Privacy Policy

1. Who We Are

Sanaa Lab (referred to as "we", "us", "our") is a gaming company headquartered in Dar es Salaam, Tanzania. We operate online gaming websites, mobile games (Android & iOS), and organize esports events across East Africa. Our games are designed to be simple, family-friendly, and can be played by children with parental supervision. For any privacy inquiries, please contact us at: privacy@sanaalab.co.tz or by mail: Sanaa Lab, Kinondoni, Dar es Salaam, Tanzania.

2. What Information Do We Collect?

We believe in minimal data collection. Because our games are simple and designed for all ages including children under 13, we DO NOT knowingly collect personally identifiable information (PII) from children without verifiable parental consent. The types of data we may collect:

• Non-personal game data: In-game scores, level progress, tournament rankings (anonymized nicknames).
• Device information: Advertising ID (only with parental consent for older audiences, disabled in child-directed modes), device model, OS version for performance analytics. All data is aggregated or anonymized.
• Tournament registration (optional): For players aged 13+ or with parent approval — we may collect email address, player alias, and country to award prizes. No sensitive data.
• Cookies & local storage: On our website, we use essential cookies only for functionality (remember language preferences). No tracking cookies for ads on children’s sections.

We do NOT collect: real names, home addresses, phone numbers, persistent identifiers for tracking across apps, or geolocation data without explicit parental consent (and never for under 13).

3. How We Use Your Information

We use the limited data we collect to:

• Operate and improve our games (fix bugs, balance leaderboards).
• Organize fair tournaments and display rankings across East Africa.
• Respond to customer support requests.
• Analyze aggregate play patterns to make games more fun (no individual tracking).

For children’s games: We do not use behavioral advertising, nor share any data with third-party ad networks. Any analytics used (e.g., basic download counts) are privacy-safe and do not involve persistent identifiers.

4. Children’s Privacy (Under 13 / Under 16 in EEA)

Protecting children who play our games is our top responsibility. Sanaa Lab complies with the US Children’s Online Privacy Protection Act (COPPA), EU General Data Protection Regulation (GDPR-K), and Tanzania’s Data Protection Act.

• Our games are designed as “simple games that even children can play.” We do not require any registration to play basic game modes.
• We never ask for a child’s email address, phone number, or any contact information unless a parent explicitly enters a tournament on behalf of their child and provides consent.
• If we become aware that we have inadvertently collected personal information from a child under 13 without parental consent, we will delete that information immediately.
• Parents/guardians may review or delete any data provided by contacting privacy@sanaalab.co.tz.
• We do not feature behavioral advertising in child-directed portions of our games or website.

5. Third-Party Services & Links

Our games and website may use trusted third-party services that operate under strict data protection agreements:

• Unity Analytics (optional): Aggregated crash reporting and performance metrics — no personal data, IP addresses are anonymized.
• Google Play Services / App Store: For leaderboards and achievements; these platforms handle authentication without sharing personal info with us.
• We do NOT integrate any third-party ad networks (AdMob, ironSource, etc.) that collect personal data from children. For any future implementation, we will obtain parental consent where required.

Our website may contain links to social media (Discord, Twitter). Those external sites have their own privacy policies, and we encourage parents to review them. We are not responsible for their practices.

6. Data Storage, Security & International Transfers

Your data is stored on secure servers located in the European Union and East Africa, protected by industry-standard encryption (SSL/TLS). While we are based in Tanzania, we comply with international laws regarding data transfers. We implement physical, technical, and administrative safeguards to ensure your information remains confidential. In the unlikely event of a data breach, we will notify affected users and relevant authorities within 72 hours as required by GDPR and Tanzanian law.

All tournament data (email + alias) is retained only for the duration of the event and prize distribution, after which it is anonymized or deleted.

7. Your Privacy Rights (Worldwide)

Depending on your location, you may have the following rights under GDPR, CCPA, or other applicable laws:

• Right to Access: Request a copy of your personal data.
• Right to Rectification: Correct inaccurate data.
• Right to Erasure (“Right to be Forgotten”): Ask us to delete your data.
• Right to Data Portability: Receive your data in a machine-readable format.
• Right to Object / Withdraw Consent: You can stop processing at any time.

For parents: you may review, delete, or refuse further collection of your child’s personal information by contacting us. We never condition a child’s participation on disclosing more information than is reasonably necessary.

8. Google Play & App Store Compliance

Our mobile games are published on Google Play Store and are designed to meet all requirements for the “Designed for Families” program and the global audience. This privacy policy is linked from the Google Play store listing and within the app settings. Key assurances for Google:

• We provide a clear, accessible privacy policy (this document).
• We disclose data collection practices transparently — minimal data collected, no permanent device identifiers for children apps.
• We have a designated Data Protection Officer (DPO) reachable at dpo@sanaalab.co.tz.
• No deceptive or harmful content; all games are simple, safe, and suitable for users of all ages.

Our games do not request “READ_PHONE_STATE” or any dangerous permissions. The only permissions used are internet access (for leaderboards) and optional storage for saving game progress locally.

9. Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in our practices or legal obligations. We will notify users via a notice on our website or in-game popup for material changes. The “Effective date” at the top of this policy will be revised accordingly. We encourage parents and players to review this page periodically.

10. Contact Us – Your Privacy Questions Matter

If you have any questions about our privacy practices, want to access or delete your data, or need to report a concern, please contact our Privacy Team:

For complaints related to children’s privacy in the United States, you may also contact the FTC or your local supervisory authority. Residents of the European Union may lodge a complaint with their local Data Protection Authority.