GHOST Privacy Policy
This policy explains how the GHOST app ("GHOST" or "the app") handles information. GHOST is published by Global Intelligence Laboratory LLC ("GIL", "we", "us"). It applies to the iOS and Android versions of the app and to this website.
1. Information stored on your device
When you first open GHOST you choose a display name (your "handle") and answer a few onboarding questions: your goal, whether you prefer the red-team or blue-team path, and your experience level. As you play, the app records your progress, scores and settings such as sound and haptics. The leaderboard in this version of GHOST is also stored only on your device.
All of this is saved in the app's local storage on your phone or tablet. It is not sent to GIL and we have no access to it. GHOST does not run an account system or a game server.
2. Subscriptions and purchases
GHOST offers an optional auto-renewing subscription, "GHOST Operator" (monthly or annual). Purchases are made through the Apple App Store or Google Play, which process your payment under their own privacy policies. GIL never receives your name, payment card details or billing address.
To check whether you have an active subscription, GHOST uses RevenueCat, a subscription-management service that works on our behalf. RevenueCat receives:
- a random, anonymous app user ID that RevenueCat generates (not your handle, email address, or Apple or Google account);
- your purchase and subscription status, with the store receipts and transaction records Apple or Google provides;
- basic device and app information such as device model, operating system version, app version, locale and currency;
- your IP address, which is part of any normal internet request.
This information is used only to validate purchases, unlock the features you paid for, restore purchases, prevent fraud, and give us aggregate subscription reports. We cannot use it to identify you personally and we do not try to. RevenueCat does not use it for advertising.
3. When you email us
The "Report a Bug", "Request a Tool" and "Request a Campaign" options open your own email app with a draft message. Nothing is sent unless you choose to send it. If you do, we receive your email address and whatever you write, and use it only to reply and to improve GHOST. We do not add you to a mailing list, and we delete feedback emails once they are no longer needed.
4. What we do not do
- No advertising or advertising SDKs.
- No analytics, crash-reporting or other third-party tracking tools.
- No tracking across other apps or websites, and no use of your device's advertising identifier.
- No access to your location, contacts, camera, microphone or photos.
- No selling, renting or "sharing" of personal information as those terms are used in privacy laws.
GHOST is an educational game. Every command in it is simulated inside the app. Playing does not scan, connect to or interact with any real network or system.
5. Beta program and this website
If you ask to join the GHOST beta, by email or with the form on this site, we receive your name, email address, the device you plan to test on, and anything you choose to write. We use it only to run the beta: to send you an invite, follow up about your testing, and reply to your feedback. We do not add you to a marketing list or share it with anyone except as needed to send a TestFlight or test-build invitation through Apple or Google.
Form submissions are processed by Cloudflare, which hosts this website, and delivered to our inbox. We delete beta details when the beta ends or when you ask, whichever comes first. This website does not use cookies, analytics or tracking scripts. Cloudflare, as our hosting provider, processes standard request data such as IP addresses to deliver and protect the site.
6. Third parties
The only third parties involved in the app are Apple and Google, for distribution and payments, and RevenueCat, for subscription management. RevenueCat processes data under a contract with us and may use it only to provide its service to GIL. Cloudflare hosts this website. We may disclose information if the law requires it, for example in response to a valid court order; given how little we hold, there is usually nothing to disclose.
7. Keeping and deleting your data
On your device: your data stays on your device until you remove it. You can erase it at any time with Settings → Delete Account or Clear All Data in the app, and uninstalling GHOST also deletes it. We cannot recover it for you, because we never had a copy.
Subscription records: RevenueCat keeps them while they are needed to provide your subscription and to meet tax, accounting and fraud-prevention obligations. To cancel, use your Apple ID or Google Play subscription settings; deleting the app does not cancel a subscription. To ask us to delete your RevenueCat record, email us (we may ask for your order ID so we can find it).
8. Security
Data on your device is protected by your device's own security, such as your passcode and app sandboxing. Communication with RevenueCat and this website is encrypted in transit using HTTPS. No method of storage or transmission is perfectly secure, but we keep the amount of data involved as small as possible.
9. Children
GHOST is not directed at children under 13, and we do not knowingly collect personal information from children. If a child uses the app anyway, their handle and progress stay on the device. If you are a parent or guardian and believe your child made a purchase or contacted us, email us and we will delete the related information.
10. Your privacy rights
Wherever you live, you can ask what information we hold about you, or ask us to correct or delete it, by emailing support@gil.consulting. We will respond within 30 days, or sooner if the law requires, and we will not treat you differently for exercising your rights.
EEA, UK and Switzerland: GIL is the controller of the limited personal data described here. We rely on performance of a contract (providing purchases you make), legitimate interests (preventing fraud, running the beta, replying to you) and legal obligation (keeping required transaction records). You have the rights to access, rectify, erase, restrict, object and port your data, and to complain to your local data protection authority. GIL is based in the United States; transfers there are protected by the safeguards the law requires, such as Standard Contractual Clauses.
California and other US states: we do not sell or share personal information for cross-context behavioral advertising, and we do not use or disclose sensitive personal information. You can request to know, correct or delete your personal information by emailing us. Because GHOST does not track you across sites or apps, Do Not Track and Global Privacy Control signals do not change how it behaves; we would honor them in any case.
11. Future features
We may later add optional online features, such as a global leaderboard. If we do, this policy will be updated before the feature is released, the feature will be optional, and the app will explain what it sends before anything leaves your device.
12. Changes to this policy
If we change this policy, we will post the new version on this page and update the date above. If a change significantly affects how your information is handled, we will also tell you in the app before it takes effect.
13. Contact
Global Intelligence Laboratory LLC
Email: support@gil.consulting