Controller and Contact Details
| Legal controller / operator | Mamdouh Alkanaan, an independent developer trading as mKanaan |
|---|---|
| Trading / studio name | Mamdouh Alkanaan, an independent developer trading as mKanaan |
| Contact/mailing address | 25 Tawi Al Qinʹah Street, Zone 24, MBZ City Villa 51, United Arab Emirates |
| Support telephone | +971543171737 |
| Privacy and account-deletion email | [email protected] |
| External deletion page | https://mkanaan.com/account-deletion |
| Advertising partners | We use Unity LevelPlay, including ironSource advertising services, to mediate, deliver, measure, and protect advertisements displayed in Trivarena. Depending on availability, location, consent choices, and configuration, advertisements may also be provided through Unity Ads. These services may process IP addresses, advertising identifiers, device and app information, approximate location derived from IP address, advertisement interactions, and fraud-prevention information. For additional information, see the ironSource Privacy Policy and the Unity Privacy Policy. |
How to Read This Policy
In this Policy, "Trivarena," "we," "us," and "our" mean the legal controller identified above. "You" means a player, account holder, creator, visitor, parent or guardian, or other person whose information is processed. "Personal information" includes information called personal data or a similar term under applicable law.
This Policy describes current Trivarena practices. A statement that we may process information means that the processing depends on the feature you use, the permissions you grant, your device and region, and the providers included in the release build. It does not mean that every category is collected from every player.
Read this Policy together with the Trivarena Terms of Use and Community Guidelines. The Terms govern the service and account; the Community Guidelines govern content and conduct. This Policy controls questions about personal-information practices.
Contents
Part I - Scope and foundations: 1-5: scope, roles, age, game modes, and information sources.
Part II - Information collected: 6-18: accounts, profiles, each game mode, images, gameplay, purchases, ads, moderation, acknowledgements, technical data, and communications.
Part III - Use and disclosure: 19-23: purposes, legal bases, public disclosure, providers, and advertising-related sharing.
Part IV - Retention, security, and control: 24-30: retention, security, transfers, choices, deletion, rights, and automated processing.
Part V - Regional and final provisions: 31-34: regional disclosures, external services, changes, and contact.
PART I - SCOPE AND FOUNDATIONS
1. Scope of This Policy
This Policy applies when you install, access, or use Trivarena; create, link, or use an account; play Classic Mode; participate in Match Mode; create or interact with public levels in Trivarena Mode; use leaderboards, achievements, challenges, rewards, sponsorships, sharing, or social features; make purchases; view advertisements; visit a covered support or deletion page; or contact us.
It does not govern independent websites, applications, stores, login providers, or advertising partners that publish their own privacy notices, except to explain when Trivarena sends information to or receives information from them.
2. Controller, Processors, and Independent Providers
The legal operator identified in the controller table determines the main purposes and means of Trivarena's processing and is the controller or business where those concepts apply. Hosting, backend, support, and certain advertising providers may process information for us as processors, service providers, or contractors. Other providers, including app stores, login providers, and some advertising networks, may act as independent controllers for their own processing.
When a provider acts for us, we require appropriate contractual, technical, or platform safeguards and require or expect the same or equivalent protection for user data as this Policy and applicable law. When a provider independently determines its purposes, its own privacy notice also applies.
3. Age Requirement and Children's Privacy
Trivarena is a general-audience service intended for users aged 13 and older and is not directed to children under 13. If the law where a user lives requires parent or guardian consent at a higher age, that consent is required before the user provides personal information or uses features that require it.
We do not knowingly seek to collect personal information from a child under 13 without authorization required by law. If we learn that an under-13 user provided personal information in circumstances that require parental consent, we may restrict the account, remove public content, and delete the information unless retention is required or permitted for safety, legal compliance, or another lawful purpose.
A parent or guardian may contact [email protected] to request review or deletion. We may ask for information reasonably necessary to identify the account and verify the request, but should not be sent passwords, full identity documents, or unnecessary sensitive information.
Where Trivarena has reliable age information or applicable law identifies a user as a minor, additional limits or safeguards may apply to public content, advertising, sharing, permissions, or account features. Users should never include a child's home, school, schedule, precise location, private contact information, or other risky personal information in public content.
