Privacy Policy

01. Who we are

Karibu Play is the data controller for the personal data described in this Policy. We are based in Nairobi, Kenya. You can reach our data protection contact at [email protected].

02. Information we collect

• Account details — such as your username, email address, and password when you sign up.
• Gameplay data — scores, streaks, coins, leaderboard rank, and game rooms you join.
• Device & technical data — app version, device type, and basic usage needed to run the Service.
• App activity — when the app is opened, and a random installation code the app creates on your device the first time you open it. This code is made by the app itself: it is not your phone number, your advertising ID, or anything your device already knew about you, and it disappears when you uninstall. If you are signed in, we link this activity to your account.
• We do not ask for sensitive personal data, and we don’t need your exact location to play.

03. How we use your data

We use your data to create and secure your account, run games and multiplayer rooms, keep leaderboards and streaks, improve the Service, and respond to your questions. We use a verification code (OTP) only to confirm it’s really you when you reset your password.

04. Our lawful basis

In line with the Data Protection Act, 2019, we process your data where it is necessary to provide the Service you asked for, where you have given consent, or where we have a legitimate interest in keeping Karibu Play safe and working well. You can withdraw consent at any time.

05. Sharing your data

We do not sell your personal data. We only share it with trusted service providers who help us run the Service (for example hosting and email), and only as far as needed. Your username and rank may be visible to other players on leaderboards and in rooms you join. We may disclose data if required by Kenyan law.

06. Cookies & analytics

We use a small amount of essential storage to keep you signed in and remember your settings, and limited analytics to understand how the Service is used so we can improve it. Our analytics are our own — we count app opens, which version of the app you are running, and how many people are playing, so we can fix problems and know when an old version can be retired. We do not use advertising trackers, and we do not send your activity to advertising networks. You can control storage and cookies through your browser or device settings.

07. How long we keep it

We keep your data for as long as your account is active and as needed to provide the Service. When you delete your account (see “Deleting your account & data” below), we permanently erase or anonymise your personal data within 30 days, unless the law requires us to keep specific records longer.

08. Deleting your account & data

You are in control of your data and can delete it yourself, at any time, directly in the app:

• Open Karibu Play and go to Help center → Account & data.
• Under Danger zone, tap Delete account and confirm.
• This permanently removes your profile, username, stats, streaks, coins, friends, squads and game progress. It cannot be undone.

On that same screen you can tap Download my data to get a copy of the information we hold about you. Prefer email? Write to [email protected] from your account’s email address and we’ll delete your data within 30 days. Guest (signed-out) play is stored only on your device — clearing the app’s data or uninstalling removes it.

09. Keeping your data safe

We use reasonable technical and organisational measures to protect your data, including encrypted passwords and secure connections. No system is perfectly secure, so please also keep your own login details private.

10. Your rights

Under the Data Protection Act, 2019 you have the right to:

• be informed about how your data is used;
• access a copy of the data we hold about you;
• ask us to correct or delete your data;
• object to or restrict certain processing, and withdraw consent.

You can download your data or delete your account yourself in the app (see “Deleting your account & data”). To exercise any other right, email [email protected]. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya.

11. Children’s privacy

Karibu Play is family-friendly, but accounts for children under 18 should be set up and supervised by a parent or guardian. If you believe a child has given us data without proper consent, contact us and we will take appropriate steps.

12. Data outside Kenya

Some service providers may process data outside Kenya. Where this happens, we take steps to ensure your data stays protected to a standard consistent with the Data Protection Act, 2019.

13. Changes & contact

We may update this Policy from time to time and will note the date of the latest version above. For any privacy question, write to [email protected] — we’re here in Nairobi, Kenya.