ta7dyelkora-legal

Privacy Policy for Ta7dy El-Kora (تحدي الكورة)

Effective date: 2026-05-25 Last updated: 2026-05-25

This Privacy Policy explains how Ta7dy El-Kora (“the App”, “we”, “us”) collects, uses, and protects your information. By using the App, you agree to the practices described below.

If you have questions about this policy, contact us at:

Email: ta7dyelkora.support@gmail.com

1. Information We Collect

When you create an account or use the App, we collect:

Data	Source	Purpose
Email address	You provide it during sign-up, or it comes from Google Sign-In	Account identity and login
Display name (username)	You provide it during sign-up, or it is auto-generated from your Google profile name	Identifying you in matches against other players
Phone number (optional)	You provide it during sign-up	Account recovery only — never shared
Authentication tokens	Generated by Supabase when you sign in	Keeping you signed in across sessions
Game activity (match results, scores, level, experience points, in-game currency)	Generated automatically as you play	Showing your stats, calculating progress, and matchmaking

We do not collect:

Your location
Your contacts
Photos, files, or media (the in-app profile avatar is a default image — you do not upload your own)
Camera or microphone data
Device identifiers beyond what is needed for authentication
Browsing or app-usage history outside the App
Payment information (the App contains no purchases at this time)

2. How We Use Your Information

We use the data above to:

Authenticate you and keep you signed in
Display your profile and game progress to you
Show your username to other players you are matched with
Enable real-time multiplayer matches by syncing game state between you and your opponent
Improve the App by diagnosing technical issues (when crashes occur, basic error information is logged on our backend; no personal data is included)

We do not sell your personal data, and we do not use it for advertising.

3. Third-Party Services

The App relies on the following third-party services. Each has its own privacy policy:

Supabase (database, authentication, file storage, realtime sync) — Supabase Privacy Policy
Google Sign-In (optional sign-in method) — Google Privacy Policy
Google Play Services (required by the Android system) — Google Privacy Policy

When you sign in with Google, Google shares your email address and basic profile information (name, profile picture URL) with the App. We do not access your contacts, Gmail, or other Google services data.

4. Data Storage and Security

Your data is stored on Supabase servers (currently hosted in the European Union region).
All communication between the App and our backend is encrypted in transit using HTTPS/TLS.
Passwords (if you use email/password sign-up) are hashed by Supabase and are never stored in plain text. We cannot recover your password — we can only reset it.
We follow standard industry practices to protect your data, but no system is 100% secure. Use the App at your own risk.

5. Data Retention

Active accounts: your data is retained for as long as your account exists.
Deleted accounts: see Section 6 below.
Inactive accounts: we currently do not automatically delete accounts based on inactivity. This may change in the future, with notice.

6. Account Deletion

You can delete your account at any time directly from inside the App:

Open the App and sign in.
Go to the Profile screen.
Tap Delete Account.
Confirm the deletion in the dialog that appears.

When you delete your account, the following are permanently removed:

Your account row (email, username, phone number, level, experience, in-game currency)
Your authentication session

The following are retained in anonymized form:

Historical match records (game results, scores) that involved you remain in the database, because your past opponents depend on them for their own match history. Your username may still appear in these records, but no other personally identifying information (email, phone, profile picture) remains.

If you are unable to use the in-app deletion for any reason, you can also request deletion by email:

Email: ta7dyelkora.support@gmail.com Subject line: Account Deletion Request Include: the email address associated with your account Response time: within 7 days

7. Children’s Privacy

The App is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Your Rights

Depending on where you live, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion (see Section 6)
Object to certain uses of your data
Lodge a complaint with your local data protection authority

To exercise any of these rights, email us at ta7dyelkora.support@gmail.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Material changes will be announced inside the App when you next open it.

10. Contact

For any privacy-related questions or requests, contact:

Email: ta7dyelkora.support@gmail.com