4. How the Three Game Modes Use Information
4.1 Classic Mode
Classic Mode contains developer-provided, primarily image-based trivia that may be played offline. Its packaged images are not player uploads. Progress may be stored locally, and eligible activity may synchronize when the player is signed in and online.
4.2 Match Mode
Match Mode uses online services to arrange and run matches with another player, an eligible connected friend, or a computer-controlled opponent. It processes matchmaking, answers, timing, results, rewards, and connection information.
4.3 Trivarena Mode
Trivarena Mode allows eligible players to create and publish public user-generated levels. Level text, images, creator details, and engagement information may be visible to other players and retained for hosting, sharing, moderation, and integrity purposes.
5. Sources of Information
We obtain information from the following sources:
Directly from you. Information you enter, select, capture, upload, publish, purchase, report, share, or send to support.
From your device and use. Local progress, gameplay events, connection records, device details, permissions, SDK identifiers, and diagnostic or security logs.
From providers. Identifiers and limited profile information from a login provider; purchase confirmations from an app store; ad-delivery and reward status from advertising providers; and backend records from PlayFab or Firebase.
From other people. Reports, friend-match actions, public interactions, rights complaints, or support messages that concern your account or content.
Generated or inferred. Ranks, scores, aggregate counters, fraud or safety signals, regional classifications, challenge progress, feed order, and other results derived from activity.
We do not currently buy Trivarena player profiles from consumer data brokers.
PART II - INFORMATION COLLECTED
6. Accounts, Authentication, and Connected Friends
6.1 Account records
Depending on the login method and features used, we may process:
Trivarena display name, selected avatar, public profile details, and PlayFab account identifier.
Guest identifier, Firebase identifier where used, selected login method, account-linking status, account creation time, login time, session status, and security records.
Authentication-provider identifier and limited information the provider makes available, such as name, email address, private relay address, or profile image, depending on the provider, permission, and settings.
Authentication tokens or verification results needed to establish or secure a session.
Supported methods may include guest access, Google, Sign in with Apple, and Facebook. Trivarena does not receive your Google, Apple, or Facebook password. A provider may know that its service was used to access Trivarena.
6.2 Facebook friend features
If you choose Facebook Login, grant the relevant permission, and use an eligible friend feature, Facebook may provide limited information about Facebook friends who also use Trivarena and are made available under Facebook's platform rules. This may include identifiers, names, and profile images needed to display eligible friends, send an in-app invitation, or arrange a friend match.
The feature does not provide Trivarena with every person in your Facebook friend list. Availability depends on permissions, each friend's use of Trivarena, and provider settings. Revoking provider access may stop friend discovery or provider login; other supported login or gameplay methods may remain available.
7. Public Profile, Region, Language, and Leaderboards
A public profile or leaderboard entry may display a player name, avatar, IQ or score, region, rank, public game statistics, creator information, and created-level information. Global and local leaderboards may use account identifiers and a selected or assigned region to calculate and display rank.
We may process a selected region, country or general geographic region, language preference, device or app language, and region used for local feeds, leaderboards, or matchmaking. Standard Trivarena features do not require precise GPS location. Hosting, security, login, payment, and advertising providers may infer a general location from an IP address.
Do not use a public name, avatar, or profile field to disclose personal information that you do not want other players to see. Trivarena IQ is an in-game statistic and is not a clinical, educational, or psychometric assessment of intelligence.
8. Classic Mode and Local Data
Classic Mode may store solved or failed levels, unlocked levels, stars, answer outcomes, help or assist use, retries, timing, settings, and other progress on the device. Local information can be lost if app data is cleared, the app is removed, or the device is lost or replaced.
When the player is signed in and online, eligible Classic activity may be synchronized or used for account statistics, achievements, daily or weekly challenges, rewards, integrity checks, and restoration across sessions. Classic Mode does not require camera or photo-library or gallery access for ordinary play.
9. Match Mode
To arrange, run, restore, and protect a match, we may process:
Player and opponent account identifiers, display names, avatars, region or language, friend eligibility, invitations, and matchmaking status.
Selected answers, response timing, rounds, scores, match fees, rewards, wins, losses, draws, streaks, and final results.
Connection state, disconnects, reconnect attempts, server timestamps, integrity signals, and whether an opponent is computer-controlled.
