Privacy Policy

Last updated: 2026-11-05

This policy explains what data the Fawra game on Google Play, the App Store and fawra.io collects, why, who we share it with, how long we keep it and how you can delete it. Fawra is developed and operated by the Fawra team, the registered developer of the app on both stores. We only collect what the game needs to work.

Data we collect

• Random device ID: a random value the app creates on first launch and keeps on your device. It is not your hardware ID or advertising ID; it signs you in as a guest.
• Account data: your display name, and your username and password if you register. Passwords are stored as a one-way hash; we never see them.
• Player number: a 9-digit number assigned automatically so friends can add you.
• Gameplay data: XP, rank, matches played and wins, and match records (seats, moves and result) to keep games fair and review reports.
• Social data: your friends, friend requests, table invites (they expire after 10 minutes), clan membership, and your last activity time so friends see you online.
• Safety and moderation: reports you submit about a player name, clan, message or behavior; the short details you provide; and the moderation decision log. We also store the players you block so the block can be enforced.
• External deletion requests: the player code and contact email submitted through the account deletion page. We keep these until the request is resolved, then remove them from the request record.
• Purchases: product ID, transaction ID and the receipt from the App Store or Google Play, which we verify with the store before crediting coins, gems or VIP. We never receive your card details.
• Optional notifications: after you opt in, we store your push registration token, a random installation ID and device platform to associate notifications with your account. You can turn them off in Settings; device registration is removed when you opt out or delete your account. We do not use these tokens to track you across apps.
• Store financial reports: we import amounts, currencies, products and reporting periods for accounting. Buyer addresses and card details are not imported into the command center.
• Technical logs: server errors with your account ID so we can fix problems. Your IP address is used briefly to limit abuse and is not stored in your profile.
• Advertising ID (ads only): when ads are shown, Google AdMob may read your Android device's advertising ID to measure ads, limit how often they appear and prevent fraud. Our servers never receive or store it. On iPhone and iPad we do not request tracking permission, so the advertising identifier is not available to ads.

How we use data

• To run your account, sign you in and save your progress.
• For matchmaking, ranks and competitions, and to show you to your friends and clan.
• To verify purchases and deliver what you bought.
• For safety: reviewing reports, enforcing blocks and preventing cheating and abuse.
• To send the notifications you opted in to.
• To fix errors and protect our servers.
• To show non-personalised ads.

We do not use your data to build a marketing profile, and we make no automated decisions about you with legal effects.

Data that stays on your device

• Profile photo: picked from your photo library and saved on your device only; it is never uploaded.
• Settings: sound, haptics, language and appearance.

Advertising

• The game may show non-personalised ads served by Google AdMob, and direct ads from stores we work with. The Fawra team controls where ads appear and can turn them off.
• Google processes technical data such as your IP address, device type and advertising ID to serve and measure ads and to prevent fraud, under Google's privacy policy: https://policies.google.com/technologies/partner-sites
• We do not share your name or account details with Google, and we use no third-party analytics.
• You can reset or delete your advertising ID in your device settings (on Android: Settings → Privacy → Ads).
• Tapping a store ad opens that store's own website, which has its own policy.

What we do not do

• We do not sell your data or share it for marketing, and we do not track you across other apps or websites.
• Quick chat at the table uses preset phrases delivered live to the players; we do not keep a chat history. If you submit a report, we keep only the details you included with that report.

Who we share data with

• Apple and Google: to verify purchases, reconcile financial reports, and deliver optional notifications through Firebase Cloud Messaging and Apple Push Notification service. The messaging provider receives the device token, notification content and technical data needed for delivery.
• Google for ads: as described under Advertising.
• Our hosting provider: runs our servers and database and processes data only on our instructions.
• Other players: see your display name, rank, player number, clan tag and online status.
• Authorities: only when the law requires it.

How we protect your data

• All traffic between the app and our servers is encrypted (HTTPS).
• Passwords are stored as a one-way hash.
• Access to data is limited to authorised Fawra staff, each with a personal account, and every action is logged.
• Our servers are behind a firewall and backed up regularly.

No method of protection is 100% secure, but we work to protect your data and will notify you where the law requires.

Deleting your account

You can delete your account at any time in Settings → Delete account. If you cannot sign in, use the account deletion request page: https://fawra.io/account-deletion

Once ownership is verified, deletion permanently removes your account, name, username, password, player number, progress, friends, requests, invites, clan membership and block list. We retain purchase and coin-ledger records needed for accounting and fraud prevention after removing their account identifier. We may retain moderation reports and decisions without a link to the deleted account for safety. Personal details on the deletion request are removed when it is resolved. Coins and VIP time are not refunded after deletion.

Retention

• Account and gameplay data: while your account exists; deleted when you delete it.
• Backups: deleted automatically after 14 days, so deleted data leaves the backups within that time.
• Technical logs: kept briefly and overwritten automatically.
• Deletion request details: until the request is resolved.

Your choices and rights

• Ask for a copy of your data, or for it to be corrected or deleted, by email (below).
• Turn notifications off in Settings at any time.
• Reset your advertising ID in your device settings.

We answer requests within 30 days and may ask you to prove you own the account.

Children

Fawra is a family card game and is not directed at children under 13. We do not knowingly collect more from them than described here. If you learn that a child under 13 has given us data, contact us and we will delete it.

Where data is processed

Data may be stored and processed on our hosting provider's servers outside your country, with the protections described in this policy.

Changes

We may update this policy; the date at the top shows the latest version, and we announce significant changes inside the game.

Contact

For any question or request about your data, email: fawra.support@gmail.com