App of the Dead Privacy Policy
Last updated: 30 October 2026
App of the Dead is a quiz app about the world's religions and what they teach about the afterlife. It has no accounts to create, no advertising, no tracking and no analytics about what you study. Your lessons, quiz answers, XP, streaks, achievements and Oracle conversations stay on your device, and the Oracle runs on your phone. What reaches Midgar's servers is an anonymous Midgar ID, the anonymous More Apps and usage counts, and what is needed to recognise your purchases. Purchases themselves are handled by Apple and recorded by Midgar's purchase ledger.
In short
- Your progress, answers, streaks, achievements and Oracle conversations are stored on your device. We never receive them.
- The app keeps an anonymous Midgar ID, a random identifier with no name, email address or other detail about you, in your iCloud Keychain.
- Purchases are made through Apple, and Midgar's server keeps Apple's records of this app's purchases.
- The app sends anonymous counts with no identifier: opening the More Apps screen in Settings (opened, shown, tapped), and how many people use the app each day, week and month.
- Nothing is used for advertising or tracking, nothing is sold, and no data is given to third parties for their own use.
Who we are
App of the Dead is published by Midgar Oy, a company in Finland. For the information described under The anonymous Midgar ID, Purchases and More Apps below, Midgar Oy is the controller. You can reach us at support@midgarcorp.cc.
What stays on your device
Lessons completed, quiz answers, mistakes to review, XP, streaks, achievements, reading progress and your Oracle conversations are stored in a database inside the app's own storage on your device. They are not uploaded to us. A diagnostic log is written there too, recording errors, the app version and device model, never your questions to the Oracle, your answers or any token. It leaves your device only if you choose to share it. Deleting the app removes everything it kept on the device.
The Oracle
Oracle conversations are generated by a language model that runs entirely on your device. What you ask the Oracle is never sent to us or to any AI service. The model file is downloaded once from Hugging Face, which sees an ordinary file request with your IP address and nothing about your questions.
iCloud and Game Center
If iCloud is on, your progress syncs between your own devices through your iCloud account. That is Apple's service, under Apple's terms, and we never receive the data. If you sign in to Game Center, achievements and leaderboard entries are handled by Apple under Apple's privacy policy. Game Center is optional, and declining it does not limit the learning content.
The anonymous Midgar ID
The first time the app starts, it asks our server for an anonymous Midgar ID: a random identifier, and a random secret that proves the ID is yours. The server keeps the ID, a hash of the secret and the date it was created. The app keeps the ID and the secret in your iCloud Keychain, so the same ID follows you across your own devices and across Midgar's other apps. There is no name, email address, phone number, location or device name in it. When the app creates or joins the ID it may ask Apple's App Attest service to confirm that the request comes from a genuine copy of the app; we receive Apple's attestation and nothing about you. The ID is used to recognise your purchases and, on the More Apps screen, to show which Midgar apps you already use.
Purchases
Learning paths, deity packs, Oracle Wisdom, Ultimate Enlightenment and the Premium subscription are sold through Apple In-App Purchase. Apple handles payment and billing, and we never receive your card details or your Apple Account details. Each purchase carries your Midgar ID as Apple's app account token. Midgar's server receives Apple's signed records of this app's purchases: which product, the price, the dates, the order identifiers and your App Store country. From version 1.4.12, neither the app nor our servers send anything about your purchases to RevenueCat; earlier versions have RevenueCat validate purchases, and it receives the purchase receipt from Apple, an anonymous identifier that RevenueCat generates and your IP address, but not your name or email address. Where the server can match a purchase to your Midgar ID it keeps the two linked, so that what you bought can be recognised in other Midgar apps. The app asks the server, with the Midgar ID as a sign-in token, which purchases belong to it. We keep these records for as long as Apple's financial records require.
Midgar's server runs on Cloudflare, which may keep standard request logs such as your IP address for a limited time. We do not use them for anything else.
More Apps
Settings has a More Apps card that opens a view of Midgar's other apps. It fetches the app list from midgar-catalog.guitaripod.workers.dev and asks Apple's public iTunes lookup service for current icons, prices and ratings; your App Store country code is sent so prices are correct for your region. It reports which app tiles were displayed and which were tapped to api.midgarcorp.cc. That report contains no identifier of any kind and not your Midgar ID: only the event, the promoted app's App Store id, your App Store country code, where in the app the screen was opened, and the app's name, version and platform. Our server stores a running total per day, event, app and platform, so there is no per-person or per-device record. This is product-interaction data, used only to decide which of our apps to promote, never for advertising or tracking. The Midgar ID is sent as a sign-in token only with the separate request that lists which Midgar apps you already use and what you own in them, so the screen does not suggest an app you already have.
Midgar may publish aggregate statistics built from anonymous counts, such as weekly active installs, which never identify a person.
The app also sends two more kinds of anonymous count to Midgar's servers in the same way: one "active" count the first time you use the app on each day, in each week and in each month, which tells us how many people use the app, and one count for each purchase that names only the product bought. Like the More Apps report, they carry no identifier and are stored only as running totals per day, event, app and platform. They are used only to understand how the app is used, never for advertising or tracking.
Children
The app is not directed at children under 13 and does not knowingly collect information from them. It contains no advertising, no user-to-user communication and no links to unmoderated content.
What we don't do
We do not sell your data, show advertising, use advertising identifiers, run third-party analytics or crash-reporting software, or ask for tracking permission. We do not use your data to train AI models.
How long we keep data
- Your progress, answers and Oracle conversations: only on your device and in your iCloud, until you delete the app or reset your progress.
- The Midgar ID record and the purchase records linked to it: until you ask us to delete them, as described below.
- RevenueCat's records of purchases made with earlier versions of the app: kept by RevenueCat under its own policy.
- Apple's records of your purchases, iCloud data and Game Center data: kept by Apple under its own policies.
Deleting your data
Deleting the app removes everything it kept on your device. The app does not yet have a button that deletes the Midgar ID. To have your Midgar ID and the purchase records linked to it deleted from our server, email support@midgarcorp.cc, tell us the app and the approximate date of your first purchase, and we will help you do it. We delete the server records, but we cannot change Apple's own records, and we cannot cancel or refund a purchase: do that through Apple. Data in your iCloud is yours and is managed in Settings.
Your rights
Because we keep very little information about you, most requests are answered by the controls above. Where privacy law such as the GDPR gives you rights to access, correct, delete, restrict or move information, or to object to its use, contact us and we will help. We process the Midgar ID and purchase records to provide and account for what you buy. Processing takes place in the European Union and the United States, by Cloudflare as our hosting provider. You may complain to your local data protection authority; in Finland that is the Office of the Data Protection Ombudsman (tietosuoja.fi).
Changes
If this policy changes we will publish the new version here with a new date, and mention material changes in the app's release notes.
Contact
For any questions, contact support@midgarcorp.cc.