Privacy Policy

1. Who we are

Fimble is made by Kabile Yazılım ve Bilişim Hizmetleri Limited Şirketi, trading as Kabile Studio (“Kabile Studio”, “we”, “us”). We are the data controller for the personal information described in this policy. You can reach us at support@kabile.studio.

This policy covers the Fimble mobile apps, the Fimble web player and this website (together, “Fimble”).

2. What we collect

You can play Fimble without creating an account with an email address or password. When you first open the app, we create a guest profile tied to your device.

Information you give us

• Profile details from the opening chapter: the name you choose, your date of birth, your gender, what you are looking for in the story, the story themes you pick, your home city and home type in the game, and the avatar you choose.
• Your messages and choices: what you write to characters, the choices you make in scenes, and the story that results.
• Messages to us, if you contact support.

Information collected automatically

• Identifiers: a random player ID and world ID we create, an installation ID generated by the app, and a push notification token if you allow notifications.
• Device and app information: device model and operating system, app version, language, time zone, and IP address.
• Usage information: which screens you open, how long you spend on them, and the actions you take (for example, starting a chat or claiming a reward).
• Session recordings: in the store version of the app, and only with your consent where the law requires it (see Session recordings and chat review), we record sessions. A recording shows what appears on your screen and how you interact with it, including your conversations with the AI characters.
• Crash and error reports: technical details about crashes and errors, including device state at the time.
• Advertising information: if you see ads, your device’s advertising ID (where you allow it) and the ad interactions described under Ads.
• Purchase information: what you bought, when, and your subscription status. We do not receive your card or payment details.

On this website

This website (fimble.world) does not use cookies and shows no ads. Our hosting provider processes standard request data, such as your IP address, to deliver the pages.

Usage analytics and session recordings: we use PostHog to understand how people use the website. We record which pages you open, how long they stay open and how far you scroll, which parts of the page you see, and a few actions (for example opening a character’s profile, trying the chat preview, opening a question, or tapping “Get the app” or the Google Play button), and PostHog records the session: what the page showed and where you moved, scrolled and tapped. PostHog keeps a random ID for your browser and the current session in your browser’s local storage, so the pages you open in one visit can be seen together. These records are not linked to your name, your account or your game. We keep a copy of the same events (with the page’s address without its parameters, the time, your browser’s user agent, your device type and PostHog’s random IDs, but not your IP address) on our own servers.

Our ads lead to the website’s install page (fimble.world/install/), which records where you came from:

• The link’s parameters: the install page saves the parameters of the link that brought you (for example the campaign name and the ad network’s click ID) in your browser’s local storage, replacing any saved earlier, so it still knows them if you come back without them. It also saves a random browser ID there, in the format Meta uses, so the visits and taps from your browser can be measured together.
• Visits and taps: when the install page opens, and when you tap the Google Play button or follow our install link to Google Play, the link’s parameters are sent to us, and we store them with the time, your IP address, your browser’s user agent and your device type (Android, iPhone or iPad, or another device).
• Your new game: when you start a new game in the app, we link it to the latest tap on that button from the same IP address in the 15 minutes before; if there is none, to the latest tap from the same kind of phone in that time.
• Google Play: the button passes the campaign name and an ID of your tap to Google Play in the link, as Google Play’s install referrer.
• Meta: we send each visit, each tap on the button, each new game linked to a tap and activity in that game to Meta (the company behind Facebook and Instagram) from our servers. Each comes with the time, the IP address, browser user agent and browser ID of the visit or tap, and Meta’s click ID if you came from one of our ads on Facebook or Instagram, so Meta can measure and improve our ads. The website loads no Meta code and sets no cookie.

3. How we use it

• To run the game: to create and keep your world, generate the characters’ replies, remember your story, and send you notifications you have allowed.
• To personalize your story: your name, birthday, gender, preferences and themes shape how characters talk to you and which stories you are offered.
• To process purchases and give you what you bought, such as Fimble Pro, gems and energy.
• To show ads to players who do not have Fimble Pro, and to reward you for watching them.
• To understand and improve Fimble: to measure how features are used, find and fix bugs, and improve the characters and stories.
• To measure our ads: to learn which ads and campaigns bring new players to Fimble, from what the install page records (see What we collect).
• To keep Fimble safe: to prevent fraud and abuse and enforce our rules.
• To meet legal obligations, such as keeping tax records for purchases or answering lawful requests.

