1. Overview
KOCHI — A Game of Three is published by One T Media Group in Ontario, Canada. This policy describes information used to run the game, provide online accounts and matches, save progress, handle purchases and advertising, and respond to support requests. Local play does not require a KOCHI account.
2. Accounts and Sign-In
Online features use a Firebase account identifier, including when you start as a guest. If you choose Apple, Google or email sign-in, Firebase Authentication processes the sign-in credentials and account information needed to authenticate you. This includes your account identifier, linked sign-in providers and email address supplied by you or the provider. Apple may supply a private relay email address if you choose Hide My Email.
Email passwords are handled through Firebase Authentication. Your password is not part of your public player profile. Authentication services also process technical information such as IP addresses and user-agent information for security and account management.
3. Profiles, Friends and Online Matches
We store your chosen display name, built-in avatar and optional country, along with ratings, match moves and results, matchmaking requests, and friend requests and relationships. We use these records to connect players, validate turns, calculate rankings and provide friends and rematch features.
Your display name, avatar, selected country and competitive information can be visible to other players through matches, rankings and friends features. Your account email is not displayed as part of your public player profile. Country is optional and selected by you; it is not a request for your precise location.
4. Progress and Cloud Journey
Game progress, XP, unlocks, settings, selected cosmetics and local game state are stored on your device. When you use journey backup and sync, progress is also stored privately in Firebase under your KOCHI account so you can restore it on another device. An unfinished local match stays on the original device.
The browser game stores progress, settings, account-specific saves and recovery copies in browser storage on this device. Clearing site data removes these local copies. Cloud backup and restore are actions you choose; browser and cloud journeys are not automatically merged. Browser online features use the same Firebase services described above, and reCAPTCHA Enterprise through App Check verifies browser requests. The current browser release has no advertising or purchase checkout; recognizing mobile purchases on the web is not yet enabled.
5. Purchases
Apple handles iOS payments and Google Play handles Android payments for the one-time Remove Ads purchase. On iOS, KOCHI uses StoreKit purchase and transaction information to verify ownership and restore purchases. On Android, KOCHI sends the Google Play purchase token with your Firebase account identifier and app-verification token to our purchase-verification service. The service checks the purchase with Google Play and acknowledges completed purchases; raw purchase tokens are not intentionally stored or logged by our service. We do not receive your payment-card details. Remove Ads disables automatic ads; optional videos for bonus XP remain available when you choose to watch them.
Purchase ownership uses the Apple Account or Google Play account that made the purchase and is separate from your KOCHI account. Purchases do not transfer between Apple and Google Play. Deleting a KOCHI account does not refund a store purchase. Android keeps a previously verified Remove Ads status locally for offline use and refreshes it when verification is available.
6. Advertising and Choices
KOCHI uses Google AdMob for automatic and optional rewarded ads, with Google's consent tools to present applicable choices. The app requests non-personalized ads and disables AdMob's publisher first-party identifier. Non-personalized ads still involve data processing for delivery, measurement and fraud prevention.
Google's advertising services can process IP addresses, approximate location inferred from those addresses, device and app identifiers, ad interactions, and diagnostic information. Collection depends on the SDK, device settings and consent choices. See Google's iOS advertising SDK data disclosure, Android advertising SDK data disclosure and Google's Privacy Policy for details.
Rewarded videos are optional; you can continue playing without watching them. Where available, use the app's advertising privacy options to review your consent choices. KOCHI's current configuration does not request Apple's permission to track you across other companies' apps and websites.
7. Security and Technical Information
Firebase App Check, Apple's device-attestation services on iOS and Google Play Integrity on Android help check that requests come from the app. These services process integrity checks and security tokens. Backend services also process technical and operational information, including request and error logs, to operate online play and investigate abuse or failures.
Apple, Google and service providers may process performance and crash information through their services and your device settings. We use access controls and other technical measures to protect information, but no electronic system can guarantee complete security.
8. Service Providers and Processing Locations
KOCHI uses Google Firebase Authentication, Firestore, Cloud Functions and App Check for accounts, online play, storage and security; Google Sign-In and Sign in with Apple for optional account access; Google AdMob and its consent tools for advertising; and Apple StoreKit or Google Play Billing for purchases, depending on your platform.
These providers process information to deliver their services. Information may be processed outside your province or country, including in the United States, where our online backend is hosted. Provider handling is described in Firebase's privacy and security information, Google's Privacy Policy and Apple's Privacy Policy.
9. Account Deletion and Retention
On iOS, request deletion in Online → Profile → Account settings → Delete account. On Android, open Online & account → Account & saved journey → Delete online account. The current Android test build supports in-app deletion for email-only accounts; Google- or Apple-linked accounts can request deletion through contact@onetmediagroup.ca, or use the supported account-deletion flow on iPhone. We may ask you to verify ownership; do not send your password. You may be asked to authenticate again. Deletion removes your authentication account, online profile, rating, friends and requests, and cloud journey. Some cleanup runs in the background rather than completing immediately.
Shared match records are retained with your account identifier replaced so that other players' match records can remain. A hashed deletion marker is retained to prevent old credentials from recreating the deleted account. Provider backups and security logs follow the providers' retention schedules and may not disappear immediately.
Local progress and recovery copies on your device are separate from online account deletion. Support correspondence and operational records are retained as needed for support, security, recordkeeping and applicable legal obligations. Contact us if you need help requesting deletion or understanding retained information.
10. Support
If you contact us, we receive your email address, message and any device details or screenshots you include. We use these to respond and investigate the issue. Please do not send passwords, payment-card details or unnecessary sensitive information.
11. Children and Families
The Android app is intended for ages 13 and up. Local play can be used without creating an account. Parents and guardians should supervise children's use of online accounts, advertising and purchases and use the controls available on their devices. If you believe a child has provided personal information that should be removed, contact us so we can investigate and assist.
12. Your Choices
You can change your player profile, leave your country unset, choose whether to use cloud journey backup, decline optional rewarded videos, restore purchases and request account deletion. For access, correction or other privacy requests, contact us below. We may need to verify account ownership before acting on a request.
13. Policy Updates
We update this page when the app or its information practices change. The date above identifies the latest revision.
14. Contact
For KOCHI privacy questions, email contact@onetmediagroup.ca.
One T Media Group
Ontario, Canada