Privacy Policy

Controller

The controller responsible for the processing of personal data in connection with AnyLife – Life Simulator is the developer of the application, based in Germany. For all data protection enquiries, please contact:

[email protected]

Data We Collect

AnyLife collects a minimal amount of data. The following describes what is collected, and why.

Device Identifier
When you interact with community features (submitting suggestions or voting), your app sends a device identifier generated on your device. This identifier is not linked to your name, Apple ID, or any other directly identifying information. It is used solely to prevent spam submissions and to record your votes (so you cannot vote more than once on the same item). It is stored on our servers in the EU.

Community Content (Posts, Comments & Votes)
If you choose to use the community feature, the text of any post or comment you create, and the posts/comments you upvote or downvote, are stored on our servers in the EU. Posts and comments become visible to other users immediately and are screened by an automated content filter, with human review afterwards (rather than before publication). No name, account, or contact information is required or collected. Content is stored subject to our discretion to edit, hide, or delete it at any time.

Pseudonymous Display Name
The first time you post or comment, a random display name and icon (e.g. an adjective + animal plus an emoji and colour) are generated from your device identifier and shown publicly alongside your content so that other users can follow conversations. This display name is not based on, and does not reveal, any personal information, your Apple ID, or your real identity, and your underlying device identifier is never shown to other users.

Reports & Moderation
If you report a post or comment, we store the report (the reporting device identifier, the targeted content, and any reason you provide) so we can review it. We also keep an internal moderation log of actions taken (such as hiding, removing, or restricting content or devices). This is used solely to operate and enforce the community rules and to prevent abuse.

Device & App Integrity (Apple App Attest)
To protect the community features from automated abuse, fraud, and vote manipulation, the app may use Apple's App Attest framework. When it does, your device generates a cryptographic key in its secure hardware and our server stores the associated public key and key identifier, bound to your device identifier. This verifies that requests come from a genuine, unmodified copy of the app on a real Apple device. It is processed entirely on our EU servers (no calls to Apple), is not linked to your identity, and is used solely for security and anti-abuse.

Server Logs
Our server automatically records standard technical log entries when requests are made to the community features. These logs may include your IP address, the device identifier, request timestamps, and HTTP status codes. Logs are used for security monitoring and debugging purposes only.

Usage & Analytics Data (Optional)
With your explicit permission, AnyLife collects anonymous gameplay statistics to help us improve the game. This is entirely optional and disabled by default. You can enable or disable it at any time in Settings > Share Usage Data.

When enabled, the following anonymous data may be transmitted to our servers:

• Gameplay events: new life creation (country/city/gender), age progression, character death (cause, net worth), career changes (jobs, promotions), education (school/university enrollment, dropouts), social milestones (marriage, divorce, children), economic activity (car/property purchases, loans, bankruptcy, emigration), health/lifestyle (doctor/gym visits).
• Screen interactions: which screens you visit and how long you spend on them.
• Device information: device model identifier (e.g. iPhone17,2), iOS version, and app version.
• Performance & diagnostics: peak memory usage, CPU time, foreground/background time, disk writes, crash diagnostics (termination reason, exception codes), and hang diagnostics (duration of frozen UI). Collected via Apple's MetricKit framework.

This also includes in-app purchase identifiers (SKU and price tier), achievement unlocks, minigame activity with scores, notification permission choices, and feature engagement events.

None of this data is linked to your identity, Apple ID, or any personal information. A random session identifier (UUID) is generated each time the app launches and is used solely to group events from the same session. It is not linked to you or your device across sessions.

This data is stored on our servers in the EU, is never shared with or sold to third parties, and is used exclusively for:

• Understanding which features are used and where players struggle
• Balancing gameplay (e.g., career progression, economic difficulty)
• Detecting and fixing bugs and performance issues
• Improving the overall user experience

To request deletion of your analytics data, contact us at the email below. Data can be deleted by session identifier.

Crash & Diagnostic Data
When you enable Share Usage Data, AnyLife collects performance and diagnostic data using Apple's MetricKit framework. This includes memory usage, CPU time, crash diagnostics (termination reasons, exception codes), and hang diagnostics (UI freeze duration). This data is sent to our servers alongside other usage analytics. You can disable this collection at any time by turning off Share Usage Data in Settings.

