Privacy Policy

1. Who we are

UTG is operated by Yad3V, Saudi Arabia (“operator”, “we”, “us”). UTG is a game companion: discover games, follow releases, track deals, keep collections, and (if you choose) use AI help, notifications, weather, and a map of nearby stores.

Privacy requests, access, export, and deletion: yad3v.dev@gmail.com.

If a later app version adds a new SDK or data type, we will update this page and the App Store privacy nutrition labels. This policy describes the practices listed here; it does not invent extra advertising or analytics vendors.

2. Information we collect

What we collect depends on what you turn on. A lot of UTG works without an account, without location, and without tracking permission.

We do not ask you to type a payment card number into UTG. Apple processes In-App Purchases.

3. How we use it

• Run the companion: catalog, follows, prices, collections, widgets, Live Activities, Watch, Game Center (if you use it).
• Remember onboarding choices (goals, platforms, genres) so the app can stay relevant.
• Send release reminders and re-engagement notifications you allowed.
• Show city weather and nearby stores when location is allowed.
• Generate AI recommendations, chat replies, and Buy/Wait verdicts via our Worker and OpenAI.
• Restore UTG Pro+ and keep subscription status in sync (StoreKit and RevenueCat; Superwall may present the paywall).
• Show ads (Google Mobile Ads); personalize them only if tracking is allowed.
• Measure product use, crashes, remote configuration, and (if used) campaign attribution.
• Answer support, access, and deletion requests; keep the service secure; comply with law.

We do not sell personal information. We do not share followed games, favorites, or collections with advertising networks to target ads.

4. Optional accounts

You can skip sign-in. If you sign in, we use:

• Sign in with Apple
• Google Sign-In
• Firebase Authentication (to persist that session)

We may receive a stable user ID from the provider, and a display name and email address if that provider gives them to the app (Apple’s Hide My Email is respected when you choose it).

Deleting the UTG account does not cancel Apple billing. See Delete account and Subscription Terms.

If you used Sign in with Apple, we honor Apple’s token-revocation requirements when you delete the account or when Apple notifies us that you stopped using Apple ID with UTG.

5. On-device and iCloud

The following are stored on your device and synced with your iCloud via Apple CloudKit, in container iCloud.com.ya-techno.UTG-SwitUI:

• Followed games
• Favorites
• Collections
• Notification preferences
• Onboarding answers (goals, platforms, genres)

We do not operate Apple’s iCloud servers. Apple’s security and retention rules apply to that data. You can delete it in the app (where the app provides a delete/clear control) and in iOS Settings → [your name] → iCloud. We do not use iCloud game lists to build advertising audiences.

6. Notifications

If you allow notifications, UTG uses Apple Push Notification service and OneSignal. We process an APNs device token and a OneSignal player / subscription identifier so we can send:

• Release reminders for games you follow
• Re-engagement reminders (for example, coming back to your watchlist)

Turn notifications off anytime: iOS Settings → Notifications → UTG. You can also unsubscribe OneSignal by disabling notifications, deleting the app, or asking us at yad3v.dev@gmail.com to remove the player ID we hold. Deleting the app from the device typically invalidates that push token.

7. Location

UTG requests When In Use location only, and only for:

• City-level weather via Apple WeatherKit
• Nearby game stores on the map

Location is not used for advertising, is not required to browse the catalog, follow games, or use AI, and you can deny the permission. If you deny it, weather and nearby-store features stay off; everything else still works.

8. AI features

Recommendations, the in-app assistant, and Buy/Wait verdicts are generated as follows:

1. The app sends your prompt and the game-preference context needed for that request to our backend, a Cloudflare Worker at utgapp.youssefzx.workers.dev.
2. That Worker calls OpenAI to produce a response and returns it to the app.

IGDB Twitch app tokens and OpenAI credentials are kept on the server (the Worker), not shipped in the app binary.

We use this path to answer you in the moment. We do not train foundation models on your chats. If that ever changes, this policy will say so before we do it. OpenAI processes the request under its own terms as our inference provider.

9. Game catalog and media

Catalog, deals, streams, and images come from third-party APIs. Typical traffic:

• IGDB / Twitch API — game metadata, via the same Cloudflare Worker using a Twitch app token.
• Steam Web API — news, player counts, and (if you opt in) a public Steam library.
• CheapShark — deal / price data.
• Epic Games — free promotions.
• Xbox / Microsoft catalog — Game Pass listings.
• GamerPower — giveaways.
• ProtonDB — Steam Deck / Proton compatibility.
• Twitch Helix — live streams.
• YouTube — thumbnails and embeds.
• Unsplash — some images.

Those services may log technical data (such as IP address, user agent, and the query) under their own policies. Game names, artwork, and trademarks belong to their owners. Availability and prices can be wrong or region-locked; confirm on the official store before you buy.

10. Purchases and paywalls

UTG Pro+ and optional tips are Apple In-App Purchases through StoreKit. Apple collects payment method details. We do not receive full card numbers.

