Privacy policy
Pre-launch version. This text will be updated before the app is published.
ContentsJump to a section
This policy explains how Fate of Minds, an AI-narrated role-playing game for iOS and Android, and this website handle personal data: what we collect, why, who receives it, how long we keep it and what rights you have. The game has not been released yet. This is a pre-launch version, and it will be updated before the app is published.
This policy informs you. It is not a consent form, and using the game does not mean you agree to anything in it. Where the law requires your consent for something, we ask for it separately.
Who is responsible
The controller of your personal data is Yusuf Emre Doğan. For any question, request or complaint about your data, write to yusufemredogan@fateofminds.com.
What we collect
We collect what the game needs in order to run. Depending on how you use it:
- Account data. Your email address, your username and display name, and an account identifier. You need these to create and use an account.
- Gameplay data and content. What you do and create in the game: your sessions, characters, stories and scenarios, and the text you write (actions, messages, story input), together with the game state the server keeps for you, such as dice results, items and progress.
- Purchase data. If you buy a subscription or another purchase, records of that purchase (what, when, status). The payment itself is handled by the app store; your card details go to the store, not to us.
- Profile information other players can see. Your username and profile can be visible to other players, according to the profile-visibility setting in the app.
- Crash and diagnostic reports, only if you turn them on. If you switch on “Analytics Tracking” in the app’s Privacy & Data settings, crash logs and diagnostic information are sent to our error-reporting provider. This setting is off by default.
- Technical connection data. When your device connects to our servers or our providers’ servers, technical data such as your IP address is processed so that the connection can work.
- Messages to support. What you write to us and the address you write from.
Why we use your data, and on what basis
We use your data to:
- create and manage your account, sign you in and keep it secure;
- run the game: process your turns, roll the dice on our server, save your progress and show your profile the way you set it;
- narrate the story and moderate content with the help of AI (see “Your text and third-party AI providers” below);
- process purchases and subscriptions and answer support requests;
- keep the service secure, prevent abuse and fraud, and fix errors;
- meet our legal obligations, such as keeping accounting records and answering lawful requests.
Under Turkish data protection law (KVKK, article 5) and, where it applies to you, the GDPR (article 6), we rely on one or more of these: performing our agreement with you by providing the game; our legal obligations; our legitimate interests in security, preventing abuse and keeping the service working, which we weigh against your rights; and your explicit consent, only where we ask for it separately.
Who receives your data
We use service providers who process data on our behalf to deliver the game:
- Hosting and database. Our backend (database, sign-in and server functions) runs on Supabase.
- Error reporting. If you switch on “Analytics Tracking”, crash and diagnostic reports go to Sentry.
- App stores and payments. Apple (App Store) and Google (Google Play) handle purchases under their own privacy policies. We also use a payment infrastructure provider to confirm purchases and manage subscriptions.
- Third-party AI model providers. See the next section.
We may also disclose data to the authorities or to advisers where the law requires it, or where we need it to establish, exercise or defend a legal claim.
Your text and third-party AI providers
The game is narrated by artificial intelligence. To narrate your story and to moderate content, the text you write in the game, together with the story context needed to answer it, is sent to a third-party AI model provider. This happens whenever you play a turn.
Do not write into the game anything you do not want processed this way, such as passwords or other sensitive details.
The list of the providers we use will be published on this page before the app is released.
Transfers abroad
Our service providers, including hosting and AI providers, may process data in countries other than the one you live in, including outside Türkiye and the European Economic Area. When that happens we will rely on the safeguards that the applicable law provides, such as an adequacy decision, standard contractual clauses or, where the law allows it, your explicit consent.
How long we keep data
- Account and game data: while your account is open.
- After you delete your account: see the next section. The data is hidden at once and deleted permanently within 30 days.
- Payment records: for the period that tax and commercial law require, with the link to your account removed.
- Record of a deletion: at least 3 years, and it holds no personal data.
