Privacy Policy

AvA is made for children and families, and we take that seriously. This policy explains — in plain language — exactly what the app does and does not do with information. “We,” “us,” and “our” mean King Painter Technology LLC, the company that makes and operates AvA and the animal-vs-animal.com services.

1.Information the app does not collect

To be explicit, the app does not collect any of the following:

• A requested real name, email address, phone number, or postal address
• Age or birthdate
• Accounts, passwords, or login credentials (there is no login)
• Precise location (GPS)
• Photos, videos, files, or recorded audio from your device
• Contacts, calendar, messages, or call history
• Browsing history or activity in other apps
• Health, fitness, financial, or biometric data

We do not add a general-purpose analytics or crash-reporting SDK such as Google Analytics, Firebase Analytics, Crashlytics, or Sentry. The AdMob advertising SDK has the limited ad-delivery diagnostics described below.

2.Information the app does handle

2.1 Saved on your device

The app stores game data on your device so progress persists between sessions: sound/narration/haptics preferences, battle counts, win streaks and per-animal win records, coin balance, sticker and achievement unlocks, purchased packs, and any custom creature names you’ve created.

If iCloud is enabled on the device, key progress syncs through your own iCloud account (Apple’s key-value storage) so it survives getting a new phone. That data lives in your Apple account — we never see it.

2.2 Sent to our battle service

When you start a battle (or a team battle, with up to six fighters per side), the app sends the fighters’ names (or the custom names you typed), the chosen arena (only if one was chosen), and — for tournaments — a standardized round label to our battle service at api.animal-vs-animal.com, which we operate. The service uses Anthropic’s Claude model to write cloud battle stories, so those creature names are processed by Anthropic to generate the text.

Custom creature names pass through content filters before use. Our service does not retain raw custom names or name-derived identifiers in battle statistics. A generated response can remain in a protected, hashed-key cache for up to 24 hours so retries do not create duplicate AI charges, after which it is deleted.

Every installation creates a random identifier, and supported Apple devices use App Attest, to enforce quotas and confirm that paid requests come from a genuine copy of the app. We also process a one-way keyed hash derived from the network address for short-term abuse prevention. Rate-limit records expire after about one hour; unused App Attest public-key records are deleted after 180 days. These security identifiers are not connected to an account, used for advertising, or shared with other users.

2.3 Custom creature pictures

After you choose a custom creature, the app may look for a picture using the filtered creature name only:

• Wikipedia (Wikimedia Foundation) is tried first for a real photo — their privacy policy applies to that lookup.
• If no photo exists, Pollinations.ai generates a G-rated cartoon from a fixed, child-friendly prompt containing only the filtered creature name.

Only the creature name is sent — never anything about you or your device.

2.4 Ads (Google AdMob)

The free version shows ads through Google AdMob with these settings locked in:

• Child age-restricted treatment: ON
• Maximum ad content rating: G
• Personalized ads and publisher first-party identifier: OFF (contextual only)

To show and count ads, Google’s ad software receives standard device information (device identifiers, an approximate location derived from IP address, and how ads perform in the app). With the child-directed settings above, Google does not use behavioral profiling or cross-app tracking for these ads — see Google’s child-directed ads documentation and Google’s privacy policy. We do not use Apple’s App Tracking Transparency because we do not track. Removing ads (one-time purchase, Premium, or the Everything Bundle) stops all interstitial ads and their ad requests. One optional feature remains for everyone — the “watch a video to earn coins” button in the Coin Shop — and the ad network is only contacted for it when you open the Coin Shop.

2.5 Diagnostics

AvA does not send Apple MetricKit crash or hang reports to our service. When the AdMob SDK is active, Google says it may receive non-user-related crash logs and performance information to operate, secure, and improve ad delivery; these items are disclosed in the App Store privacy label and are handled under Google’s privacy policy.

2.6 Purchases

All payments run through Apple’s StoreKit. We receive only a receipt confirming a purchase succeeded — never your card number, billing address, or identity. Real-money purchases in the app sit behind a parental gate, and Apple’s Ask to Buy is fully supported.

2.7 Voice search & read-aloud

Voice search uses the device microphone with Apple’s speech recognition locked to on-device only — audio and transcripts are processed on the phone and are never sent anywhere. On a device that can’t do on-device recognition, voice search simply turns itself off (you can type instead) — it never falls back to server processing. Read-aloud narration uses the device’s built-in text-to-speech. Both require your permission via iOS settings and are entirely optional.

2.8 Game Center (optional)

If you choose to sign in to Apple’s Game Center, achievements are saved under your Apple account, handled by Apple per Apple’s privacy policy. The app works fully without it.

3.Children’s privacy

AvA is designed for children and families and built to comply with the Children’s Online Privacy Protection Act (COPPA) and Apple’s guidelines for kids’ apps:

• We do not request account or contact information, and obvious contact details are rejected from custom-creature input.
• No chat, social features, user-to-user messaging, or public sharing of typed content.
• Everything a child types is checked by a content filter before it can be used.
• Ads are contextual only — no behavioral profiling, no retargeting, ever.
• A parental gate protects purchases and external links.

If you believe your child’s information was somehow collected in error, email billvoyiatzis@gmail.com and we will delete it immediately.

4.Data retention & deletion

• On your device: deleted when you uninstall the app — or via Settings → Grown-Up Zone → Erase all data, which wipes all progress, the grown-up PIN, and iCloud-synced progress.
• Our service records: raw custom names are not retained in battle statistics; transient generated-result caches expire within 24 hours, abuse counters within about one hour, and inactive App Attest keys after 180 days.
• Wikipedia / Pollinations requests: handled by those services under their own policies.
• Purchases & Game Center: retained by Apple under Apple’s terms.

For any other deletion request, email billvoyiatzis@gmail.com. Because there are no accounts, there is usually nothing to delete beyond the logs above.

5.Who receives any data

We never sell or rent information, and we never share it for advertising beyond what’s described above. The only parties that process any data are:

• Apple — StoreKit purchases, optional Game Center, optional iCloud sync
• Google — AdMob ads with child-directed settings
• Anthropic — creature names and arena labels are processed by Claude when cloud narration or custom-creature classification is requested
• Wikimedia Foundation & Pollinations.ai — custom-creature picture lookups
• Our hosting provider (Railway) — runs the battle service we operate

6.Security

All network traffic to our services and partners uses HTTPS, enforced by Apple’s App Transport Security. Apple App Attest, request signing, strict quotas, duplicate-request protection, and application spending ceilings protect the battle service.

7.International users

The app is available worldwide. If you are in the EEA, UK, California, or another region with data-protection laws, email us with any access or deletion request and we’ll help. Because the app has no accounts and security identifiers are pseudonymous, we may be unable to associate a request with a particular installation.

8.Changes to this policy

We may update this policy from time to time; the “Last updated” date above shows the current version. Material changes are announced in the app’s release notes.