Kali Noir — Privacy Policy

This Privacy Policy explains how KALI INDIE (“we”, “us”) processes information when you use the Kali NoiriOS application and related backend services (the “Service”). Kali Noir is an interactive noir mystery experience with readable case files and optional narrated audio for subscribers.

1. How accounts work

Kali Noir uses a device-first identity model with an optional Apple ID for backup:

• Device-scoped account. On first launch, the app generates a random identifier (a UUID) and stores it securely in the iOS Keychain. We use this identifier to create an anonymous backend account so you can browse case files, save likes, generate cases in Case Crucible, and subscribe to PRO without signing in.
• Optional Sign in with Apple. You can link an Apple ID at any time (from the welcome screen, Profile, or Settings) to back up your account, restore it on another iPhone, and recover it after uninstalling the app. We store the opaque Apple user identifier Apple gives us and, if you choose to share it, the (optionally relayed) email address.
• Unlinking. You can unlink Apple at any time from Settings. Your data remains tied to the device account; only the cloud backup link is removed.

2. Data we collect

• Device-scoped account identifier — the UUID stored in your iOS Keychain. Not derived from any hardware identifier and not shared with other apps.
• Apple account identifier and email (optional) — present only if you choose to link Sign in with Apple. The email may be an Apple relay address.
• Reading & listening progress (story, chapter, audio position) so you can resume investigations.
• Liked case files you explicitly save.
• Case Crucible outputs — mysteries you forge with our AI assistant, including title, suspects, and generated narrative text.
• Subscription receipts from Apple (transaction ID, product ID, expiration, and an opaque appAccountToken equal to your device-scoped account id) so we can unlock PRO features and reconcile renewals.

3. Data we do not collect

• Microphone recordings from your device (audio files are hosted by us; the app streams them).
• Contact lists, photos, precise location, or advertising IDs.
• Hardware fingerprints such as IDFA, IDFV, or MAC addresses.
• Cross-app behavioural profiling. We do not sell personal data.

4. Audio & story content

Story text and audio files are delivered from our servers over HTTPS. Streaming requests include your session token so we can verify PRO entitlement. Narrated audio is available to any account (device-scoped or Apple-linked) with an active PRO subscription.

5. AI-generated cases (Case Crucible)

Before your first Case Crucible generation, the app shows an in-app disclosure that names OpenAI as the third-party processor, explains what prompt data is sent (setting, suspects, sealed truth), and asks for your explicit consent. When you tap Agree & forge case, your inputs are sent over HTTPS to our backend at noir-api.kaliindie.com, which forwards them to OpenAI's language model API to generate narrative text. Do not submit personal data about real individuals without lawful basis and consent. Generated content is stored against your account so you can reopen the dossier.

6. Account merging when linking Apple

If you link Apple to a device that already has activity, and the same Apple ID has been used previously on another device, we merge your two records server-side so all likes, history, forged dossiers, and any active PRO subscription move into the Apple-linked account. The merge runs in a single database transaction.

7. Service providers

• Apple — Sign in with Apple (optional), In-App Purchases, subscription management.
• OpenAI— language model processing for Case Crucible only. OpenAI is contracted for API use; prompts and outputs are handled under our agreement and OpenAI's policies. See OpenAI's Privacy Policy.
• Hosting — infrastructure that serves the story catalog and audio streams under contractual confidentiality obligations.

8. How long we keep your data

• While your account is active — we retain reading history, likes, forged dossiers, and subscription linkage for as long as you keep using the app.
• After account deletion — the database row, all user-generated content tied to it, and the link to your Apple ID (if any) are removed. Minimal purchase logs may be retained where required for tax, accounting, or fraud prevention, no longer linked to an active account.
• If you uninstall the app without deleting your account — the Keychain entry containing your device-scoped identifier is removed by iOS, which means a fresh install creates a brand new anonymous account. The original backend row remains but becomes inaccessible from that device until you sign in with the Apple ID you previously linked.

9. Deletion

You may delete your account from the app (Settings → Account data → Delete account) or by email — see our Account Deletion page.

10. Children

The Service is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from children.

11. Contact

Privacy questions: contact@kaliindie.com or our Contact page.