your email address and information you choose to send, such as a wallet reference or screenshots, to resolve a request. |
We do not sell your personal data or share game conversations with advertisers. Information may also be disclosed where required by law or necessary to investigate fraud, enforce service rules or protect users and the service.
Our credit database and temporary job storage are configured in Google Cloud's Frankfurt region. This is not a promise that all processing stays in the EU: Google Gemini, Apple and other provider operations may process information in other countries under their applicable terms and transfer safeguards. Read Firebase privacy information, Google's Privacy Policy and Apple's Privacy Policy.
8. How long information is kept
- Local game data: remains until removed through the app's available controls, local app data is deleted, or the device is erased. Backups and iCloud copies are managed separately through Apple.
- Temporary gateway content: input prompts are deleted after processing where possible. Remaining prompt/result objects use a one-day storage lifecycle. Completed or expired job metadata is scheduled for deletion after approximately 24 hours. Cleanup is asynchronous, so these are not exact deletion deadlines.
- Wallets, purchases, refunds and migration reviews: have no automatic short-term expiry. We keep them as needed to maintain balances, prevent purchase replay/fraud, reconcile disputes and meet applicable obligations. Deletion requests are assessed against those needs; unnecessary data is removed, and we explain any required retention.
- Operational logs and support correspondence: are retained under configured hosting-service retention and for as long as reasonably needed to resolve service, security or support issues.
- Provider-held data: Google Gemini's content retention and Apple's records follow their own applicable policies, independently of our temporary job cleanup.
9. Your choices, deletion requests and rights
You can remove game information using available in-app controls. Deleting the app removes its local data from that device, but does not automatically remove iCloud/backups, Game Center records or server credit/purchase records. Manage iCloud and Game Center data through the relevant Apple settings.
To request access, correction or deletion of information held by DCApps, email dario.caric@gmail.com. Include the credit reference from Settings if available so we can locate the right wallet. The reference helps locate a record but is not, by itself, proof of ownership; we may request proportionate verification. Do not send your Apple password or payment-card details.
Where applicable, you may also request restriction, portability, object to processing based on legitimate interests, or withdraw consent for processing based on consent. Withdrawal does not undo prior lawful processing. Some requests are subject to legal exceptions. You may complain to your local data-protection authority, including Croatia's AZOP. More information is available from the European Commission.
10. Purposes and legal bases
Where the GDPR applies, we process information necessary to provide requested game/AI features and deliver purchases to perform our contract with you; to protect balances, prevent fraud and maintain reliable services for our legitimate interests; and where necessary to comply with legal obligations. Where a feature requires consent or optional Apple permissions, those apply to that feature. Not providing information needed for verification or payment delivery can prevent use of the corresponding cloud feature.
AI judgments and automated credit/security checks concern gameplay and service access. They are not assessments of your real-world guilt, creditworthiness or eligibility for employment or other essential services. Contact support if you believe a credit or access decision is wrong.
11. Children and families
Please follow the app's App Store age rating and the parental controls available on your device. The app does not ask you to enter a date of birth. Parents or guardians with concerns about a child's information should contact us so we can investigate and address the request.
12. Changes to this policy
We may update this policy as features, service providers or legal requirements change. The current policy will be posted here with an updated date. Material changes will be communicated where required.
13. Contact
Dario Caric / DCApps
dario.caric@gmail.com
This page describes the game. It contains no analytics scripts, advertising scripts or third-party font/CDN dependencies. Following an external link takes you to that provider's website and privacy practices.