- Everything else (for example messages to support, or diagnostic reports): only as long as needed for the purpose it was collected for, and then deleted or anonymised.
Where the law requires us to keep data for longer, for example because of a lawful request, we keep only what is required and only for as long as it is required.
Account deletion
You can delete your account at any time, in the app (Settings → Account Management → Delete Account, or Settings → Privacy & Data → Delete Account) or by email from the address registered to your account. Step by step, including the email template, it is on the account deletion page. We do not delete an account before we know the request comes from its owner.
- As soon as your request is processed (at once in the app; for an email request, once we have confirmed the account is yours), your account is closed and you are signed out everywhere. Your email address and username are released, and a new account with the same email cannot see the old account’s data.
- For up to 30 days your profile, characters, stories and other game data are kept apart, inaccessible and hidden from everyone, for security purposes only, for example to protect against an unauthorised deletion.
- Within 30 days the deletion is completed and this data is permanently deleted.
- What is kept: payment records that tax and commercial law require us to keep, unlinked from your account and held for the legal retention period; and a record showing when the deletion was carried out, holding no personal data, kept for at least 3 years.
- Copies made by others: copies that other players made of scenarios you shared publicly stay, unlinked from your account. If a copy contains your personal information, ask us to remove it at yusufemredogan@fateofminds.com.
The 30-day period is not a right to undo the deletion. We may consider an exceptional restore request sent to support once we have confirmed that you own the address, but we cannot guarantee it.
If you have a subscription, deleting your account does not cancel it. Cancel it in the app store first.
Your rights
Under Turkish data protection law (KVKK, article 11) you can ask us to:
- tell you whether we process your personal data, and give you information about it;
- tell you why we process it and whether it is used for that purpose;
- tell you which third parties receive it, in Türkiye or abroad;
- correct it if it is incomplete or wrong, and tell the third parties we passed it to;
- delete or destroy it under the conditions in article 7 of the KVKK, and tell the third parties we passed it to;
- consider your objection if an analysis made only by automated systems produces a result against you;
- compensate any damage you suffer because your data was processed unlawfully.
Where the GDPR applies to you, you also have the rights of access, rectification, erasure, restriction, data portability and objection, and the right to withdraw a consent you have given.
To use a right, write to yusufemredogan@fateofminds.com from the email address registered to your account, so that we can confirm it is you. We answer within the time the law sets (under the KVKK, within 30 days at the latest). Under the KVKK you must apply to us before you can complain to the Personal Data Protection Board (KVKK Kurulu) in Türkiye: if we refuse your request, if you find our answer insufficient or if we do not answer in time, you can complain to the Board within 30 days of learning our answer, and in any case within 60 days of your application (KVKK articles 13-14). If you are in the European Union, you may also complain to your local data protection supervisory authority.
Children
Fate of Minds is for people who are at least 16 years old. We do not knowingly collect personal data from anyone younger. If you think a child has created an account, write to yusufemredogan@fateofminds.com; we will look into it and, where appropriate, delete the account.
Security
Data travels between the app and our servers over encrypted connections (TLS), and access to the systems that hold it is limited. No online service can promise perfect security, but we take reasonable technical and organisational steps to protect your data, and we limit what we collect.
AI model training
We do not use what you write or create in the game to train AI models without your separate, optional and revocable explicit consent. If we ever ask for it, it will be its own choice, you can withdraw it at any time, and the game will work the same if you say no. A withdrawal applies to later training: data cannot technically be taken back out of a model that has already been trained.
This website
This website does not use cookies, does not run analytics and does not make requests to third-party services: its fonts are served from the site itself. Our hosting provider may keep technical access logs (for example IP address, time and the page requested) to run and secure the site. If you email us, we receive your address and message, and we use them only to answer you.
Changes to this policy
We may update this policy. The version on this page is the current one, and its date is at the top. Because this is a pre-launch version, we will update it before the app is published, including the list of AI providers. If a change is significant, we will tell you in the app or by email before it applies, where we can.