Records used for leaderboards, achievements, challenges, fraud prevention, dispute handling, and abuse investigations.
An opponent may see your public name, avatar, region, match actions, score, and result. Match Mode does not require camera or photo-library or gallery access for ordinary play.
10. Trivarena Mode and Public User-Generated Levels
When you create, edit, publish, play, like, sponsor, share, hide, remove, or report a level, we may process:
Level ID and public short ID; creator account ID, public display name, and avatar; creation and update timestamps; language and region.
Question, answer choices, correct answer or index, hint, title or identifier, and other level text.
Uploaded or captured image, cropped or edited image, mystery image, original reveal image, image-edit mode, reveal status, image URL, storage path, dimensions, format, size, and related file metadata.
Publication, removal, sponsorship, moderation, safety, and eligibility status.
Play, solve, like, report, trend, and ranking counters; player-specific interaction records where needed to prevent duplicate counts, abuse, or incorrect rewards.
Published levels are public by design and may appear in feeds, profiles, solved or liked lists, sponsored placements, rankings, and shared links. Other people may view, play, like, report, sponsor, screenshot, copy, cache, or share them outside Trivarena. Publication may occur before manual review.
Deleting or removing a level stops future Trivarena availability when deletion completes, but may not remove copies already saved or shared outside our control. Limited information may remain in backups, integrity records, rights records, or moderation evidence where permitted. Do not publish personal, confidential, or sensitive information in a level.
11. Camera, Photo Library or Gallery, Images, and Avatars
Trivarena may request camera access when you choose to capture an image for a user-created level. It may request photo-library or gallery access, or use a system photo picker, when you choose an existing image. Where a limited system picker is used, the app receives the image you select rather than unrestricted access to the entire library. You may deny or revoke permission in device settings.
For a selected or captured image, we may process the source file, crop, preview, drawing, blur, zoom, emoji or other edit, mystery image, original reveal image, file metadata, and technical copies needed to upload, store, cache, display, share, or moderate the level. An original and edited version may both be stored so the reveal feature and moderation review work correctly.
Under the current design, profile avatars are selected from Trivarena-provided free, purchased, or unlocked avatar collections rather than uploaded from a personal gallery. Trivarena does not intentionally use level images for facial recognition, precise-location tracking, or advertising profiling, and does not provide those images to advertising partners for their advertising purposes. Images may contain embedded metadata supplied with the file; avoid uploading an image containing sensitive or unnecessary metadata.
Camera and photo access is not required for Classic Mode or ordinary Match Mode. If permission is denied, image capture or selection may be unavailable, but other game features or an available default level image may still work.
12. Gameplay, Progress, Achievements, Challenges, and Digital Items
We may process gameplay and economy records including:
Levels created, played, solved, failed, liked, hidden, shared, or removed; answer selections; correct or incorrect outcomes; stars; solve time; hints; passes; answer-removal or solve assists; retries; and cooldowns.
Matches played, friend matches, invitations, wins, losses, draws, streaks, fees, rewards, and disconnections.
Diamonds, IQ, hints, passes, answer-removal items, solve assists, avatars, bundles, sponsorship entitlements, Remove Ads, and other balances or digital items.
Achievements, challenge assignments and progress, daily logins, eligible purchase or advertising events, completion status, claims, server-time boundaries, and duplicate-reward records.
Public and private statistics, rankings, creator rewards, sponsorship activity, and timestamps needed to calculate or verify results.
We use these records to provide gameplay, synchronize progress, calculate and correct results, grant or spend items, prevent duplicate benefits, detect manipulation, and display eligible public statistics.
13. Purchases, Receipts, and Entitlements
For in-app purchases, we may process:
Product identifier, store, purchase time, store transaction identifier, receipt or validation token, localized price and currency, and purchase status.
Whether a transaction is pending, completed, restored, cancelled, failed, refunded, reversed, or charged back.
The associated currency, item, avatar, bundle, sponsorship, Remove Ads, or other entitlement and fulfilment status.
Records needed to validate purchases, restore eligible non-consumables, prevent duplicate fulfilment, resolve delivery problems, maintain accounting records, and detect fraud.
Payments are processed by Apple or Google under their terms. Trivarena does not directly receive or store your complete payment-card number, bank-account number, or card security code. App stores and purchase-validation providers may retain transaction records under their own policies.
