Privacy policy

1. Data controller

The data controller is KYKS, a French single-shareholder simplified joint-stock company (SASU), registered with the Paris Trade and Companies Register under number 929 633 162, with its registered office at 14 rue Bausset, 75015 Paris, France. For any question about your data, contact us at hello@kyks.io.

2. Data we process

• Profile: a nickname of your choosing, an avatar, and — if you wish — your first name (and last name) as well as a profile photo. First name, last name and photo are entirely optional: the game works with the nickname alone.
• Games: the games you take part in, your target and your mission (secret, readable by you only), eliminations, votes and the leaderboard.
• Account: by default, a technical anonymous account. If you link your account (Sign in with Apple or Google), the identifier provided by that service.
• Purchases: the mission packs you bought. Payment is processed by Apple or Google — we never have access to your banking details.
• Technical data: a notification token (if you enable notifications) and technical identifiers required for the service to work.

This data is processed to provide the service (creating and joining games, secretly dealing targets and missions, keeping the feed and the leaderboard), on the basis of the performance of the service contract and, for the photo and notifications, of your consent.

3. Visibility between players

Interfector is a social game: your nickname, your avatar and, if you provided them, your first/last name and profile photo are visible to the players you play or have played with (including the player whose target you are). Players who have shared a game with you keep technical access to your profile after that game ends, until you or they delete their account. Game events (eliminations, resolved votes, end of game) are visible to all of the game's participants. Your target and your mission are never visible to other players.

4. Hosting and processors

We rely on strictly necessary technical providers:

• Google Firebase — hosting of the database, authentication and files, in the European Union region.
• Apple / Google — processing of in-app purchases and, if you enable them, delivery of notifications.
• RevenueCat — technical management of in-app purchases (never any banking details). RevenueCat, Inc. is established in the United States: this transfer outside the European Union relies on the European Commission's standard contractual clauses (Article 46 GDPR) and concerns only minimal data (a technical identifier and your purchase history).

5. Data retention

Your profile data is kept as long as your account is active. Finished games are kept for your history, then their detailed game data (event feed, claims, votes, targets) is automatically purged 30 days after the game ends — only the summary and the leaderboard are kept. If you delete your account, all of your data is erased and your nickname is anonymized in past games (see the Account deletion page).

6. Security

All exchanges are encrypted (HTTPS). Data access is partitioned per player at the database level: your target and your mission are technically readable by you only, and every game action is validated server-side. No data is ever sold or used for advertising purposes.

7. Audience

Interfector is a tongue-in-cheek party game that we recommend for ages 13 and up. The app is rated 9+ on the App Store and "Everyone" by the IARC on Google Play: these content ratings reflect the absence of shocking content, not our recommendation. The app does not verify your age: we rely on the store ratings and on the good judgement of players and parents. The missions offered by the app exclude alcohol, dangerous dares and any non-consensual physical contact.

8. Your rights

Under the GDPR, you have the following rights:

• Access, rectification and erasure of your data.
• Deletion of your account and all your data directly from the app (Profile → Delete my account).
• Portability, restriction and objection to processing.

To exercise these rights, write to us at hello@kyks.io. You may also lodge a complaint with the French supervisory authority, the CNIL (cnil.fr).