Privacy policy
Updated: October 6, 2026
This policy applies to Ai Cá Ngựa and this support website. Operated by Minh Cao. Contact: mjnkao@gmail.com.
Data and purposes
- Sign-in from version 1.0.1: if you choose Apple or Google, Firebase Authentication processes the user identifier, email and name returned by the provider to authenticate and maintain your session. Apple may provide a private relay email. Aicos accounts share infrastructure with other Aicos games; the Ludo profile and energy wallet are stored separately on each device, without wallet synchronization across devices. Sign-in is optional for computer play; guest and member limits differ.
- On your device: settings, profile/display name, games and connection information are saved to resume play. Unsent feedback drafts stay on your device. Local data may be included in operating-system backups. Computer play requires no registered account.
- Playing with friends: display names, room and participant/session identifiers, room authentication information, moves, game state and results are processed to connect and synchronize players. Other players in the room receive display names and game data. Internet-room synchronization uses Google Cloud/Firebase services; nearby play connects devices over the local network.
- Feedback: when you submit feedback, the app sends the message, a random submission identifier and app version to the backend. The service stores the message, time and status to receive and handle feedback and prevent duplicate submissions. Do not include unnecessary sensitive information.
- Connection data: services process IP addresses and technical request information. The backend uses hashed IP addresses for rate limits and abuse prevention. Infrastructure may keep technical logs for operation and security.
- Camera and local network: QR scanning occurs on your device; this feature does not save or upload camera images to the backend. Local Network permission is used to discover and connect nearby tables. You can manage permissions in iOS Settings.
- Email support: if you email us, we receive your email address and the content you provide to handle your request.
Providers and sharing
Internet rooms and feedback use Google Cloud/Firebase. This website uses GitHub Pages, where GitHub processes connection information under its own policy. Providers may process data outside your country.
The current app does not integrate advertising or advertising-tracking SDKs. The data described above supports gameplay, synchronization, support and service protection.
Retention and deletion requests
Local data stays on your device until removed; the platform manages backups. Rooms and invitation codes expire, but expiration does not mean their records are immediately deleted. There is currently no common automatic deletion schedule for all room data, feedback and operational records. Infrastructure policies govern logs and backups. Feedback and support correspondence are retained to handle and follow up on requests.
To request access, correction or deletion, email mjnkao@gmail.com, identify Ai Cá Ngựa and provide information that helps locate the data, such as feedback time/content or your display name. Additional verification may be needed to protect another person's data. Do not send room keys or passwords. Sending a request does not immediately delete data; a response will be sent by email. Data required for legal obligations or protection of legitimate rights may be retained.
From version 1.0.1 (38), Profile offers two choices: request deletion of Ludo data only, or request deletion of the entire Aicos account and its associated data across Aicos games. Entire-account deletion affects sign-in to games sharing that account; Ludo-only deletion preserves the shared account and other games. The form requires explicit scope confirmation and a contact email; the reason is optional. Submitting creates a request for review and does not immediately delete data. We review and process deletion on the server within 30 days and send completion confirmation to the contact email. Request ID, status and deadline are available in Profile. Processing includes revoking Apple sign-in authorization where applicable. Signing out does not delete an account.
Children and policy updates
Children can play against the computer without providing an account. Parents or guardians may contact us about a child's data. When data practices change, we update this policy and its date.