AI-LABZ
iPhoneAndroid

Privacy Policy

Last updated September 30, 2026

Overview

AI-LABZ ("we", "us", "the game") is an idle AI research management game for iOS and Android. This policy explains what information the game - and this website - collect, why, who receives it, and what choices you have. AI-LABZ runs without an account or login, and this policy reflects that.

AI-LABZ is made by G.L.H Development, based in Israel, which is the controller of the personal data described here. Contact: ailabzsupport@gmail.com.

Information we collect

Device token

When you first open AI-LABZ, the app generates a random device token and stores it on your device. That token - not your name, email, or any account - is how our server recognizes your lab. It is the only thing standing in for a login. There is no username, password, or personal profile to create.

Game state

Your lab's progress - resources, buildings, unlocked territory, trained models, incident history - is stored on our servers, associated with your device token, so your lab persists between sessions and survives app restarts.

Lab name and leaderboards

Your lab has a name. Until you choose one it is a generated placeholder; you can rename it in the game. The name, your weekly score and your rank are shown to other players on the weekly leaderboards and in Megabreach standings. Don't put your real name or anything personal in it. Names that break our rules on slurs, hate or sexual content are rejected.

Advertising and device identifiers

AI-LABZ shows ads through Google AdMob. AdMob also runs mediation, which lets Meta Audience Network and AppLovin compete to fill the same ad slot. To do that, the app reads your device's advertising identifier - the Android Advertising ID on Android, or the Identifier for Advertisers (IDFA) on iOS, only if you allow tracking - and the ad network that serves an ad uses it to select ads, measure how they perform, and limit how often you see the same one. Depending on your settings and region, those ads may be personalized to you.

We also use AppsFlyer to measure which ad or link led to your install, so we know where new players come from. AppsFlyer receives your advertising identifier (if available), the device's vendor identifier (IDFV on iOS), its own AppsFlyer ID, and an identifier for your lab, and may pass attribution signals back to the ad network that referred you. We store the attribution result (which network or campaign brought you) with your lab.

Analytics, crash reports, and notifications

We use Firebase Analytics to understand how the game is played in aggregate - which screens are opened, which upgrades are bought, where players get stuck - and Firebase Crashlytics to receive crash reports and stability diagnostics when something goes wrong. Both are given a random installation identifier generated by Firebase. If you enable notifications, Firebase Cloud Messaging stores a push token for your device so we can send them.

To keep modified or copied versions of the game off our servers, the app uses Firebase App Check. Google Play Integrity (Android) or Apple App Attest (iOS) confirms the game is our unmodified app on a real device, and our server checks that confirmation. It carries no gameplay data and is not used for analytics or ads.

The gameplay events we send to Firebase Analytics are also mirrored to AppsFlyer, so our install attribution can be measured against what players actually do in the game. That mirror includes subscription events - when an AI-LABZ PRO subscription starts or lapses - but never any payment details.

Purchases and subscriptions

In-app purchases - AI-LABZ PRO (monthly or lifetime), Cores, credit packs and bundles - are billed by the App Store or Google Play and managed for us by RevenueCat. RevenueCat receives an identifier for your device and your lab ID, the purchase and renewal status reported by the store, and ad revenue events, so the game knows what you bought and whether PRO is active. Neither we nor RevenueCat ever see your card, bank, or store account details.

Technical and diagnostic data

Our backend logs the technical data needed to run the game and keep it stable: request timestamps, your IP address, your lab ID, and coarse error information. We look up your country from your IP address on our own server (no third party is involved) and store it with your lab and in analytics, to understand where players are. We also use your country to decide which features, such as optional ads and PRO, are available in your region. The lookup uses GeoLite2 data created by MaxMind, available from maxmind.com. Server errors are reported to Sentry. All traffic between the app and our servers is encrypted in transit.

This website

The site you're reading this on (the AI-LABZ marketing site) is hosted on Vercel, which receives your IP address to serve it. It uses Google Analytics 4 to count visits and see which pages and store buttons get used. Google Analytics sets first-party cookies and receives your IP address, browser and device type, and the pages you view. We use it only in aggregate and don't combine it with your game data. You can block it with your browser's cookie or tracking settings, or with Google's opt-out add-on.