14. Advertising, Tracking, and Consent Information
Trivarena may display banner, interstitial, rewarded, medium-rectangle, feed, sponsorship, or internal promotional content. Unity LevelPlay and the advertising networks configured in the release build may process advertising or device identifiers, IP address, general location, device and operating-system information, app version, language, network information, consent or privacy-choice status, impressions, clicks, rewarded-ad completion, errors, frequency information, and fraud-prevention signals.
Advertising information may be used to request and deliver an ad, determine availability, cap frequency, measure performance, attribute activity, confirm a reward, provide contextual or personalized advertising where permitted, prevent fraud, and comply with law. A rewarded-ad record is used to decide whether the corresponding in-game benefit is granted.
Where consent is required for device access, personalized advertising, or SDK processing, Trivarena or its provider will present an appropriate choice. On supported Apple devices, tracking across apps or websites owned by other companies requires permission through Apple's App Tracking Transparency framework. Denying tracking does not prevent contextual or non-personalized ads and limited processing for delivery, security, measurement, or fraud prevention where lawful.
You may be able to change advertising consent through an in-app privacy control, provider consent interface, or device settings. A Remove Ads purchase removes only the ad formats described on the purchase screen; it does not delete information already lawfully processed, and it may not remove voluntary rewarded ads, sponsorships, internal promotions, store content, or legal notices.
The Operator does not sell personal information in exchange for money. Some laws may nevertheless describe disclosure of identifiers or activity to advertising partners as a sale, sharing, targeted advertising, or cross-context behavioral advertising. Applicable opt-out and consent rights are described in Sections 23, 27, 29, and 31.
15. Reports, Hiding, Blocking, Moderation, and Enforcement
When a level or creator is reported or reviewed, we may process:
Reported level ID and short ID, selected reason, optional details, relevant text and images, report timestamp, and whether the same player previously reported the level.
Reporter and creator account identifiers and public names where needed, report count, moderation status, review notes, rights complaints, appeal records, and enforcement outcome.
Prior content, account activity, technical or safety signals, and records needed to investigate false reporting, repeated violations, ban evasion, fraud, threats, exploitation, or illegal conduct.
Hidden level IDs, blocked creator identifiers and names, changes such as unblocking, and synchronization information needed to apply the preference across devices.
Reports are not normally shown publicly to the reported creator. A personal hide or block changes the reporting player's view and does not by itself remove content for everyone or suspend the creator. Moderation may combine automated signals with manual review. Significant content or account restrictions may involve human review, especially after a report or appeal.
Moderation and enforcement records may be retained after content or an account is removed when reasonably necessary to protect users, prevent repeat violations or evasion, resolve appeals or rights complaints, preserve child-safety or threat evidence, comply with law, or defend legal claims.
16. Policy Acknowledgements and Consent Records
Before first publication of a user-created level, and after some material policy changes, Trivarena may record the policy version, documents acknowledged, account identifier, date and time, and local synchronization status. This helps determine whether the current Terms, Community Guidelines, and Privacy Policy have been shown and acknowledged.
Acknowledging a policy is not a substitute for a separate consent where law or a device platform requires consent for a specific activity such as camera access, photo access, or advertising tracking. Consent choices and their timestamps may be stored so they can be respected and demonstrated.
17. Device, Network, Diagnostic, and Security Information
Trivarena and its providers may automatically process:
Device type and model, operating system and version, app version, language, time zone, and general region.
IP address, network status, connection checks, request timestamps, download status, disconnects, reconnect attempts, and service-response information.
PlayFab, Firebase, advertising, app-installation, or similar SDK identifiers included in the configured services.
Authentication errors, purchase-validation errors, ad-delivery errors, storage or download errors, diagnostic logs, performance information, and crash information generated by the app or a configured provider.
Security, integrity, anti-fraud, duplicate-event, automation, abuse, and vulnerability signals.
We use this information to operate online features, diagnose failures, maintain availability, protect accounts and transactions, prevent cheating and abuse, improve reliability, and enforce policies. Standard Trivarena features do not request contacts, microphone, health data, or precise GPS location.