We do not sell your personal information.

4. AI characters and your messages

Every character in Fimble is an AI, and every message a character sends is written by AI, not by a person. We tell you this in the app before your first conversation. The characters are fictional. To write a reply, we send your message, recent conversation history and relevant details from your story (for example, your in-game name and what the character remembers about you) to our AI provider, OpenAI. We also use OpenAI to create the text summaries the game uses to remember past conversations.

Please do not share sensitive information about yourself or others in chats, such as passwords, financial details, health information or anyone’s contact details. Characters are not real people and cannot give professional advice.

5. Session recordings and chat review

Conversations in Fimble are not between two people: they are between you and our AI characters, and every message is processed on our servers to generate the reply. We keep these conversations, and in the store version of the app we record sessions, for two reasons:

• Safety and our guidelines: to check that conversations, both what players write and what the AI replies, follow our content guidelines, and to find and stop misuse.
• Improving Fimble: to understand how people play, find and fix problems, and improve the characters and stories.

Consent: in the European Union and the European Economic Area, the United Kingdom and Switzerland, session recording starts only if you agree, in the privacy choices the app shows when you first open it, to storing and accessing information on your device and to using it to develop and improve products. Until you answer, nothing is recorded. Elsewhere, recording starts once the app has confirmed that consent is not required where you are.

Turning recordings off: wherever you are, you can stop session recordings at any time in the app under Settings → Privacy → Allow session recordings. Where the law gives you privacy choices, you can also change them in Settings → Privacy → Privacy choices.

Usage analytics and crash reports are different: they are minimal, non-invasive logs of what happened in the app (for example, which screen opened or which action failed) and technical details of errors. They do not record your screen. We need them to find and fix errors and keep Fimble working, so we collect them on the basis of our legitimate interest, without asking for consent.

6. Who we share it with

We share information only with service providers that help us run Fimble, under contracts that limit how they can use it, and only as much as each one needs:

• Amazon Web Services (United States): hosting, databases and storage for the game and this website.
• OpenAI (United States): generating character replies and story memory.
• RevenueCat (United States): managing purchases, subscriptions, gems, and verifying rewarded ads.
• Apple and Google: processing purchases made through the App Store and Google Play, and delivering push notifications.
• Expo (United States): app updates and sending push notifications.
• Google AdMob: showing ads (see Ads).
• PostHog (United States): product analytics and session recordings in the store version of the app and on this website.
• Sentry (United States): crash and error reports.
• Meta (Ireland and United States): measuring our ads on Facebook and Instagram, from what the install page records (see What we collect).

We may also disclose information if the law requires it, to protect the rights and safety of our players or others, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information.

7. Ads

If you do not have Fimble Pro, the app can offer you an optional rewarded video ad, provided by Google AdMob, in exchange for free energy. We do not show other ads, and Fimble Pro members are not shown ads.

When an ad is shown, Google may collect your device’s advertising ID, IP address, device information and how you interact with the ad, to deliver the ad, measure it, prevent fraud and, if you agree, personalize ads. We and RevenueCat receive information that the ad was shown and watched, and the revenue it earned, so we can give you your reward.

• Consent: in the European Union and the European Economic Area, the United Kingdom, Switzerland and other places where the law requires it, the app asks for your choices before any ad is requested. You can change them anytime in the app under Settings → Privacy → Privacy choices.
• iPhone and iPad: we only access your advertising identifier if you allow tracking in Apple’s prompt. You can change this anytime in iOS Settings → Privacy & Security → Tracking.
• Android: you can reset or delete your advertising ID in your device’s settings (Settings → Privacy → Ads, or Google → Ads).

Learn more about how Google uses information at policies.google.com/technologies/partner-sites.

