Effective date: 14 October 2026. This policy covers the Think Kenyan mobile game and kenyanthink.netlify.app, including Wavelength invitations and browser responses. Think Kenyan is the operator’s public trading name, not a claim of incorporation. Contact: thinkkenyan@gmail.com.
Information we handle
- On your device: game progress, completed levels, scores, token balance, settings, saved challenge/room recovery information and anonymous session credentials. Browser storage also holds response receipts and the chosen answer/name for retry and recovery.
- Online social play: Supabase creates a pseudonymous authentication identifier without requiring an email or password. We store challenge and room identifiers, optional nicknames, submitted slider positions, results, player membership, scores, timestamps and game status. “Anonymous” means no chosen display name; it does not mean that no identifier is processed.
- Technical information: requests to our hosting, authentication, database and advertising providers can include IP address, browser/device information and request/security logs.
- Support: when you email us, we receive your email address, message and any attachments you choose to send. Do not send passwords, session tokens or sensitive identity documents.
The current native release has no live billing or native advertising SDK. We do not request contacts, precise location, camera or microphone access for gameplay. Website advertising is separate from native gameplay; browser views may display the website and its advertising.
Purposes and legal grounds
We process gameplay/session information to provide requested games, authenticate anonymous players, recover interrupted submissions and calculate results. We use necessary technical information for security, fraud prevention, reliability and responding to support requests. Where applicable, this relies on providing the service you request and legitimate interests balanced against your rights. Optional advertising storage/personalisation requires consent where required by law; consent can be withdrawn. We may also process information to meet legal obligations.
Who can see your social activity
A Quick Challenge creator can see respondents’ chosen names, answers and comparison results. A respondent can see their comparison with the creator after submitting. Room participants can see nicknames, revealed answers, scores and standings according to the game’s reveal stages. People with an invitation link/code can open its invitation information and may join or answer while it is active. Share links only with intended players; avoid putting private information in nicknames. We do not promise that other players will delete screenshots or information they have already received.
Providers, sharing and international processing
We use Supabase for anonymous authentication, database and live social features; Netlify for website delivery; and Google AdSense for website advertising. Support email is handled through Gmail. These providers may process information outside Kenya, subject to their applicable agreements, safeguards and policies. We do not sell gameplay records or provide nicknames/slider answers to Google for ad targeting. We may disclose information when legally required or necessary to protect users and the service.
Website advertising and storage
The responder includes Google AdSense code. If ads are served, Google and its partners may use cookies, web beacons, IP addresses or other identifiers to deliver and measure ads and, where permitted, personalise them. Read how Google uses information from partner sites and Google’s privacy policy. Manage Google ad preferences at My Ad Center. Browser settings can block or remove cookies/storage. Required consent messages and available advertising privacy controls govern optional processing; this notice does not itself grant advertising consent.
Local session/receipt storage supports authentication, duplicate-answer protection and recovery. Clearing it may prevent us from reconnecting you with previous anonymous records. The policy, terms and deletion-request pages do not load advertising or gameplay session scripts.
Retention
Local data stays until cleared by you, your browser/device or app removal, subject to operating-system backup behaviour. Online challenge, response, room and anonymous authentication records currently have no automatic age-based purge. A challenge expiring stops new responses; it does not erase its records. We retain these records to provide recovery and results, and review deletion requests rather than promising automatic deletion that is not implemented. Support correspondence is retained while needed to resolve requests and associated disputes. Provider logs and backups follow the relevant provider’s configured lifecycle. Legal/security retention may apply; when it does, we will explain the reason and scope in our response where permitted.
Your choices and rights
You can play offline modes without creating online social records, omit your nickname, decline optional advertising consent where available, and clear local app/site data. To request access, correction, deletion, restriction or objection, or withdraw consent, contact thinkkenyan@gmail.com. Applicable rights may also include portability and complaining to a supervisory authority, including Kenya’s Office of the Data Protection Commissioner. We may ask for proportionate evidence linking you to an anonymous record, without requesting authentication secrets. Clearing local storage is not a request to delete server records.
See data deletion requests for instructions. There is currently no self-service server deletion control. We respond without undue delay and within applicable statutory periods; we explain any inability to verify ownership or legally required exception. Copies already received by other players are outside our control.
Children, security and changes
The service is not designed for children under 13. If you are under the age at which you can independently consent in your country, use online features only with a parent or guardian’s involvement. Parents can contact us about a child’s information. We do not knowingly use children’s information to personalise advertising. This statement does not replace the age/audience settings required by stores and advertising providers.
We use HTTPS, authenticated social requests and database access controls. No system is completely secure. We update this policy when practices change, revise the effective date and provide additional notice or consent where required. New SDKs, purchases or collection purposes will require updated disclosures before release.