18. Support, Privacy Requests, and Other Communications
When you contact us, we may process your name, email address, player name, account or PlayFab ID, level ID, country or region, message, attachments, request type, verification information, and records of our response. This may include support, privacy, deletion, moderation appeal, intellectual-property, safety, legal, or vulnerability communications.
Provide only information needed for the request. Do not send passwords, authentication codes, full payment-card information, suspected child sexual abuse material, illegal images, or unnecessary sensitive information. If urgent physical danger exists, contact local emergency services; Trivarena support is not an emergency service.
PART III - USE AND DISCLOSURE
19. How We Use Information
We use personal information for the following purposes, as relevant to the feature and legal basis:
Provide the service. Create and secure accounts, maintain sessions, operate each game mode, publish and retrieve levels, display images and profiles, arrange matches, synchronize progress, and apply settings.
Calculate and deliver gameplay. Process answers, scores, ranks, likes, solves, challenges, achievements, cooldowns, digital items, creator rewards, sponsorships, and other eligible benefits.
Personalize and organize. Apply language, region, local leaderboard, hidden-level, blocked-creator, solved, liked, owned, and discovery preferences.
Process purchases and ads. Validate transactions, deliver or restore entitlements, resolve pending fulfilment, deliver and measure ads, confirm rewarded-ad completion, and prevent payment or advertising fraud.
Protect people and integrity. Moderate content, investigate reports and appeals, address child safety or credible threats, detect cheating or manipulation, secure systems, and enforce the Terms and Community Guidelines.
Communicate and comply. Respond to support and rights requests, provide security or policy notices, keep transaction or legal records, respond to lawful requests, and establish or defend claims.
Maintain and improve. Diagnose errors, test reliability, understand aggregate feature performance, plan improvements, and correct inaccurate or duplicate records.
We may create aggregate or de-identified information that is not reasonably linkable to a person and use it for service analysis, safety, statistics, or development, subject to applicable law. We do not attempt to re-identify information that has been properly de-identified. Trivarena does not currently send player personal information to a third-party generative-AI service for processing.
20. Legal Bases Where Applicable
Where law requires a legal basis, we rely on one or more of the following:
Contract. Processing necessary to create and maintain an account, provide requested gameplay and public-level features, synchronize progress, process purchases, deliver entitlements, and apply requested settings.
Legitimate interests. Operating, securing, supporting, and improving Trivarena; moderating public content; preventing fraud, cheating, and abuse; protecting players; understanding reliability; and enforcing rules, after considering the impact on users and applying appropriate safeguards.
Consent. Processing that depends on optional device permissions, personalized advertising or device access where consent is required, optional provider integrations, or another activity for which we specifically request consent.
Legal obligation. Processing needed for tax, accounting, consumer, privacy, child-safety, platform, court, regulatory, or other legal obligations and lawful requests.
Vital interests. Limited processing or disclosure reasonably necessary to protect a person from a serious and immediate threat to life or physical safety.
Where we rely on consent, you may withdraw it through the available control or by contacting us. Withdrawal does not affect earlier lawful processing. Where we rely on legitimate interests, you may have a right to object, subject to legal exceptions and compelling grounds.
21. Public Disclosure and Sharing at Your Direction
Public profile information, leaderboard entries, creator details, public levels, level images and text, public engagement counters, sponsorship status, and public sharing identifiers may be disclosed to other players and anyone who receives a shared link. An opponent may receive the public profile and match information needed to play and display a result.
When you use the device sharing menu, share a screenshot or level link, open an external page, select a login provider, or otherwise direct disclosure, the selected application or provider receives the information you choose to send. That provider then handles it under its own terms and privacy notice.
22. Service Providers and Other Recipients
The following provider categories may receive or process information. The exact services depend on platform, region, permissions, and the release build. Provider names do not imply endorsement.
