Privacy Policy

Effective date: 29 September 2026

This policy explains how Kanzo handles information in our games and apps — including Luma Cafe (مقهى لُمعة) for Android — and on the website kanzo.dev. We wrote it in plain language and based it on what the game’s code actually does.

1. Who we are

Kanzo is an independent game and app studio run by a single developer in Egypt, who is responsible for this policy. For any privacy matter, write to hello@kanzo.dev.

2. What we do not collect

• There are no accounts or logins in our games.
• We do not collect names, email addresses, phone numbers, contacts, photos or precise location.
• The game does not request access to the camera, microphone, files or location.
• We run no game servers and use no analytics or tracking tools of our own; the game’s own code sends no data to us.

3. Data stored on your device

The game saves your progress in its private storage on your device: coins, unlocked cities, upgrades, items you earned or bought, and your settings (sound, music, quality and similar). This data:

• is never sent to us or to any server of ours;
• is not automatically backed up to the cloud (we disabled Android auto-backup), so it is deleted when you uninstall the game and we cannot restore it;
• permanent purchases can be restored from Google Play (see section 5).

4. Advertising (Unity Ads)

The game shows ads through the Unity Ads SDK by Unity Technologies, in two forms:

• Rewarded ads: fully optional — shown only when the player taps to watch, with the reward granted only after a completed view.
• Interstitial ads: occasionally shown at natural breaks (such as travelling between cities), with minimum gaps, and never in the first session. The “Remove Ads” purchase turns them off for good.

What we configure to protect your privacy:

• We ask Unity for non-personalised, non-behavioural ads for every player, and signal that no consent to personalised ads has been given (using the SDK’s GDPR and CCPA settings).
• We removed the Advertising ID permission (AD_ID) and the Android ad-services permissions (ad ID, attribution, topics) from the app. On Android 13 and later this prevents reading Google’s advertising ID; on older versions the system may still make it available to the SDK.

What Unity may process: to serve and measure ads, prevent fraud and cap frequency, Unity may collect technical data such as device model, operating system and language, IP address (and from it an approximate country or region), Unity-generated identifiers, your interaction with ads (views and clicks), and the advertising ID where the system makes it available. Unity processes this data as an independent controller under the Unity Game Player and App User Privacy Policy. You can also use the privacy button inside Unity ads to access or delete your data.

5. In-game purchases (Google Play)

Purchases are optional and handled entirely by Google Play Billing. We never see your card number, name or email. The game only receives what it needs to deliver the item: the product ID, a purchase token and its status (completed or pending), so we can grant the item and later restore permanent purchases. We do not attach any account identifier to purchases. Google processes payments under the Google Privacy Policy.

6. Android permissions

The game requests no other permissions.

7. Children and families

Our games are designed for a general audience, including families, with simple icon-based interfaces. We do not knowingly collect personal information from any user, young or old, and we request non-personalised ads for everyone. If you are a parent and believe your child sent us personal information (for example by email), contact us and we will delete it.

8. The kanzo.dev website

• The site uses no cookies, analytics, trackers or ads.
• Your browser stores only your light/dark theme choice, locally; it is never sent to us.
• The site is hosted on Cloudflare, which processes technical data (such as IP address and browser type) to deliver the site and protect it from attacks, under the Cloudflare Privacy Policy.
• If you email us, we use your address and message only to reply to you.

9. Sharing

We do not sell or rent data. The only parties that may process data while you use our products are those named above (Unity, Google and Cloudflare), each under its own policy. We may disclose information if required by law.

10. Retention and deletion

• Game data: on your device — delete it by uninstalling the game or clearing its data in Android settings.
• Unity and Google data: retained by each company under its own policy; you can ask them directly to delete it.
• Emails: kept as long as needed to reply and follow up, and deleted on request.

11. Your rights

Depending on where you live (for example Egypt’s Personal Data Protection Law No. 151 of 2020, the EU/UK GDPR, or California law), you may have the right to access, correct or delete your data, or to object to its processing. Because we hold no gameplay data, requests about ads go to Unity and requests about payments go to Google — email us and we will help.

12. Security

We minimise data, and the website is served over HTTPS only. No transmission or storage method is 100% secure, but we choose partners that follow recognised security standards.

13. Changes to this policy

If we change how we handle data (for example by adding a consent screen for personalised ads, or a new feature), we will update this page and the effective date above before the change takes effect.

14. Contact

For any question or request: hello@kanzo.dev. If translations differ, the Arabic text prevails.