8. Purchases

Purchases are processed by Apple or Google under their own terms and privacy policies. We and RevenueCat receive a record of the purchase (the product, price, date, and subscription status) linked to your player ID, but never your payment card details.

9. Legal bases

Where the EU or UK General Data Protection Regulation (GDPR) or the Swiss Federal Act on Data Protection applies, we rely on:

• Performance of a contract: to provide the game, your story and the items you buy.
• Legitimate interests: to keep Fimble safe, including checking that conversations with the AI follow our guidelines, to understand and improve Fimble and fix problems, and to measure which of our ads bring new players, balanced against your rights.
• Consent: for personalized ads, access to your advertising identifier, push notifications, and session recordings where the law requires consent. We keep a record of your answer and when you gave it. You can withdraw consent at any time without affecting what happened before.
• Legal obligations: for example, keeping records of transactions.

10. How long we keep it

We keep your profile, world and conversations for as long as you play, so your story is there when you come back. If you log out without asking for deletion, the world is closed and you can no longer reach it, but a copy stays on our servers until you ask us to delete it or we no longer need it for the purposes above. If you log out and ask for deletion, your data is deleted as described in Deleting your data. Analytics, the install page’s records, session recordings and crash reports are kept only as long as needed to analyze them and are then deleted or anonymized. Purchase records are kept as long as tax and accounting laws require.

11. Deleting your data

You can delete your data in the app, without emailing us: go to Settings → Privacy → Delete my data (or Settings → Log out and tick Delete all world and player data), and confirm. This deletes the data we store about you on our servers (your profile, worlds and conversations) and all Fimble data on your device except your random player ID, which stays on the device so a purchase can follow you. Logging out without ticking the box does not delete your data.

If you have already deleted the app, email support@kabile.studio with the subject “Fimble data deletion request”, and tell us the in-game name you used, your device (for example “iPhone 15” or “Pixel 8”) and roughly when you started playing, so we can find your data. We will delete it within 30 days.

Either way, we keep records we must keep by law (such as purchase records), and deleting your data does not cancel an active subscription: cancel it in the App Store or Google Play.

12. Your rights

Depending on where you live, you may have the right to:

• know what personal information we hold about you and get a copy of it;
• correct information that is wrong;
• have your information deleted;
• object to or restrict certain uses, including opting out of personalized ads (“sharing” for cross-context behavioral advertising under California and other US state laws);
• receive your information in a portable format;
• withdraw consent you have given; and
• complain to your data protection authority (in the EU, the supervisory authority where you live or work; in the UK, the Information Commissioner’s Office; in Switzerland, the Federal Data Protection and Information Commissioner).

In the app: you can use the most common rights directly, without contacting us. Under Settings → Privacy you can opt out of personalized ads and change your other privacy choices (where the law gives you them), turn off session recordings, and delete your data.

By email: for anything else, or if you have already deleted the app, email support@kabile.studio. We will answer within the time the law allows, usually within 30 days. We will not treat you differently for using your rights.

13. International transfers

Kabile Studio is based in Turkey, and Fimble’s servers and most of our service providers are in the United States. Your information may therefore be processed in countries other than your own, which may have different data protection laws. Where the law requires it, we protect these transfers with appropriate safeguards, such as the European Commission’s Standard Contractual Clauses and their UK and Swiss equivalents.

14. Security

We protect your information with encryption in transit, access controls, and encrypted storage on your device for sensitive drafts. No system is perfectly secure, but we work to protect your information and will notify you and the authorities of a breach where the law requires it.

15. Age requirement

Fimble is for adults. You must be 18 or older to use it, and the app asks for your date of birth before you can play. We do not knowingly collect information from anyone under 18. If you believe someone under 18 is using Fimble, contact us and we will delete their information.

16. Changes to this policy

We may update this policy as Fimble changes. We will post the new version on this page with a new “Last updated” date and, for significant changes, let you know in the app.

17. Contact us

Kabile Yazılım ve Bilişim Hizmetleri Limited Şirketi (Kabile Studio)
Email: support@kabile.studio