RevenueCat receives subscription and entitlement status so the app can restore Pro+ across devices. RevenueCat is not the payment processor.

Superwall may be used to present paywalls (which placement you see, and related paywall analytics). Purchases still complete through Apple.

See Subscription Terms and Pricing.

11. Ads and tracking

The app may show ads using Google Mobile Ads.

App Tracking Transparency (ATT) and IDFA: we request tracking permission only after you allow it, and the ATT prompt is deferred in onboarding (it is not part of the first-launch questionnaire). Personalized ads that rely on tracking across other companies’ apps and websites run only if you allow tracking. If you deny ATT, you may still see ads that are not personalized via IDFA (for example contextual or SKAdNetwork-based measurement).

We may participate in Apple SKAdNetwork so advertisers can measure installs in a privacy-preserving way without a tracking ID.

This website does not run a cookie-consent wall and does not serve those mobile ads.

12. Analytics, crash, remote config, and attribution

• Firebase Analytics — product usage (for example screens and events).
• Firebase Crashlytics — crash reports and device/OS context needed to fix bugs.
• Firebase Remote Config — feature flags and configuration payloads.
• AppsFlyer — may be used for campaign attribution (which ad or link led to an install). If the SDK is not in a given build, it is not collecting.
• We may also record telemetry-style product analytics (feature use, performance) when present in the build, for operating and improving UTG — not for selling your game list.

13. Other Apple features

• Game Center — optional; used only if you sign into Game Center.
• Widgets and Live Activities — show data you already have in the app (for example followed dates). They run on device under Apple’s widget/activity rules.
• Calendar — if you allow it, UTG can add release events to your calendar. We do not harvest your full calendar for ads.
• Photo library (add only) — if you save an image from the app, iOS may ask to add to Photos. We do not need full library read access for that flow.
• WeatherKit, CloudKit, Push, MapKit / nearby stores, Sign in with Apple, StoreKit — as described above.

14. Processors and sharing

We share information with companies that help us run UTG, and when the law requires it. We do not sell it. We do not share your game lists with ad networks for targeting.

Processors and platforms include: Apple (App Store, StoreKit, CloudKit, Push, WeatherKit, maps, ATT/SKAdNetwork, Game Center), Google (Sign-In, Firebase Auth / Analytics / Crashlytics / Remote Config, Google Mobile Ads, YouTube), Cloudflare (Worker proxy), OpenAI (inference), OneSignal (push), RevenueCat (entitlements), Superwall (paywall presentation, if used), AppsFlyer (attribution, if used), and the catalog/media APIs in section 9.

Support email is read by Yad3V to handle your request.

We may disclose information if required by law, to protect users or the service, or in connection with a merger or transfer of the app, in which case this policy (or a successor notice) will still apply to the data as far as the law allows.

15. Third-party privacy policies

Those companies process data under their own policies. Read them here:

• Apple — https://www.apple.com/legal/privacy/
• Google — https://policies.google.com/privacy
• Firebase (Google) — https://firebase.google.com/support/privacy
• IGDB / Twitch — IGDB https://www.igdb.com/privacy_policy · Twitch https://www.twitch.tv/p/legal/privacy-notice/
• OpenAI — https://openai.com/policies/privacy-policy
• OneSignal — https://onesignal.com/privacy_policy
• RevenueCat — https://www.revenuecat.com/privacy
• CheapShark — https://www.cheapshark.com/
• Epic Games — https://www.epicgames.com/site/en-US/privacypolicy
• Microsoft — https://privacy.microsoft.com/privacystatement
• Steam (Valve) — https://store.steampowered.com/privacy_agreement/

Related processors you may also encounter in the app: Cloudflare (privacy policy), Superwall (privacy), AppsFlyer (privacy), Unsplash (privacy), ProtonDB (protondb.com), GamerPower (gamerpower.com), YouTube (Google policy above). This website also sends page analytics to our self-hosted Umami at umami.yadev.tech.

16. This website, cookies, and analytics

This marketing and legal site is static HTML. We do not set advertising cookies and we do not block reading this policy behind a consent popup. We do not load Google Analytics, ad pixels, or a tag manager.

We run Umami ourselves at https://umami.yadev.tech (Yad3V, on our VPS). The pages load a small script from that host. Umami records page path, referrer, browser, operating system, device type, screen size, and country so we can see which pages are used. It is not used to serve ads or to sell a profile of you. We honor browser Do Not Track. Server logs on the host may still record IP address, user agent, and path.

The iOS app is not a website cookie environment. Device ads, ATT, SKAdNetwork, Firebase, AppsFlyer, and OneSignal are described in the sections above, not as browser cookies. Details for this site: cookies.html.

17. Legal bases if you are in the EEA or UK

Where GDPR or the UK GDPR applies, we rely on:

• Contract — providing the app you downloaded, optional account features you asked for, and paid features you purchased.
• Legitimate interests — running a secure service, debugging crashes, understanding which features work, fetching catalog data, and preventing abuse. We balance those interests against your rights.
• Consent — tracking / IDFA (ATT), When In Use location, push notifications, and creating an optional account where consent is the appropriate basis. You can withdraw consent in iOS Settings (and in the app where we provide a control) without affecting the lawfulness of processing before withdrawal.

