Kalimat — Privacy Policy

Effective 20 June 2026

Kalimat is a trilingual (French, English, Arabic) word-guessing game published by the Kalimat team ("we", "us"). This policy explains what we collect, why, and the choices you have. Questions: [email protected].

1. What we collect

If you sign in via Google Sign-In or Sign in with Apple, we receive and store:

• your email address,
• your display name and profile picture URL,
• an account identifier from your chosen sign-in provider, used to recognise you on return.

We do not receive or store your Google or Apple password. From this we create a Kalimat account: a username ("handle"), and a session token that keeps you signed in.

Gameplay data we record as you play (for signed-in and signed-out players alike):

• words attempted, guesses submitted, whether you solved, time taken, hints/jokers used, and difficulty/theme of each word;
• game and match results, scores, and rankings;
• word feedback you choose to submit.

If you play without signing in, this gameplay data is tied to a random anonymous identifier generated on your device, not to your name or email.

Social features (signed-in only): friends, friend requests, and game-room invites you send or receive.

Push notifications (if you enable them): we store a push token and your device platform (iOS/Android) so we can notify you of game invites.

2. What we do NOT collect

• No passwords.
• No advertising identifiers, and no third-party advertising or analytics SDKs.
• No location tracking, no contacts, no device fingerprinting.
• We do not sell your data, ever.

3. How we use it

• To run the game: track progress, scores, leaderboards, and multiplayer rooms.
• To improve content: aggregated gameplay telemetry helps us calibrate word difficulty and fix bad clues.
• To send game-invite notifications you opt into.

4. Who we share it with

We use a small number of service providers to operate the app. They process data only to provide their service to us:

• Google or Apple — authentication, depending on the sign-in method you choose.
• Expo — delivery of push notifications (receives your push token and the notification text).
• Our hosting provider (Railway) — runs our servers and database.

That is the complete list. We share data with no one else, and we never sell it.

5. Data retention & deletion

We keep your account and gameplay data until you delete it. You can delete your account from the Profile screen in Kalimat. You may also see our account deletion page or email [email protected]. Deleting your account removes your profile, game history, telemetry, feedback, friends, invites, and push tokens.

6. Children

Kalimat is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact us and we will delete it.

7. Your rights

You can request access to, correction of, or deletion of your personal data by emailing [email protected].

8. Changes

We may update this policy; we will post the new version here and update the effective date above.

9. Contact

[email protected]