What we don't collect

  • No name, email address, or phone number, unless you choose to email us
  • No contacts, photos, microphone, or precise location (only the country, from your IP address)
  • No payment card details - purchases are handled entirely by the App Store / Google Play billing system, which we never see

How we use information

  • To run your lab: save and load your progress, resources, and incidents.
  • To run the weekly leaderboards and Megabreach: rank labs and pay out prizes.
  • To keep the game fair and stable: prevent duplicate or conflicting progress across devices, debug crashes and errors.
  • To show ads, which are how the game pays for itself, and to measure whether they worked.
  • To understand in aggregate how the game is played, so we can balance and improve it.
  • To know which campaign or link brought you to the game.
  • To communicate with you only if you email us directly.

We do not sell your personal information for money. We do share the identifiers described above with Google AdMob, its mediation partners Meta Audience Network and AppLovin, and AppsFlyer, who use them for advertising and attribution - under some privacy laws, including California's, that counts as "sharing" for cross-context behavioral advertising, and the controls below are how you opt out of it.

Legal bases (EU/UK players)

  • Performance of our agreement with you - running your lab, leaderboards, Megabreach and purchases.
  • Legitimate interests - security, fraud and cheat prevention, and crash reports that help us fix the game.
  • Consent - game analytics (Firebase Analytics), personalized ads, install attribution (AppsFlyer) and non-essential cookies. In the EU and UK none of these start until you answer the consent form. You can withdraw consent at any time through Ad Privacy Choices in the game's Settings or your device settings.
  • Legal obligation - keeping records the law requires, such as purchase and tax records.

Third-party services

These are every service that receives data from AI-LABZ today. If we add another, we will list it here and change the "last updated" date above.

How long we keep it

  • Lab and game state - while you keep playing. A lab untouched for 24 months may be deleted. You can ask us to delete it at any time - see Delete your data.
  • Server logs - only as long as we need them to keep the game secure and fix problems.
  • Backups - up to 6 months, then overwritten.
  • Leaderboard entries - 30 days after the week closes; prize receipts stay with your lab.
  • Emails to support - as long as needed to answer you, then up to 2 years.
  • Third parties - under their own retention settings, linked above.

International transfers

We are based in Israel, which the European Commission recognizes as providing adequate protection for personal data. Some of the services listed above process data in the United States and other countries; where they receive data from the EU or UK, they rely on the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

Children's privacy

AI-LABZ is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us at the address below and we'll remove it.

Your choices

Because there's no account, there's nothing to "log out" of. The controls you do have:

  • On Android: Settings → Privacy → Ads lets you delete or reset your advertising ID and opt out of ad personalization. Deleting it stops apps, including this one, from receiving an advertising identifier at all.
  • On iOS: AI-LABZ asks for tracking permission the first time it loads ads. If you decline - or turn it off later under Settings → Privacy & Security → Tracking - iOS withholds the IDFA and our advertising and attribution partners cannot read it.
  • Notifications: turning them off in your device settings stops the push token from being used.
  • Everything else: uninstalling the app and asking us to delete your data removes your lab entirely.

Your rights

Depending on where you live (for example under the EU/UK GDPR, Israel's Privacy Protection Law, or California's CCPA), you can ask us to:

  • tell you what data we hold about your lab and give you a copy;
  • correct it or delete it;
  • restrict or object to how we use it, including for analytics or advertising;
  • send it to you in a portable format;
  • withdraw consent you gave, at any time, without affecting what happened before.

Email ailabzsupport@gmail.com with the Lab and Ref lines from the game's Contact support email so we can find your lab. We answer within 30 days. We won't treat you differently for using these rights. You also have the right to complain to your local data protection authority - in the EU, the one in your country; in Israel, the Privacy Protection Authority.

Security

We take reasonable technical measures to protect the data we store, but no system is perfectly secure, and we can't guarantee absolute security of information transmitted over the internet.

Changes to this policy

If we materially change how AI-LABZ handles data - for example, when a new third-party service goes live - we'll update this page and change the "last updated" date above. Continuing to play after a change means you accept the updated policy.

Contact us

Questions about this policy or your data? Email ailabzsupport@gmail.com.