| Provider or category | Role | Representative information |
|---|---|---|
| Microsoft PlayFab | Accounts, player data, currencies, rewards, statistics, leaderboards, CloudScript, integrity, and purchase validation | Account IDs, profile, progress, balances, events, transaction and security records |
| Google Firebase / Google Cloud | Authentication where used, Firestore, Storage, Hosting, Functions, and related infrastructure | Account IDs, public levels, images, settings, requests, technical and security logs |
| Google, Apple, and Facebook login | Optional authentication and connected-friend features selected by the player | Provider ID and limited profile or friend information allowed by permission and settings |
| Apple App Store / Google Play | Purchase processing, receipts, refunds, account-deletion listing resources, and distribution | Transaction IDs, receipts, product, price, status, device/store account information held by the store |
| Unity LevelPlay and configured ad networks | Ad mediation, delivery, measurement, consent signals, rewarded-ad confirmation, and fraud prevention | Advertising/device IDs, IP/general region, app/device data, impressions, clicks, completion, consent and security signals |
| Support, security, and professional advisers | Support operations, incident response, legal advice, audits, insurance, and claims | Information reasonably necessary for the relevant request, incident, duty, or claim |
| Device sharing and external services | Actions initiated by the player through operating-system or third-party features | The content, link, screenshot, recipient, and metadata selected or generated by that service |
Provider privacy information: Microsoft | Firebase | Unity | Google | Apple | Meta
We may also disclose information to courts, regulators, law enforcement, child-protection bodies, app stores, rights holders, emergency responders, or other appropriate parties when required by law or reasonably necessary to address serious safety, child-exploitation, threat, fraud, rights, security, or legal concerns.
If the Trivarena business or relevant assets are involved in a merger, acquisition, financing, reorganization, insolvency, or sale, information may be disclosed during diligence and transferred to a successor subject to confidentiality, this Policy, and applicable law.
23. Sale, Sharing, and Targeted Advertising
We do not sell personal information for monetary payment. Advertising-related disclosures may be treated as a sale or sharing under some U.S. state laws even when no money is exchanged. They may also constitute targeted or cross-context behavioral advertising. The categories potentially involved are identifiers, Internet or app activity, device information, general location, advertising interactions, and inferences used for ad selection or measurement.
Where applicable, you may opt out through the in-app or provider privacy control, the device's advertising or tracking settings, or [email protected]. We will not knowingly sell or share personal information of a user under 16 for cross-context behavioral advertising without the opt-in authorization required by applicable law.
PART IV - RETENTION, SECURITY, AND CONTROL
24. Data Retention
We retain personal information only for as long as reasonably necessary for the purpose collected, including providing the feature, maintaining an active account, protecting security and integrity, resolving a request or dispute, preserving legal rights, and complying with law. Retention depends on the type of record, sensitivity, risk, account status, feature state, provider configuration, legal limitation period, and whether a deletion request has been verified.
| Record group | General retention rule | After deletion or removal |
|---|---|---|
| Account, profile, and gameplay | While the account is active and thereafter only as needed for restoration, integrity, support, or legal obligations | Deleted or de-identified unless a limited lawful reason requires retention |
| Public levels and images | While published or otherwise needed to provide, moderate, secure, or support the feature | Removed from active display; external copies, caches, backups, and limited moderation evidence may remain |
| Match, challenge, and reward records | For the account lifecycle and as needed to calculate results, prevent duplicates, correct errors, and investigate abuse | Deleted, aggregated, or retained in limited form for integrity and claims as permitted |
| Purchases and entitlements | For fulfilment, restoration, accounting, tax, refund, chargeback, and fraud periods | Required transaction and anti-fraud records may outlast the account |
| Reports and enforcement | For review, appeals, repeat-violation detection, child safety, threat response, rights complaints, and legal claims | May be retained in restricted form after content or account deletion where necessary |
| Technical, security, and ad logs | For the shortest period reasonably needed for delivery, diagnostics, measurement, security, fraud prevention, and provider obligations | Deleted or de-identified under applicable schedules; providers may retain independent records under their notices |
| Support and privacy requests | Until the request is resolved and for a reasonable recordkeeping or legal period | A limited record may remain to demonstrate compliance and prevent repeated or fraudulent requests |
Information removed from active systems may remain temporarily in restricted backups until the relevant backup is overwritten or expires. During that period it is not used for ordinary gameplay and is restored only where necessary for disaster recovery, security, or legal compliance. A legal hold or preservation request may extend retention. Properly aggregated or de-identified information may be retained longer where it no longer identifies a person.
25. Security and Incident Response
We use reasonable administrative, technical, and organizational measures designed to protect information. Depending on the system, these may include authenticated access, encrypted network transmission, access controls, protected backend functions, server-side validation, purchase validation, separation of public and private records, logging, monitoring, dependency updates, moderation controls, backup protections, and restricted administrative access.
