This privacy policy applies to the Trust the Crew: Aim app for mobile devices, together with any related services operated by Attructure Inc. (collectively, the "Application"). Attructure Inc. is hereby referred to as the "Service Provider".
The Service Provider, Attructure Inc., is the controller responsible for the personal data processed through the Application, which means it decides why and how that data is processed. You can contact the Service Provider using the details in "Contact Us" below.
The Application collects information when you download and use it. This information may include information such as
The Application does not create a user account and does not collect your name, email address, or phone number through gameplay.
The Application or its third-party SDKs may use SDK storage and similar technologies to support analytics and advertising attribution. The Application sends data for usage analytics and install attribution only if you agree on the consent screen shown at first launch. All features of the game remain available if you do not agree.
The Application sends PostHog limited usage and gameplay analytics, including app lifecycle activity, cumulative active use, gameplay progress, tutorial progress, and stage attempts and outcomes (such as the crew used, results, and in-game actions).
These analytics include the Data Deletion ID described below, app and device information, the date and time on your device when each event occurs, a record of your consent (the consent text version and when you agreed), and available advertising-attribution and campaign information. They do not include free-form text or names.
Purpose: investigating defects and understanding which parts of the Application are played.
In PostHog the Service Provider disables person profiles and IP-based geolocation enrichment. Your IP address necessarily reaches PostHog's servers while a request is transmitted, but the project is configured to discard client IP data.
The Application includes the AppsFlyer SDK to measure installs driven by advertising. AppsFlyer receives the Data Deletion ID described below (as the Customer User ID) and may collect the advertising ID (GAID), an AppsFlyer ID, the Google Play Install Referrer, an approximate region derived from the connection IP address, media source and campaign information, and SDK diagnostic and performance information.
The Application sends AppsFlyer limited events about onboarding progress.
Purpose: measuring which advertisements lead to installs, analyzing campaign performance, and supporting advertising attribution and fraud prevention.
For installs attributed to AppLovin, AppsFlyer sends AppLovin limited server-to-server postbacks for install/open activity and selected onboarding progress events. The postbacks include the attribution, campaign, identifier, approximate-region, and event information needed to measure that campaign. The Application does not include the AppLovin SDK and does not display in-app advertising.
After you consent to usage analytics and install attribution, the Application generates a random install identifier (a UUID) when it first initializes those services. It reuses an existing identifier if one is present. The same identifier is sent to PostHog and to AppsFlyer (as the Customer User ID) when those services are enabled. PostHog uses it as the event distinct ID and as the install_id property. This identifier is not a hardware device ID or an account, and it is not linked by the Application to contact information such as your name, email address, or phone number. If you have not consented, the Application does not generate this identifier, and its settings show the Data Deletion ID as not used.
The Application displays this identifier in its settings as the Data Deletion ID. Include that ID when requesting deletion so the Service Provider can locate data associated with the installation in PostHog and AppsFlyer. You may type the ID into your message or attach a screenshot showing it.
The identifier remains the same while the Application's data remains on your device. After you clear the Application's data, a new identifier is generated when the services are next initialized after consent. If you reinstall the Application and Android restores its data from a backup, the same identifier may be restored. If you want deletion of data already transmitted, record the current Data Deletion ID before clearing app data or uninstalling the Application.
Game progress (cleared stages, stars, crew, saved squads, and tutorial progress), settings (language, music and sound volume, and vibration), your consent choice, analytics and attribution state, and the Data Deletion ID are stored on your device.
Analytics and attribution SDKs may temporarily retain events in an on-device pending-send queue until transmission succeeds or the SDK discards them. Data stored by the Application on your device is removed from that device when you clear the Application's data from your OS settings or uninstall the Application. Android may separately back up and restore app data according to your device and Google account settings.
| Service | Purpose | What is sent |
|---|---|---|
| PostHog | Usage analytics and defect investigation | See "What We Send for Usage Analytics" and "About the Data Deletion ID" |
| AppsFlyer | Install attribution, campaign measurement, and fraud prevention | See "What We Send for Install Attribution" |
| AppLovin | Measuring AppLovin-attributed installs and selected onboarding progress events | Limited server-to-server postbacks from AppsFlyer, as described above |
Handling by each service is governed by that company's own privacy policy.
Data is transmitted to external services only as described in this privacy policy. The Service Provider may share information with third parties only in the ways described in this privacy statement.
The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms.
Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.
