Who this covers
Barakit is an independent studio operated by Julfikar. This policy covers Veiled Kingdom, Nofont, HardPass, Fih, and the Barakit studio website. For apps still in development, these sections describe the current functionality. We update this policy as our products and data practices change.
Veiled Kingdom
Online games
Veiled Kingdom processes information needed to run multiplayer rooms and restore play, including player names, room codes, public chat, role assignments, game actions, and results. Other room participants and enabled spectators can see public information and chat. Private role information is restricted according to the game’s rules.
Optional accounts and browser storage
Guest play is available without an account. An optional account uses a username and password and stores protected login information, recovery information, sign-in sessions, and linked game records. Registration does not ask for an email address. Browser cookies and locally saved seat information support sign-in, remembered names, and reconnection.
Service statistics
The game keeps operational statistics, including game summaries and activity associated with account identifiers or random guest-browser identifiers. These help us understand use and reliability. This is first-party service analytics, not advertising tracking. Analytics records do not include chat text, passwords, private roles, ballots, raw network addresses, or browser fingerprints.
The guest statistics cookie and identity-linked activity have a 180-day retention period. Clearing cookies removes the guest identifier from your browser but does not immediately delete previously recorded activity. Supported browser privacy signals disable anonymous visitor identification and visit tracking. Necessary game processing continues, and account-associated game activity can still contribute to service statistics.
Retention and deletion
Inactive rooms and their associated room history are removed after seven days of inactivity. Account records remain until you delete the account using the game’s account controls. Successful deletion removes login data, personal records, and account-linked statistics identities; it does not remove shared room chat immediately. Game summaries without personal identifiers may remain. Deleted records may remain in rotating backups until those copies expire; the documented server backup schedule retains 30 daily backups.
Nofont
Writing on your device
Nofont works without an account. Writing, handwriting generation, and text recognition happen on your device. Notes, settings, handwriting drafts, and generated fonts stay locally unless you explicitly enable Cloud Sync. Document text, titles, tags, drawings, photographs, recognized text, and font files are not sent for usage analytics.
Optional accounts and Cloud Sync
If you create an account, the account service processes your email address, account identifier, optional name, and sign-in information. Credentials are kept in protected storage on your device. Signing in alone does not enable sync.
When you explicitly enable Cloud Sync, notes, handwriting drafts, generated fonts, tags, favorites, and saved looks are uploaded to your account to make them available across your devices. Signing out stops sync and preserves local copies. Use Delete account and cloud work in Settings → Account to request removal of the account and cloud copies. After successful deletion, local copies still need to be removed separately on each device.
Write to many
Recipient names, postal addresses, and a remembered return address stay on that device in files excluded from device backups. They are not synced, uploaded, or included in analytics. They leave Nofont only in letters, envelopes, or notes you deliberately export, print, or save.
Optional usage analytics
Analytics are off until you choose “Share usage data” in the “Help improve Nofont?” prompt. “Share usage data” and “Not now” are equally available. Change your choice any time in Settings → Privacy.
If enabled, an analytics service processes coarse feature actions, output characteristics, operation outcomes, app and operating system versions, device class, and optional purpose categories. Some events include internal note, handwriting-project, or operation identifiers to group related activity; those identifiers contain no document text. Before sign-in, the analytics identifier is an anonymous installation identifier; after sign-in, it is your account identifier.
With consent, analytics can record a Plus offer being shown or dismissed, where it was opened, the plan selected, purchase and restore outcomes, trial availability, and time spent in the offer. These events do not include prices, receipts, store-account details, names, email addresses, document text, titles, tags, drawings, photos, recognized text, or font files.
Turning analytics off stops new collection and clears unsent events. It does not erase records already received by the analytics service. Deleting your Nofont account does not automatically erase historical analytics records either. To request deletion, use Barakit Support, identify Nofont, and provide your account or installation identifier if available. We use the information you provide to locate applicable records and submit a separate deletion request. Do not send passwords or recovery codes.
Optional invites and bonus days
If Invite friends is available and you choose to use it, a free account is required. The reward service stores invite codes, account identifiers, referral relationships and counts, bonus days, and relevant dates to award rewards and prevent abuse. Notes, fonts, and their contents are not included. First-note eligibility is checked on your device; only confirmation that the requirement was met is sent.
Reward eligibility involves checking signed app and purchase records; those original records are not stored. The service stores account-linked installation-verification identifiers and verification information, plus pseudonymous fraud-prevention markers derived from installation checks, network addresses, and attempted codes.
Successful account deletion removes unused bonus days and account-linked verification records. Your invite code is retired and unlinked, rather than reused. Referral records may remain without your account link to preserve rewards already given to friends. A device-eligibility marker with no account link remains to prevent repeated rewards. This processing supports the reward feature and does not depend on usage-analytics consent.
Feedback and help requests
When you choose to send feedback or request help, we receive the message category and text you submit. If you include diagnostic details, the report also contains app version, operating system version, and device model. Sending through a signed-in account also includes the account identifier and email address. No notes, fonts, or document contents are attached automatically. If you send by email instead, your mail service handles delivery and your sender details are included.
Purchases and Messages
Your app store handles purchases and billing. Nofont keeps the last verified plan in protected device storage for offline access and shares a small local plan copy with its Messages extension. The extension uses local shared data to create cards and stickers; it has no network access, account access, or analytics.
Exports, backups, and deletion
Files leave Nofont when you deliberately export, share, print, or save them. Photos, Files, printers, other apps, and destination services handle copies you send to them under their own terms. Temporary exports become eligible for cleanup after 24 hours when Nofont launches. Copies saved elsewhere remain until you remove them there.
Delete local notes and handwriting drafts using Nofont’s library controls. Deleting a handwriting draft preserves published font versions used by existing notes and looks. Other local app data may be included in device backups according to your device settings; Write to many address files are excluded. Removing the app may remove local data, so export anything you want to keep first.
HardPass
Photos access and analysis
HardPass does not require a separate Barakit account. It asks for Photos access when you choose to scan. Limited access restricts results to the items you select. You can change access in your device settings.
Photo and video analysis takes place on your device. HardPass uses accessible media, metadata, and previews to show storage information and help you review exact duplicates and similar photos. Your photos, videos, library identifiers, and review decisions are not uploaded for analysis or analytics. Scans and duplicate checks do not request downloads from your cloud photo library; loading an individual cloud preview happens only when you explicitly request it.
Local records and deletion controls
The app keeps preferences, media identifiers, measured sizes, scan snapshots, analysis results, Keep decisions, and cleanup records on your device. Media stays in Photos. Settings includes controls to clear local scan data, reset reviewed status, and clear confirmed cleanup history. Clearing these app records does not delete photos. Pending records of uncertain deletion outcomes are retained so they can be checked.
Swiping an item only keeps it or puts it in a review queue. Removing media requires your final review and confirmation, plus any required system confirmation. Undo applies to review decisions before deletion; it cannot restore media after Photos accepts a deletion. Your device may keep deleted items in Recently Deleted, and reported media sizes are not a promise of immediate freed storage.
Purchases and allowance records
Your app store handles HardPass Plus purchases and billing. Purchase status and cleanup-allowance usage are stored locally, including in protected device storage that can survive reinstalling the app. Clearing cleanup history does not reset the allowance. HardPass does not add usage analytics or advertising tracking.
Optional invite and gift rewards
Where rewards are available, choosing to invite a friend or redeem a code uses an online reward service and the cloud account already used on your device. This shared reward service stores random invite codes, code-redemption dates, confirmation that a first scan was completed, and pseudonymous cloud-account and record-ownership identifiers. Gift redemption can also create a dated record that a code was used. No photo contents, library identifiers, or scan results are sent with these records, and HardPass does not read your contacts, cloud-account name, or email address for rewards.
Invite and gift eligibility, reward counts, and redemption flags are also kept in protected storage on the device and can survive an app reinstall. Clearing scan data or uninstalling HardPass does not automatically remove online reward records. There is no in-app reward-record deletion control; use Barakit Support to request review or deletion, including the relevant code if available. Do not include photos, passwords, or account recovery details.
Fih
Offline play and local saves
Fih can be played without an account or internet connection. Game progress, catches, collections, tanks, coins, equipment, crew, unlocked waters, and other gameplay state are saved on your device. Recovery copies may also be kept locally. Device backups are controlled by your device settings.
Optional account and cloud backup
If you choose to sign in, the account and backup service processes your email or sign-in identity, account identifier, sign-in information, a randomly assigned device identifier, and your game save. Backup starts after sign-in and can continue while you use the app; it is not a separate opt-in switch. The service keeps the current save and can keep one previous version, with update and revision information, to support backup and recovery.
You can use Back up now in Settings → Account. When progress conflicts, the app asks which save to use. The other copy is preserved locally or as the previous cloud save. Signing out stops account backup and keeps both the game on your device and the existing cloud backup.
Account deletion and other services
Use Delete account in Settings → Account to request deletion of your login and cloud backup. Successful deletion removes both; it does not erase the game or recovery copies on your devices. If deletion cannot be completed, the app reports an error. Contact Barakit Support if you need help with an account or removing local save copies. Removing the app does not itself delete a cloud account or backup.
The current Fih app does not include advertising, usage analytics, or in-app purchases. Optional account and backup processing is used to provide those features, independently of offline play.
Barakit website
Contact messages
If you use our contact form, you provide your name, email address, and message. Message-delivery and email services process the submission to deliver it to our support inbox. We use it to reply and handle your request, not for advertising or a marketing mailing list.
Contact correspondence, including app feedback sent to us, may remain in our inbox and the delivery services’ systems while needed for the inquiry, related support, or legal obligations. Use Barakit Support to request deletion. Please do not include passwords or information unnecessary for your request.
Hosting and browser information
Hosting and security services process technical information such as network addresses, browser information, requested pages, and request times to deliver the site, prevent abuse, and maintain reliability. The studio website does not add advertising trackers, usage-analytics tools, or advertising cookies. Fonts and project images are served as part of the site.
Service providers and disclosure
We use service providers for website hosting and security, account sign-in, cloud storage and backups, sign-in emails, support-message delivery, optional usage analytics, purchases, and reward eligibility checks. The information involved depends on the feature you choose, as described in each project’s section. Your device’s photo, backup, purchase, sign-in, and sharing services may also handle information under their own policies and your settings.
Providers may process information in countries other than your own. Their privacy practices and any applicable international-transfer safeguards also apply to their services. We may disclose information where legally required or necessary to investigate abuse and protect people or the services. We do not sell or rent personal information, or share it for targeted advertising.
Your choices and privacy rights
You can play Veiled Kingdom as a guest, write in Nofont without an account, use HardPass’s local photo tools without rewards, and play Fih offline without an account. You control Photos access, deliberate exports and sharing, Nofont sync and analytics choices, and whether to use account, backup, or reward features.
Local-data controls, account deletion, and service-record deletion are different actions. Clearing local data or uninstalling an app does not automatically delete cloud accounts, online reward records, analytics already received, or copies saved elsewhere. Use each app’s controls described above and contact Barakit Support for requests that require our help.
Depending on your location and the information we hold, you may have rights to access, correct, delete, or receive a copy of your personal information, restrict or object to processing, and withdraw consent where processing relies on consent. You may also raise a concern with your local data-protection authority. We may need to verify that a request relates to you before acting. Some information may need to be retained to meet legal obligations or resolve security issues.
Where a legal basis is required, we process information to provide services you request, respond to inquiries, protect the services and our legitimate interests in operating them, meet legal obligations, or obtain consent where required. We do not make automated decisions that produce legal or similarly significant effects on you.
Security
We use protected connections, account access controls, and device protections appropriate to the feature. Local app data also relies on your device’s security. No storage or transmission system can be guaranteed completely secure. Protect your device, sign-in details, recovery codes, and saved game-seat credentials.
Children’s privacy
We do not knowingly seek personal information from children under 13 through our online contact or account features. If you believe a child has provided personal information to us, please contact us so we can review and, where appropriate, remove it. Offline use of Nofont does not send a child’s writing to Barakit.
Policy updates
We may update this policy when our products, services, or privacy practices change. The current version and its effective date will remain available at this URL. Where required, we will provide additional notice or ask for consent before a material change takes effect.
Contact
For privacy questions or requests, use Barakit Support. Identify the project, describe your request, and include relevant account or reward-code details if available. Do not include passwords, recovery codes, private writing, or photo contents.