Privacy Policy

The controller of your personal data is Marcin Ziółkowski, a natural person resident in Poland. Privacy contact: support@kondavo.com - write there to exercise any right in section 6, and a postal address will be given on request.

The game is published under the name Tandevis, which is a trading name of Marcin Ziółkowski and not a separate company. If a store listing shows Tandevis as the developer, the controller named above is who stands behind it.

Should this ever pass to a company, the change will be announced in the app before it takes effect and this section will name the company.

Created automatically on first launch: a random player identifier and a device session token, plus a generated nickname and avatar. Both are yours to change. Nothing here identifies you personally, and the whole game is playable at this level - offline and online.

If you link an account (optional): your Google or Apple account identifier, and your e-mail address when it arrives with the Google or Apple account. Passwords never reach us.

Gameplay: game records (moves and results; for online games also how long each move took, the clocks, the game pace, both players' ratings before and after, and how the game ended), records of solving puzzles and Academy tasks (which position, the result, the number of tries, the time taken and whether a hint was used), ratings and statistics, your friend code, friends list, invitations and blocks, and the in-game wallet with a complete ledger of virtual-currency transactions.

Purchases: handled entirely by Google Play and the App Store. Card details never reach us. What is stored is the store's transaction identifier, which is what makes a purchase deliverable and verifiable.

Push notifications (optional): a device token, and only after you grant the system permission.

Technical and analytics data: crash reports and usage events, and advertising identifiers as handled by Google AdMob - each according to the consents given in the privacy form shown in the app.

Connection data: our server sees the IP address of every connection. It is used to limit abuse - for example, too many connections from one address - and appears in server access logs, which serve security and nothing else.

Improving the game. Records of online games and of solving puzzles and Academy tasks (section 2) are also used to make the opponent in Play vs computer, game review, puzzles and the Academy better - for example, to judge how hard a puzzle is or which lesson to suggest next. This includes training statistical models (machine learning). Models are trained on pseudonymised records: in place of you they carry a random identifier, never your nickname, e-mail address or sign-in account.

Our legitimate interest is a better game for the people who play it. These records are not used for advertising and are not sold. A model only helps choose things like the next lesson or how hard a puzzle is; it does not decide anything about your account on its own - if one ever flags a game as suspicious, a person looks at it before anything happens. Nothing is kept longer for this purpose: a record is used only while it is kept anyway (section 5).

You can object to this at any time, without giving a reason: write to support@kondavo.com with your friend code, and from then on your records are left out. Records of a deleted account are left out too.

Only the processors needed to run the service: Google (Google Play, Firebase, AdMob), Apple (App Store, Sign in with Apple), GameAnalytics ApS, and Google Cloud, which hosts the game servers and the database in the europe-central2 region in Warsaw. Transfers outside the European Economic Area rely on those providers' standard contractual clauses.

Your data is not sold, and it is not shared with anyone for their own purposes.

Account and profile data: until you delete the account.

Deleting your account (Profile → Delete account) removes sign-in identities, sessions, push tokens, the wallet, ratings and the friends graph, and anonymises the profile. Game and transaction records may remain in pseudonymised form, because a ledger that can be edited after the fact is not a ledger - and because accounting records have their own retention rules.

Game records: the moves for 365 days and the game itself for 730 days, also after an account is deleted.

Crash reports and analytics: for the retention periods of the providers that hold them.

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time - withdrawal does not undo processing that already happened lawfully. Advertising consents can be changed at any time in Settings → Privacy. You may lodge a complaint with a supervisory authority, in particular in the country where you live or work or where the infringement took place; in Poland that is the President of the Personal Data Protection Office.

How to object to the use of your records for improving the game is in section 3.

Finished games export as PDN, the plain-text notation the draughts world has long used, from inside the app. That is portability in the form that is actually useful.

The app is not directed at children under 13. Children's data is not knowingly collected; if you believe a child under 13 has provided data, write to support@kondavo.com and it will be deleted.

If you are younger than the age at which the law of your country lets you consent to data processing on your own (16 in Poland), the optional consents in the app - personalised advertising, analytics and push notifications - must be given or approved by a parent or legal guardian.

Material changes are announced in the app. The current version is always at kondavo.com/privacy.

This policy is published in several languages. If a translation differs from the Polish version, the Polish version prevails.