Legal Basis for Processing

We process data on the following legal bases under Art. 6 GDPR:

• Consent (Art. 6(1)(a) GDPR) — processing anonymous gameplay analytics, screen interactions, device information, and performance/crash diagnostics based on your explicit opt-in consent via the Share Usage Data toggle (off by default).
• Legitimate interest (Art. 6(1)(f) GDPR) — processing the device identifier, server logs, App Attest keys, reports, and moderation records to prevent abuse and fraud, ensure service security, maintain rate limits, and enforce community rules.
• Legitimate interest (Art. 6(1)(f) GDPR) — storing community posts, comments, votes, and the associated pseudonymous display name for the purpose of operating the community feature of the app.

Data Storage & Transfers

All data we collect (device identifiers, posts, comments, votes, pseudonymous display names, reports and moderation records, App Attest keys, and server logs) is stored on servers located within the European Union.

If you are located outside the European Union, please be aware that by using our community features, data about you (including your device identifier, any post or comment you make, your votes, your pseudonymous display name, any reports, App Attest keys, and associated server logs) will be transferred to and stored on servers in the EU. The EU maintains robust data protection standards, and this transfer is made for the purpose of operating the community features of the App. By using those features, you acknowledge this transfer.

Data Retention

Analytics data (gameplay events, screen interactions, device info, performance diagnostics) is retained for up to 2 years. Session-level deletion is supported — contact us with your request.

Device identifier, pseudonymous display name, and votes are retained as long as the associated community content exists in our system.

Community posts and comments are retained indefinitely or until we (or you) delete them. You may request deletion of your content by contacting us (see below).

Reports and moderation records are retained for as long as needed to operate and enforce community rules and to prevent recurring abuse.

App Attest keys are retained while the device remains active in the community features; stale keys may be removed periodically.

Server logs are retained for a maximum of 90 days for security monitoring and debugging purposes and are then deleted.

Third Parties

AnyLife does not share, sell, or disclose your data to third parties. The app does not use third-party advertising, analytics, or tracking services.

The app is distributed via the Apple App Store. Apple's handling of data in connection with your device and App Store account is governed by Apple's Privacy Policy.

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — you may request information about what data we hold about you.
• Right to rectification — you may request correction of inaccurate data.
• Right to erasure — you may request deletion of your data where no overriding legal basis applies.
• Right to restriction — you may request that we restrict processing in certain circumstances.
• Right to object — you may object to processing based on legitimate interests.
• Right to data portability — this right applies where processing is based on consent or a contract. As all processing described in this Policy is carried out on the basis of legitimate interest, the right to data portability does not apply to the data we hold. If you believe this is incorrect in your specific circumstances, please contact us and we will review your request.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

Please note: because device identifiers are anonymous and not linked to any personal identity, it may not always be possible to locate records associated with your specific device.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. As we are based in Germany, the competent lead supervisory authority is the data protection authority of the relevant German federal state (Landesbeauftragter für den Datenschutz). You may also contact the Federal Commissioner for Data Protection and Freedom of Information (Bundesbeauftragter für den Datenschutz und die Informationsfreiheit, BfDI).

International Users

United Kingdom. If you are a resident of the United Kingdom, you are protected by the UK GDPR (as retained in UK law by the European Union (Withdrawal) Act 2018) and the UK Data Protection Act 2018. All rights described in this Policy apply equally to you. The relevant supervisory authority for UK residents is the Information Commissioner's Office (ICO) at ico.org.uk.

California (USA). If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you certain rights over your personal information, including the right to know what is collected, the right to request deletion, and the right not to be discriminated against for exercising these rights. The device identifiers we collect are not linked to your name or identity; where this makes it impossible to identify your specific records, we will inform you of that limitation in our response. To submit a request, contact us at [email protected]. We do not sell personal information.

Brazil. If you are located in Brazil, the Lei Geral de Proteção de Dados (LGPD, Law No. 13,709/2018) may apply to you. The rights described in this Policy are consistent with those granted under the LGPD. You may exercise your rights by contacting us at the address below.

Canada. If you are a Canadian resident, the Personal Information Protection and Electronic Documents Act (PIPEDA) or applicable provincial privacy legislation may apply. We collect only the minimal data necessary for the community features to function. By choosing to use those features, you consent to the collection and use of that data as described in this Policy.

Australia. If you are located in Australia, the Privacy Act 1988 (Cth) and the Australian Privacy Principles may apply. You have the right to access and correct personal information we hold about you. Given the anonymous nature of the data we collect, it may not be possible to identify records associated with you. Contact us at the address below for any privacy-related requests.

For all international privacy enquiries, contact us at [email protected].

Contact

For any questions or requests regarding this Privacy Policy or your data, contact us at [email protected].