Privacy Policy

1. Information We Collect

When you use the CoakCoak mobile application, we may collect and process the following categories of information:

• Google Account Information (Google Sign-In): When you sign in using your Google Account, we receive your name, email address, Google user identifier, and public profile photo to authenticate and create your account.
• User-Generated Content: Posts, stories, text and audio messages sent in chats, comments, and media files you choose to upload.
• Game & Activity Data: Game moves (such as Chess and Hokm), rankings, scores, and online presence status.
• Technical & Device Data: Device model, operating system version, app version, and Push Notification tokens (Firebase Cloud Messaging) to deliver message alerts.

2. How We Use Your Information

We use the collected information solely for the following purposes:

• To authenticate your identity and provide secure access to your account.
• To facilitate real-time messaging, feed posts, stories, and multiplayer online games.
• To notify you of incoming messages, game moves, and community interactions.
• To detect, prevent, and address security incidents, fraud, and violations of our Terms.

3. Google API Services User Data Policy Compliance

CoakCoak's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use data obtained through Google Workspace APIs or Google Sign-In to train generalized AI or machine learning models.

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information to third parties or advertisers. We only share information with trusted service providers who perform operational functions on our behalf (e.g., secure hosting infrastructure and Google Firebase push notification delivery), strictly under confidentiality obligations.

5. Data Security & Retention

All communications between the mobile application and our servers are encrypted using modern Transport Layer Security (TLS/SSL). We implement strict access controls and industry-standard security practices to safeguard your information.

6. User Rights & Data Deletion

You have the right to access, modify, or permanently delete your account and associated personal data at any time directly through the application's Settings menu. Upon deletion, your profile, messages, and uploaded content will be irreversibly removed from our active databases. You may also contact us via email to request complete data deletion.