Privacy Policy

Effective 18 September 2026 · Applies to the Kombolela mobile game for Android and iOS and to this website.

In short: Kombolela does not ask for your name, email, phone number, contacts, photos or location. When you play, the game creates an anonymous player identifier through Google Firebase so that online features can work in future, and Firebase processes basic technical data (such as your IP address and device type) to provide that service securely. Your gameplay progress is stored on your device. There are no ads and no in-app purchases.

1. Who we are

Kombolela is developed and published by the Kombolela team ("we", "us"). You can contact us at support@kombolela.dev for anything related to this policy.

2. What data the game handles

Data	Where it comes from	Why	Where it is stored
Anonymous player ID	Created automatically by Firebase Authentication (Google) the first time the game starts. It is a random string and is not linked to your name or email.	To give each installation a stable identity for future online features such as friends' matches and leaderboards.	Google Firebase servers.
Technical data: IP address, device model and operating system version, app version, Firebase installation identifiers, request timestamps	Sent automatically by the Firebase software when the game communicates with Google's servers.	Security, fraud and abuse prevention, and operating the service. Google may keep short-lived logs of this data.	Google Firebase servers.
Gameplay progress: matches played, wins, reveals, rescues, best scores, unlocked and equipped cosmetics, sound and haptics settings	Generated by playing.	To show your progress and unlocks.	Only on your device. It is deleted when you uninstall the game.

The game does not collect your name, email address, phone number, contacts, precise or approximate location, photos, microphone or camera data, payment information or advertising identifiers. The game contains no advertising and no analytics SDK. If this changes, we will update this policy and, where required, ask for your consent in the app.

3. Third-party service: Google Firebase

The anonymous player identity and the technical data described above are processed by Google LLC through the Firebase platform acting as our service provider. Google's handling of this data is described in the Firebase privacy and security documentation and the Google Privacy Policy. Firebase servers may be located outside your country, including in the United States and the European Union; Google applies the safeguards described in its data processing terms to such transfers.

The app stores (Google Play and the Apple App Store) may collect their own data when you download or update the game under their own privacy policies.

4. Why we are allowed to process this data

We process the anonymous player identifier and technical data because it is necessary to provide the game and its online features (performance of a contract) and because we have a legitimate interest in keeping the service secure and free of abuse. Gameplay progress stays on your device and is not processed by us.

5. How long we keep data

The anonymous player identifier is kept until you ask us to delete it (see section 7) or until the account has been unused for 24 months, after which we may delete it.
Technical logs held by Google are retained for the short periods described in Google's documentation.
Gameplay progress is removed when you uninstall the game or clear its data.

6. Children

Kombolela is made for players aged 14 and older and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

7. Your choices and rights

Delete your progress: uninstall the game, or clear its storage in your device settings.
Delete your anonymous player account: open the game, and in the Settings panel on the main menu tap the "Cloud" line to copy your Player ID, then email it to support@kombolela.dev with the subject "Delete my Kombolela account". We delete the account within 30 days and confirm by email. Reinstalling the game later creates a new, unrelated anonymous identity.
Access, correction, objection, portability: depending on where you live you may have further rights over your personal data. Email us and we will respond within 30 days. If you are not satisfied, you may complain to your local data protection authority.
Play without any server contact: the game works fully offline. If the device has no connection, no identifier is created and nothing is sent.

8. Security

All communication between the game and Firebase uses encrypted connections (HTTPS). Access to the Firebase project is limited to the development team and protected by Google account security. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Applicable law

We aim to comply with the data protection laws that apply to our players, including the Personal Data Protection Act, 2022 of the United Republic of Tanzania and, for players in the European Economic Area and the United Kingdom, the GDPR and UK GDPR.

10. Changes to this policy

We will post any changes on this page and update the effective date above. If a change materially affects how your data is used, we will also tell you in the game.

11. Contact

Email support@kombolela.dev. Please do not send passwords or other sensitive information by email.