You may lodge a complaint with your local supervisory authority (for example the ICO in the UK, or your EEA DPA).

18. GDPR (short)

If you are in the EEA, UK, or Switzerland, you may have the right to access, rectify, erase, restrict, or port personal data we hold, to object to processing based on legitimate interests, and to withdraw consent. You are not required to create an account to use core catalog features. To exercise rights: in-app Settings where available, delete-account.html, or yad3v.dev@gmail.com. We will need enough information to know it is you. Apple, Google, and iCloud controls are exercised in those companies’ products as well.

19. California (short)

We do not sell personal information and we do not share personal information for cross-context behavioral advertising as those terms are used in the CCPA/CPRA. We do not share your game lists for advertising. If we ever did, we would say so here and provide an opt-out before starting. You may request know, delete, and correct to the extent we hold personal information, via yad3v.dev@gmail.com. We will not discriminate against you for exercising those rights. We do not have actual knowledge that we sell or share the personal information of consumers under 16.

20. Retention

• Firebase / account profile — until you delete the account, plus a short period to finish deletion or meet a legal hold.
• iCloud collections and onboarding answers — until you delete them in the app or in iCloud; Apple retains per iCloud rules.
• Push tokens / OneSignal player IDs — while notifications are enabled or until the token is invalid, you unsubscribe, or you ask us to delete.
• AI requests — processed to return a response. We do not keep a public-facing chat archive on this website. Server and provider logs may exist for a limited operational period under Cloudflare/OpenAI policies.
• Analytics, crash, Remote Config, ads, attribution — according to Google, Apple, AppsFlyer (if used), and Superwall (if used) retention defaults, unless we configure shorter windows.
• Support email — as long as needed to resolve the thread and keep a minimal record.

21. Security

This website is served over HTTPS. The iOS app talks to Apple, Google, and our Worker over encrypted connections in normal operation.

Secrets for IGDB (Twitch app token) and OpenAI are stored on the Cloudflare Worker, not in the app binary. That reduces (but does not eliminate) the risk of key extraction from a downloaded IPA.

No method of transmission or storage is perfectly secure. Limit what you type into AI chat. Use a device passcode. Report suspected vulnerabilities to yad3v.dev@gmail.com.

22. International transfers

Yad3V is established in Saudi Arabia. Several processors are in the United States (including Apple, Google, OpenAI, OneSignal, and RevenueCat) and may process data there or in other countries. Catalog APIs and Cloudflare may also process requests outside Saudi Arabia.

Where a transfer law applies, we rely on the contractual and legal mechanisms those providers offer (for example Standard Contractual Clauses) and on your consent where that is the basis for a feature you turned on.

23. Your rights and how to exercise them

Depending on where you live, you may have rights to access, delete, and export personal data, and to correct it, restrict it, or object to certain processing.

How:

• In the app — Settings: sign out, notification controls, delete account (when shown), clear local/iCloud lists where the app provides that control.
• Web instructions — delete-account.html (account deletion does not cancel UTG Pro+ with Apple).
• Email — yad3v.dev@gmail.com for access, export, or deletion of data we control (Firebase account records, support mail, OneSignal player ID we hold).
• Sign in with Apple — iOS Settings → [your name] → Sign-In & Security → Sign in with Apple → UTG → Stop Using Apple ID. We revoke tokens as Apple requires when you delete the in-app account or when Apple sends a revocation.
• iCloud data — delete in-app and/or iOS Settings → [your name] → iCloud. We cannot empty your iCloud from this website.
• OneSignal — disable UTG notifications in iOS Settings, delete the app, or email us to unsubscribe the player ID.
• Tracking / ads — iOS Settings → Privacy & Security → Tracking, and Settings → UTG / Ads (as iOS labels them).
• Subscriptions — iOS Settings → [your name] → Subscriptions. Apple handles refunds.

We may need to verify the request. We aim to acknowledge promptly and complete deletion of data we control within 30 days unless a law requires a longer hold.

24. Children

UTG is not directed at children under 13, or under 16 in regions that set that age for this kind of service. We do not knowingly collect personal data from children. If you believe we have, email yad3v.dev@gmail.com and we will delete it. Parents or guardians who need help with an Apple ID or purchases should use Apple’s family tools; we cannot reset an Apple ID from this site.

25. Changes

We will post updates on this page and change the “Last updated” date. Material changes to app data practices will also be reflected in App Store Connect privacy labels when we ship a version that includes them. Continued use after an update means the new policy applies going forward, except where a law requires extra notice or consent.

26. Contact

Privacy, access, export, and deletion:
yad3v.dev@gmail.com

Operator: Yad3V
Country: Saudi Arabia
App: UTG – Up To Game Pro · App Store ID 1480143119

Related: Terms of Use (EULA) · Subscription Terms · Delete account · Cookies · Support