No Internet service, device, storage system, or transmission method is completely secure. If a personal-data breach occurs, we will investigate, mitigate, document, and notify affected people or authorities where applicable law requires.
Protect your device and linked provider accounts, use available security controls, do not share authentication credentials, and report suspected unauthorized access. Avoid including unnecessary private information in a public name, profile, level, image, or support message.
26. International Data Transfers
Trivarena is intended for international availability and relies on providers that may process information outside the country where you live. Those countries may have different data-protection laws. Processing locations depend on provider infrastructure, configured cloud region, support access, advertising delivery, and legal requirements.
Where required, we or our providers use recognized transfer safeguards such as adequacy decisions, standard contractual clauses, contractual and technical measures, or an applicable certification framework. You may contact us for information about safeguards relevant to your data, subject to confidentiality and legal limits.
27. Your Choices and Permission Controls
Profile and avatar. Update eligible public information and select another available avatar through profile settings.
Likes, hidden levels, and blocked creators. Remove a like, hide an eligible level, and review or unblock creators through the available controls.
Camera and photos. Deny or revoke camera or photo permission through device settings. This disables the related capture or selection feature but not unrelated gameplay.
Login providers. Manage provider permissions through Google, Apple, or Facebook settings and use any in-app disconnection control made available. Revocation may affect provider login or friend features.
Advertising and tracking. Use an in-app or provider privacy interface, Apple's tracking setting, Android advertising controls, or other device controls where available. Resetting an advertising identifier does not delete Trivarena account data.
Local data. Clearing app data or uninstalling may remove local Classic or guest records but does not necessarily delete a linked account or backend information.
Account deletion and rights. Use the process in Sections 28 and 29.
Some processing is necessary to provide a feature, secure the service, complete a transaction, comply with law, or preserve another person's rights. If that processing cannot be disabled while the feature is used, you may stop using the feature or request account deletion, subject to lawful retention.
28. Account and Data Deletion
28.1 How to request deletion
Where account creation is supported, initiate deletion through Settings using the available Delete Account control. You may also use https://mkanaan.com/account-deletion or email [email protected].
A request should identify the player name, PlayFab ID where available, login method, and the requested action. We may verify that the requester controls the account. Do not send passwords, full payment-card information, or unnecessary identity documents.
28.2 What deletion does
After verification and subject to applicable law, account deletion permanently deletes or de-identifies associated personal information that is not required or permitted to be retained. This may include account access, public levels, progress, IQ, currencies, digital items, achievements, challenges, rankings, likes, solved history, avatar selections, sponsorships, and block settings. Deletion is not temporary deactivation.
Deleting a Trivarena account does not delete an Apple, Google, Facebook, or other provider's account, and the provider may retain its independent records. Store purchase history remains subject to the store's rules. Previously shared or screenshotted content outside our control may remain. Restricted transaction, fraud, security, child-safety, moderation, dispute, and legal records may be retained only as permitted or required, and backup copies may remain until the backup cycle expires.
29. Privacy Rights and Requests
Depending on where you live and subject to legal exceptions, you may have rights to:
Receive information about processing and access or obtain a copy of personal information.
Correct inaccurate or incomplete information.
Request deletion or restriction of processing.
Object to processing based on legitimate interests or for direct marketing.
Receive portable information in a commonly used machine-readable format where applicable.
Withdraw consent without affecting earlier lawful processing.
Opt out of sale, sharing, targeted advertising, profiling, or certain automated decisions where applicable.
Limit certain uses of sensitive personal information where applicable.
Appeal a refusal where local law provides an appeal and complain to a data-protection authority.
Exercise rights without unlawful discrimination.
Submit a request to [email protected] and include the player name, PlayFab ID where available, country or region, right requested, and information needed to identify the relevant account. We may request reasonable verification, limit information that would expose another person's rights or security, and charge or refuse only where law permits, such as for manifestly unfounded or excessive requests.
An authorized agent may act where law permits, but proof of authority and direct verification with the player may be required. A parent or guardian may submit a request concerning an eligible minor. We will respond within the period required by applicable law and explain any permitted extension or refusal.
