Privacy Policy

9Kukri — Nine Men's Morris  |  Last updated: May 9, 2026

This Privacy Policy explains how 9Kukri ("we", "our", or "us") collects, uses, and protects information when you use our mobile game application available on iOS and Android ("App"). By using the App, you agree to the practices described in this policy.

1. Information We Collect

When you sign in with Google or Apple:

• Display name
• Email address
• Profile photo URL
• A unique user identifier (Firebase UID) assigned by the authentication provider

When you play as a Guest:

• A randomly generated anonymous identifier stored locally on your device (never tied to your identity)
• If you later choose to upgrade your guest session to a Google or Apple account, your existing game data is linked to your new account

Game data collected for all players:

• Player name used in games
• Game moves and board state during active games
• Win/loss statistics and win streak (for signed-in users only)
• Game outcomes and match history
• Daily Challenge results (win/loss and move count per day, for signed-in users only)

Technical data collected automatically:

• Crash reports and error logs (via Firebase Crashlytics, on mobile devices)
• Basic usage events such as game created, game joined, and sign-in method (via Firebase Analytics, on web only)
• Advertising identifiers (IDFA on iOS, Google Advertising ID on Android) used by Google AdMob to serve ads and by the Meta (Facebook) SDK to measure app install campaign performance
• App install and session events (via Meta Facebook SDK) used to attribute app installs to advertising campaigns and measure campaign performance — this data is sent to Meta/Facebook
• Device push notification token (FCM token) used to deliver push notifications — stored in our database and linked to your player identifier
• Device IP address (collected by Google Cloud infrastructure as a standard part of network communication)

2. How We Use Your Information

• To create and manage your account and game profile
• To track and display win/loss statistics on the leaderboard
• To enable real-time multiplayer gameplay between two players
• To enable optional voice chat during online games
• To send push notifications including daily re-engagement messages and Daily Challenge alerts
• To display relevant advertisements through Google AdMob
• To measure app install campaign performance and attribute installs to advertising campaigns via the Meta (Facebook) SDK
• To detect and fix crashes and technical issues
• To improve the App based on usage patterns

3. Leaderboard

Signed-in players appear on the public leaderboard with their display name, win count, and current win streak. Guest players do not appear on the leaderboard and their game results are not tracked. By signing in and playing online PvP games, you consent to your display name, win statistics, and win streak being visible to other players in the Top 10 leaderboard.

4. Voice Chat

The App offers an optional voice chat feature during online games. If you enable it:

• Your microphone is accessed only with your explicit permission
• Audio is sent directly peer-to-peer between players (WebRTC) and does not pass through our servers
• Temporary connection data (WebRTC signaling) is stored briefly in our database and deleted after the game ends
• We do not record, store, or process any audio content

5. Push Notifications

If you grant permission, the App sends push notifications to your device. These include:

• Turn notifications for online multiplayer games — alerting you when it is your move
• Daily Challenge alerts when a new challenge is available
• Re-engagement reminders to invite you back to the game

To enable notifications, we store a device push token (FCM token) linked to your player identifier in our database. You can disable push notifications at any time in your device's Settings → Notifications → 9Kukri. Disabling notifications does not affect any other app functionality.

6. Advertising & Campaign Measurement

We use Google AdMob to display ads in the App. AdMob may collect and use your device's advertising identifier and other data to show you relevant ads. This is governed by Google's Privacy Policy.

We also use the Meta (Facebook) SDK to measure the performance of our app install advertising campaigns. The Meta SDK collects your device's advertising identifier (IDFA on iOS, Google Advertising ID on Android) and app event data such as app installs and session starts. This data is sent to Meta Platforms, Inc. and used solely to attribute app installs to ad campaigns and measure campaign effectiveness — it is not used to serve ads inside the App. This is governed by Meta's Privacy Policy.

On iOS 14.5 and later, we request your permission via Apple's App Tracking Transparency prompt before collecting your advertising identifier for personalised ads or campaign attribution. If you decline, ads and attribution will still function but without personalisation.

You can opt out of personalised ads and campaign tracking at any time:

• iOS: Settings → Privacy & Security → Tracking → disable "Allow Apps to Request to Track"
• Android: Settings → Google → Ads → Opt out of Ads Personalisation
• Meta: facebook.com/ads/preferences

7. Data Storage and Retention

Data is stored on Google Cloud servers in the United States (us-central1 region). All data is encrypted in transit using TLS and at rest by Google Cloud.

8. Data Sharing

We do not sell your personal data. We share data only with the following third-party services required to operate the App:

• Google Firebase — authentication, database, crash reporting, analytics
• Google AdMob — in-app advertising
• Meta (Facebook) — app install campaign attribution and measurement; receives device advertising identifier and app event data (installs, sessions)
• Apple — Sign In with Apple authentication

Each of these services has their own privacy policy and data practices independent of ours.

9. Children's Privacy

9Kukri is rated for users aged 4 and above. We do not knowingly collect personal information from children under 13. The App does not target children and does not include features designed to collect data from minors. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

10. Your Rights

You have the right to:

• Access the personal data we hold about you
• Delete your account and associated data by contacting us
• Withdraw your Google or Apple sign-in at any time via your device settings
• Opt out of personalised advertising via your device's ad settings
• Play anonymously as a guest without providing any personal information

If you are located in the European Economic Area (EEA), you also have rights under GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority.

11. Local Storage

The App stores the following data locally on your device:

• An anonymous player identifier for guest sessions
• Your current game session (so you can resume if the app is closed)
• A preference recording whether you have explicitly signed out of a guest session
• A counter to determine when to show the App Store review prompt

This data never leaves your device and is not shared with us or any third party.

12. Security

We take reasonable measures to protect your information. All communication between the App and our servers is encrypted using HTTPS/TLS. Firebase security rules restrict access to user data so that only authorised users can read or modify their own records. However, no method of transmission over the internet is 100% secure.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the App after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy or wish to request deletion of your data, please contact us at: