سياسة الخصوصية

Privacy Policy (English)

Tahaddani is a multiplayer trivia game. The controller of your data is Abdulrazzaq Alkumait, based in Iraq. For any privacy question or request, contact tahaddani.app@gmail.com. Last updated 19 September 2026.

What we collect

• Email — account creation, sign-in, recovery.
• Username and display name — identifying you in games and friend search.
• Avatar — an uploaded image or a preset.
• Gameplay data — XP, coins, level, match streak, subscription tier.
• Friends and invites — to operate the friends feature.

We collect no location, no contacts, no advertising identifiers and no browsing history. There are no analytics, advertising or tracking SDKs in this app. We do not sell or share your data for marketing.

Legal basis for processing

If you are in the EU or the UK, the GDPR requires us to state why we are allowed to process your data for each purpose:

The legitimate interests in row six are preventing abusive usernames, cheating and coin farming, and keeping the service working. We weighed that against your privacy by keeping the data involved to a minimum. You can object to any processing based on legitimate interests.

Voice chat is entirely opt-in. It starts only when you tap the microphone yourself, and you can withdraw consent at any moment by switching it off — nothing survives, because the audio is never recorded in the first place.

Account data is necessary to have an account at all: without it we cannot provide the game. Your avatar and voice chat are optional.

Google and Apple sign-in

If you sign in with Google or Apple we receive only your email address and name. We never see your password with them. If you use Apple's Hide My Email, we receive a relay address and never see your real one.

Exactly what we receive from your Google Account

We request three scopes only — openid, email and profile — and from them we receive your name, email address and profile picture URL. We request no other Google data and have no access to your Gmail, Google Drive, Contacts, Calendar or any other Google service.

How we use it

• Creating your Tahaddani account and signing you in.
• Identifying you to other players through your display name and avatar.
• Emailing you about your account when necessary, such as confirming your address.

What we never do with it

• We do not sell it or share it for advertising or marketing, under any definition of "sell".
• We do not use it to build advertising profiles or pass it to any ad network.
• We do not transfer it to third parties other than the service providers listed in the table below, who process it only on our behalf.
• No human at Tahaddani reads it except where you ask for support that requires it, or where the law requires it.

Where it is stored and when it is deleted

It is held in your profile row in our Supabase database for as long as your account is active, and is permanently deleted when you delete your account from inside the app. See Retention and deletion below.

Voice chat

Voice chat is entirely optional and only activates when you tap the microphone button yourself. Audio travels directly between players over an encrypted peer-to-peer connection and is never recorded, never stored, and never routed through us. Where a direct connection is impossible, encrypted audio is relayed by a Cloudflare TURN server, which passes data through without retaining it.

What other players can see

Your username, display name and avatar are visible to other players through friend search and in game rooms. Avatars are stored in a public bucket, so an avatar URL is reachable by anyone holding the link — please don't upload anything you would not want public. Your email address is never shown to other users.

Where your data is stored

Data is held by Supabase on Amazon Web Services infrastructure in Frankfurt, Germany (eu-central-1) — inside the European Union. Processors: Supabase (database, auth, storage), Cloudflare (voice relay), Google and Apple (sign-in only), Expo/EAS (builds and updates), and the App Store and Google Play (purchases).

If you are in the EU or EEA, your data stays there and is not transferred out of it for storage. Some of the processors listed above may process data outside the EEA; where they do, that relies on the Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) and, for the United Kingdom, the ICO's International Data Transfer Addendum. Email us at the address below for a copy.

Payments are handled entirely by Apple or Google. We never see, receive or store your card details.

Retention and deletion

We keep your data while your account is active. You can delete your account permanently from inside the app at any time: Profile → Delete account → type DELETE to confirm. This erases your avatar, friendships and invites, your entire profile (name, username, coins, XP) and your login itself. It cannot be undone.

Coins and paid benefits are forfeited on deletion and are not refunded. An active subscription must be cancelled separately in the App Store or Google Play — deleting your account here does not cancel a store subscription.

Your rights

You have the right to access, correct, delete, export and object to the processing of your data. Most of this is available directly in the app; for anything else contact tahaddani.app@gmail.com and we will respond within 30 days. If you are in the EU, UK or California you have additional rights under your local law, including the right to complain to your supervisory authority. We do not sell personal information under any definition of "sell".

Children

This app is for users aged 13 and over. We do not knowingly collect data from anyone younger. If we learn that an account belongs to a child under 13 we will delete it. If you are a parent and believe your child has created an account, contact us and we will remove it immediately.

Changes

We may update this policy. The date at the top of this page will change, and we will notify you in the app of anything material.