30. Automated Processing and Profiling
Automated rules may calculate scores, rewards, rankings, challenges, cooldowns, public counters, feed order, and duplicate-event results; detect suspicious transactions, cheating, technical anomalies, or abuse; and prioritize content for review. These processes affect gameplay, display, security, and moderation workflow.
Trivarena does not ordinarily make a decision based solely on automated processing that produces legal effects or similarly significant real-world effects. Significant content or account actions may involve manual review, particularly after a report or appeal. Where applicable law grants rights concerning an automated decision, you may request information, human review, or an opportunity to contest it through [email protected].
PART V - REGIONAL AND FINAL PROVISIONS
31. Regional Privacy Disclosures
31.1 European Economic Area, United Kingdom, and Switzerland
The controller is identified at the beginning of this Policy. Sections 19 and 20 describe purposes and legal bases; Sections 22 and 23 describe recipients; Section 24 describes retention criteria; Section 26 describes transfers; and Sections 27-30 describe rights and choices. Where applicable, you may complain to the supervisory authority where you live, work, or believe an infringement occurred.
A verified request is ordinarily answered without undue delay and within one month where the GDPR or UK GDPR applies, subject to lawful extension. If the controller must appoint an EEA or UK representative or a data-protection officer.
31.2 United Arab Emirates
Where the UAE Personal Data Protection Law applies, available rights may include receiving information, obtaining or transferring personal data, correcting or erasing data, restricting or stopping certain processing, and objecting to certain automated processing, subject to the law's conditions and exceptions. Submit a request to the privacy email above. You may also have a right to complain to the UAE Data Office or other competent authority once the applicable process is available.
31.3 United States state privacy laws
For residents covered by an applicable comprehensive state privacy law, the categories collected during the preceding twelve months may include identifiers; account and customer-record information; commercial and transaction information; Internet, app, and gameplay activity; general geolocation; user content, images, and communications; inferences; and security or authentication information that may qualify as sensitive. Sources, purposes, and recipient categories are described in Sections 5, 19, and 22.
We do not use sensitive personal information to infer characteristics beyond what is reasonably necessary for the disclosed service, security, transaction, or legal purposes. We do not sell personal information for money. Advertising-related disclosure may be treated as sale or sharing, and applicable opt-out rights may be exercised as described in Section 23. Where legally required and technically applicable to a covered website, we will treat a recognized opt-out preference signal such as Global Privacy Control as an opt-out request.
Applicable rights may include knowing, accessing, correcting, deleting, obtaining a portable copy, opting out of sale or sharing, targeted advertising, or certain profiling, limiting certain sensitive-data uses, appealing a denial, and non-discrimination. An authorized agent may submit a request where permitted.
31.4 Other countries and regions
Privacy laws in other locations may provide comparable or additional rights, complaint procedures, parental-consent rules, or response periods. We will apply mandatory local rights to eligible users even if this Policy does not list every jurisdiction separately.
32. External Links, Stores, and Sharing Services
Trivarena may link to legal documents, account-deletion or support pages, app-store listings, shared-level pages, provider privacy controls, and other external services. A device share sheet may open an application chosen by you. We do not control independent services and are not responsible for their privacy practices except where applicable law provides otherwise. Review the destination's notice before sending information.
33. Changes to This Policy
We may update this Policy to reflect new features, providers, permissions, data practices, security measures, legal requirements, app-store requirements, or changes to advertising, purchases, user-generated content, reporting, blocking, or account deletion. The revised version will show a new Last Updated date and version.
Where required or appropriate, we will provide an in-app notice, request renewed acknowledgement, or obtain new consent before materially different processing that requires consent. A policy update does not make earlier unlawful processing lawful or remove accrued mandatory rights. If a feature change introduces a new SDK, third-party AI processing, analytics service, precise location, contacts, microphone, personal avatar upload, or other material data practice, this Policy and the store disclosures must be updated before that processing begins.
34. Contact Us
For privacy questions, account deletion, rights requests, parental requests, advertising choices, or concerns about this Policy, contact the controller using the details below. Include enough information to locate the relevant account or content, but do not send passwords, full payment-card information, suspected illegal images, or unnecessary sensitive information.
Controller: Mamdouh Alkanaan | Address: 25 Tawi Al Qinʹah Street, Zone 24, MBZ City, Villa 51, UAE
Telephone: +971543171737