Please note that the Application utilizes third-party services that have their own Privacy Policy about handling data. Below are links to the Privacy Policy of the third-party service providers used by the Application:
The Service Provider may disclose automatically collected information:
Where the EU General Data Protection Regulation (GDPR), the UK GDPR, the Swiss Federal Act on Data Protection, or similar laws apply, the Service Provider relies on the following legal bases:
Giving consent is voluntary, and all features of the game remain available if you do not agree. Where processing is based on consent, you provide that consent by affirmatively opting in on the consent screen. You may withdraw consent at any time from the settings screen in the Application without affecting processing carried out before withdrawal.
Depending on where you live, you may have the right to:
You can withdraw your consent to analytics and attribution at any time from the settings screen in the Application; after withdrawal, no new data is sent. To request deletion of previously sent data or to exercise your other rights, contact the Service Provider at support@attructure.com and include the Data Deletion ID shown in the Application where relevant. Because the Application does not create accounts, the Service Provider uses the Data Deletion ID to identify the data associated with your installation.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work or where you believe an infringement occurred. In the EEA this is your local data protection authority, in the United Kingdom it is the Information Commissioner's Office (ICO), and in Switzerland it is the Federal Data Protection and Information Commissioner (FDPIC).
The Service Provider does not use your personal data for automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.
This section applies to residents of California and of other U.S. states that have comprehensive consumer privacy laws, and supplements the rest of this privacy policy.
In the preceding 12 months, the Application may have collected the following categories of personal information, only after you consented on the consent screen:
Sources: the Application and the third-party SDKs it includes, on your device. Purposes: those described in "What We Send for Usage Analytics" and "What We Send for Install Attribution". Recipients: PostHog, AppsFlyer, and AppLovin (through the AppsFlyer postbacks), as described in "Third-Party Services We Use".
The Service Provider does not sell personal information in exchange for money. However, for installs attributed to AppLovin, the AppsFlyer postbacks to AppLovin described above may be considered a "sale", "sharing" for cross-context behavioral advertising, or processing for "targeted advertising" under some state laws. You can opt out of this by not agreeing on the consent screen, or by withdrawing your consent at any time from the settings screen in the Application; after withdrawal, no new data is sent. The Service Provider does not knowingly sell or share the personal information of consumers under 16 years of age, and does not collect sensitive personal information.
Subject to applicable law, you may have the right to:
To exercise these rights, contact the Service Provider at support@attructure.com and include the Data Deletion ID shown in the Application's settings. Because the Application does not create accounts, the Service Provider verifies a request by using the Data Deletion ID to locate the data associated with your installation, and may ask for additional information where needed. You may use an authorized agent to submit a request on your behalf; the Service Provider may require proof that the agent is authorized and may ask you to confirm the request directly.
If the Service Provider declines your request, you may appeal by replying to its response at support@attructure.com. The Service Provider will respond to your appeal within the timeframes required by applicable law. If your appeal is denied, you may contact the Attorney General of your state where applicable.
If you live in another country or region, such as Brazil, Canada, Japan, South Korea, India, or Australia, you may have similar rights under local data protection laws, including the rights to access, correct, or delete your personal data and to withdraw your consent. You can exercise them by contacting the Service Provider at support@attructure.com. The Service Provider will respond within the timeframes required by applicable law.
You can stop further collection of information from your mobile device by uninstalling the Application. Uninstalling will stop the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider or to third parties.
To request deletion of transmitted data, record the Data Deletion ID before uninstalling and contact the Service Provider at support@attructure.com.
You can request deletion of personal data associated with your installation by contacting the Service Provider at support@attructure.com and including the Data Deletion ID displayed in the Application's settings. The Service Provider will process your request within the timeframes required by applicable law.
The Service Provider will delete the applicable data from its systems and submit deletion through the applicable third-party services, except where retention is required for legal compliance.
The Application is intended for adults and is not directed to persons under 18 years of age. The Service Provider does not knowingly solicit data from children or market the Application to them.
If the Service Provider discovers that a child has provided personal information through the Application, the Service Provider will delete it as required. If you are a parent or guardian and believe a child has provided personal information, contact the Service Provider at support@attructure.com.
The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider uses reasonable physical, electronic, and procedural safeguards to protect information it processes and maintains. Information sent by the Application is encrypted in transit using HTTPS/TLS. No method of electronic transmission or storage can be guaranteed to be completely secure.
If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.
The Service Provider may update this Privacy Policy when the Application's data practices or service providers change. The Service Provider will notify you of material changes as required by applicable law. The effective date below identifies the current version.
Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at support@attructure.com.
This privacy policy is effective as of 2026-10-23
If you have any questions regarding privacy while using the Application, or have questions about these practices, please contact the Service Provider via email at support@attructure.com.
Attructure Inc.
Dai 6 Hayama Bldg. 4F, 17-2 Nihonbashikabutocho,
Chuo-ku, Tokyo 103-0026, Japan
This privacy policy page was generated by App Privacy Policy Generator