Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

• Account registration data: username, email address, and password (stored as a hashed value).
• Profile information: display name, avatar, and optional bio.
• Communications: messages you send us via support channels or feedback forms.
• Payment information: if you make in-app purchases, payment details are processed by our third-party payment processor; we do not store full card numbers.

1.2 Information Collected Automatically

• Device identifiers: advertising ID (IDFA/GAID), device model, OS version, and unique device ID.
• Usage data: game sessions, scores, levels completed, features accessed, and time spent in the app.
• Log data: IP address, crash reports, error logs, and diagnostic information.
• Location data: coarse location (country/region) derived from IP address; we do not collect precise GPS location unless you explicitly grant permission.

1.3 Information from Third Parties

• Social login providers (e.g., Google, Apple, Facebook): basic profile data such as name and email when you choose to sign in via a third-party account.
• Analytics partners: aggregated and anonymised behavioural data to help us understand how players use the Service.
• Advertising networks: attribution data to measure the effectiveness of our marketing campaigns.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account and authenticate your identity.
• To operate, maintain, and improve the Service, including personalising game content and difficulty.
• To process transactions and send related notices (receipts, confirmations).
• To send administrative communications, such as updates to this policy or service announcements.
• To send promotional communications where you have opted in; you may opt out at any time.
• To analyse usage trends and measure the effectiveness of features.
• To detect, investigate, and prevent fraudulent transactions, abuse, and other illegal activities.
• To comply with legal obligations and enforce our Terms of Use.
• To respond to your inquiries and provide customer support.

3. Legal Bases for Processing (EEA / UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases:

• Contract performance: processing necessary to provide the Service you have requested.
• Legitimate interests: analytics, fraud prevention, and service improvement, where these interests are not overridden by your rights.
• Consent: marketing communications and certain advertising activities; you may withdraw consent at any time.
• Legal obligation: compliance with applicable laws and regulations.

4. Sharing Your Information

We do not sell your personal information. We may share it in the following circumstances:

4.1 Service Providers

We engage trusted third-party vendors to perform services on our behalf, including cloud hosting, analytics, payment processing, customer support, and push notifications. These vendors are contractually required to use your data only as directed by us and to maintain appropriate security measures.

4.2 Business Transfers

If we are involved in a merger, acquisition, financing, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice in the app before your data is transferred and becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).

4.4 Protection of Rights

We may disclose information where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, potential threats to the safety of any person, or violations of our Terms of Use.

4.5 Aggregated or De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data is retained until you delete your account or request deletion.
• Game progress and scores are retained for the lifetime of your account to preserve your achievements.
• Log and diagnostic data are retained for up to 12 months.
• Financial transaction records are retained for 7 years to comply with applicable tax and accounting laws.
• After account deletion, we may retain anonymised or aggregated data indefinitely.

6. Data Security

We implement industry-standard technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS 1.2 or higher.
• Encryption of sensitive data at rest.
• Access controls limiting data access to authorised personnel on a need-to-know basis.
• Regular security assessments and penetration testing.
• Incident response procedures to address potential data breaches.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. International Data Transfers

Trivarena is operated from the United Arab Emirates. If you are accessing the Service from outside the UAE, your information may be transferred to and processed in the UAE or other countries where our service providers operate. We ensure that such transfers comply with applicable data protection laws, including, where required, the use of Standard Contractual Clauses or other appropriate safeguards.

8. Children's Privacy

The Service is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information promptly. If you believe a child under 13 has provided us with their data, please contact us at the address below.

9. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: request a copy of the personal data we hold about you.
• Correction: request that we correct inaccurate or incomplete data.
• Deletion: request that we delete your personal data, subject to certain legal exceptions.
• Portability: receive your data in a structured, machine-readable format.
• Restriction: request that we restrict processing of your data in certain circumstances.
• Objection: object to processing based on legitimate interests or for direct marketing.
• Withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details in Section 13. We will respond within 30 days. We may need to verify your identity before fulfilling your request.

9.1 Marketing Communications

You may opt out of receiving promotional emails by clicking the "unsubscribe" link in any such email or by adjusting your notification settings within the app. You may still receive transactional and service-related communications.

9.2 Push Notifications

You can disable push notifications at any time through your device's operating system settings.

9.3 Advertising Preferences

You may opt out of interest-based advertising by adjusting your device's advertising settings (e.g., "Limit Ad Tracking" on iOS or "Opt out of Ads Personalisation" on Android).

10. Third-Party Links and Services

The Service may contain links to third-party websites, services, or social media platforms. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access.

11. Cookies and Tracking Technologies

Our mobile application does not use browser cookies. However, we and our third-party partners may use similar tracking technologies such as SDKs, pixel tags, and device identifiers to collect information about your use of the Service. You can manage these preferences through your device settings or by contacting us.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this policy and, where appropriate, by sending you an in-app notification or email. Your continued use of the Service after the effective date of the revised policy constitutes your acceptance of the changes. We encourage you to review this policy periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We are committed to resolving complaints about your privacy and our collection or use of your personal information. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.